{"id":5473,"date":"2011-02-25T21:54:26","date_gmt":"2011-02-26T05:54:26","guid":{"rendered":"http:\/\/37prime.wordpress.com\/?p=5473"},"modified":"2011-02-25T21:54:26","modified_gmt":"2011-02-26T05:54:26","slug":"scam-alert-fake-openoffice-org-download","status":"publish","type":"post","link":"https:\/\/37prime.com\/news\/2011\/02\/25\/scam-alert-fake-openoffice-org-download\/","title":{"rendered":"Scam Alert: Fake OpenOffice.org download."},"content":{"rendered":"

I was going through the server log parsing out spammy referrer links and one of the sites triggered a pop-up:<\/p>\n

\"\"<\/a><\/p>\n

First off, the official OpenOffice.org site is in its name: OpenOffice.org<\/a>.<\/p>\n

This galleries.secure-softwaremanager.com must be spreading malwares. It actually checks the Operating System. Since I was using Camino Browser on Mac OS X, it returned an error message:<\/p>\n

\"\"<\/a><\/p>\n

I am adding this url to the site blacklist.<\/p>\n

By the way, if you are looking into downloading OpenOffice.org, you might want to check LibreOffice<\/a>. It is a project forked from OpenOffice.org development.<\/p>\n

Whois information on secure-softwaremanager.com:<\/p>\n

http:\/\/www.networksolutions.com<\/p>\n

Visit AboutUs.org for more information about SECURE-SOFTWAREMANAGER.COM
\n<a href=”http:\/\/www.aboutus.org\/SECURE-SOFTWAREMANAGER.COM”>AboutUs: SECURE-SOFTWAREMANAGER.COM <\/a><\/p>\n

Registrant:
\nPinball Corp
\n3600 1 36th place Se.
\nBellevue, WA 98006
\nUS<\/p>\n

Domain Name: SECURE-SOFTWAREMANAGER.COM<\/p>\n

————————————————————————
\nPromote your business to millions of viewers for only $1 a month
\nLearn how you can get an Enhanced Business Listing here for your domain name.
\nLearn more at http:\/\/www.NetworkSolutions.com\/
\n————————————————————————<\/p>\n

Administrative Contact, Technical Contact:
\nPinball Corp\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0 neteng@pinballcorp.com
\n3600 1 36th place Se.
\nBellevue, WA 98006
\nUS
\n425-279-1200<\/p>\n

Record expires on 08-Dec-2011.
\nRecord created on 08-Dec-2010.
\nDatabase last updated on 26-Feb-2011 00:44:52 EST.<\/p>\n

Domain servers in listed order:<\/p>\n

NS1.PINBALLCORP.COM
\nNS2.PINBALLCORP.COM<\/p><\/blockquote>\n

What is this pinballcorp.com?<\/p>\n

Visit Safenames at www.safenames.net
\n+1 703 574 5313 in the US\/Canada
\n+44 1908 200022 in Europe<\/p>\n

Domain Name: PINBALLCORP.COM<\/p>\n

[REGISTRANT]
\nOrganisation Name: Pinball Corp
\nContact Name:\u00a0\u00a0\u00a0\u00a0\u00a0 William Freeman
\nAddress Line 1:\u00a0\u00a0\u00a0 3600 136th Place SE
\nAddress Line 2:
\nCity \/ Town:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Bellevue
\nState \/ Province:
\nZip \/ Postcode:\u00a0\u00a0\u00a0 WA 98006
\nCountry:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 US
\nTelephone:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 +1.0114252791177
\nFax:
\nEmail:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 wfreeman@pinballcorp.com<\/p>\n

[ADMIN]
\nOrganisation Name: Safenames Ltd
\nContact Name:\u00a0\u00a0\u00a0\u00a0\u00a0 International Domain Administrator
\nAddress Line 1:\u00a0\u00a0\u00a0 PO Box 5085
\nAddress Line 2:
\nCity \/ Town:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Milton Keynes MLO
\nState \/ Province:\u00a0 Bucks
\nZip \/ Postcode:\u00a0\u00a0\u00a0 MK6 3ZE
\nCountry:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 UK
\nTelephone:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 +44.1908200022
\nFax:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 +44.1908325192
\nEmail:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 hostmaster@safenames.net<\/p>\n

[TECHNICAL]
\nOrganisation Name: International Domain Tech
\nContact Name:\u00a0\u00a0\u00a0\u00a0\u00a0 International Domain Tech
\nAddress Line 1:\u00a0\u00a0\u00a0 PO Box 5085
\nAddress Line 2:
\nCity \/ Town:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Milton Keynes MLO
\nState \/ Province:\u00a0 Bucks
\nZip \/ Postcode:\u00a0\u00a0\u00a0 MK6 3ZE
\nCountry:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 UK
\nTelephone:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 +44.1908200022
\nFax:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 +44.1908325192
\nEmail:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tec@safenames.net<\/p>\n

The Data in the Safenames Registrar WHOIS database is provided by Safenames for
\ninformation purposes only, and to assist persons in obtaining information about
\nor related to a domain name registration record.\u00a0 Safenames does not guarantee
\nits accuracy.\u00a0 Additionally, the data may not reflect updates to billing
\ncontact information.<\/p><\/blockquote>\n

As suspected, pinballcorp.com looks fishy.<\/p>\n","protected":false},"excerpt":{"rendered":"

I was going through the server log parsing out spammy referrer links and one of the sites triggered a pop-up: First off, the official OpenOffice.org site is in its name: OpenOffice.org. This galleries.secure-softwaremanager.com must be spreading malwares. It actually checks the Operating System. Since I was using Camino Browser on Mac OS X, it returned … <\/p>\n

Continue reading “Scam Alert: Fake OpenOffice.org download.”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[946,4],"tags":[1859,1966,2216,2511,2619,2648,936,3039,3129],"class_list":["post-5473","post","type-post","status-publish","format-standard","hentry","category-announcements","category-news","tag-libreoffice","tag-malware","tag-openofficeorg","tag-resources","tag-scam","tag-security","tag-tech","tag-troubleshooting","tag-virus"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pcNtU-1qh","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/5473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/comments?post=5473"}],"version-history":[{"count":0,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/5473\/revisions"}],"wp:attachment":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/media?parent=5473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/categories?post=5473"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/tags?post=5473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}