Tag Archive: REGISTERED

How WordPress Spam Works

WordPress Comment Spam

The plague of all blogs is spam, mainly comment spam, by sheer numerical superiority.

Q.  Why Do They Do It?

A. As a minimum, they do it to open a back-door into your blog that allows the perpetrator to place reverse linkages to another website to increase that website’s visibility in search engine results (so called “Search Engine Optimisation” – SEO ).  This back-linkage they use to increase website search hits, which they can charge an ignorant website beginner big money for.

At the worst, the culprit would gain full access to the blog allowing free posting and deletions or even the complete removal of your website content.

Today’s Example

Today, I got a comment that made me check further as notionally, it looked okay-ish. These are the details (click image for full-size view of the comment as it appears in the WordPress admin section):

Comment Spam Example

Comment Spam Example

The Jacksonville lawyer is in Florida and has this website; http://www.divorceyes.com/index.html, and the actual comment is pretty kosher, although brief, saying;

Strangely you have made an awesome post and i appreciate your work and keep it up. Thanks for sharing this with us.

This is all very nice, but check out the IP address….

WHOIS 113.203.135.140

By checking the WHOIS for this, we see that the IP Address for this supposedly reputable Florida lawyer (Divorce Yes) is in Karachi, Pakistan!  Well are they?  My guess, given the cheap web costs in the USA, is that Divorce Yes is in the US and that they wouldn’t for an instant even consider anywhere else!

And so it is!  The actual WHOIS for Divorce Yes is in Florida!  (The actual WHOIS for the web-hosting, fortehosting.com is in Illinois).  The registrant’s name (Miller) also agrees with the Divorce Yes’s contact details here, but note; the email address in the comment, [email protected], is not the same as the email address on the contact page, which is [email protected]

Registrant:

jeff miller

1019 grand court

highland beach, Florida 33487

United States

Registered through: GoDaddy.com, Inc. https://uk.godaddy.com/)

Domain Name: DIVORCEYES.COM

Created on: 07-Jun-05

Expires on: 07-Jun-16

Last Updated on: 17-Feb-07

Administrative Contact:

miller, jeff [email protected]

1019 grand court

highland beach, Florida 33487

United States

(561) 445-6962 Fax — (561) 347-7588

Technical Contact:

miller, jeff [email protected]

1019 grand court

highland beach, Florida 33487

United States

(561) 445-6962 Fax — (561) 347-7588

Domain servers in listed order:

NS1.FORTEHOSTING.COM

NS2.FORTEHOSTING.COM

Conclusion

There isn’t a conclusion really.  This is just an example of the way that text harvesting is being used to make seemingly intelligent comments slip past the comment filters on a WordPress blog.

As many of these filters rely on an IP address, if the webmaster lets a dodgy IP address through just once then it’ll be marked as “good” by the filters which will then allow the spammer to post even more comments, all for the various nefarious reasons that I mentioned first.

This is why I use a plugin like WP-SpamFree, and using it I can block all incoming pings from a given IP address, in this case, 113.203.135.140!

For interest, I’ve edited out the back-link from the spam comment above and you can find it on this post, Pacific Webworks, Lawyers and Social Networking, here.

Alternative Conclusion

This isn’t a conclusion again, but my examination of alternative possibilities, but note the following:

  • The Divorce Yes website is made and SEO’d by http://enettechnologies.com/.
  • WordPress is used on the website.
  • Many WordPress plugins exist to “improve” the SEO of a website.  (I use some!)
    • Some do it by ensuring meta and other data is added if it’s missing.
    • Others have sprung up over the last few years that “intelligently” link to other websites….  they harvest websites for text and linkages for later use, much like email spammers scan websites for email addresses to spam.  [n.b.  I use PHPEnkoder from Michael Greenberg to hide email addresses on this site from email address harvesters.]

It could be, although I cannot prove or disprove it, but because some of this spam I receive is now pretty readable as with this one above, that plugins are being used for much of the hits I get.  This comment  could be such an example, or the law website name is being used textually as a smokescreen for the Pakistani spammer.  I see lots of adverts along these lines that couldn’t possibly rely on manual  human link placements for their effectiveness….

I’d be interested to hear from Miller Law or their website designer on this one.  It’s not the first time that I’ve had reputable businesses appear on my website like this and I’d like to know what it appears like at their end, if at all.  It does make me wonder if this very website is being used to cloak spam at other websites in the same manner.

This is why I’ve left all URL back-links to the parties in place so that they’ll see them in their logs.

Related Posts:

Comments are closed

The Three Rules of Trust – Using SwipeAuctions/Bids as an Example

Introduction

There’s a well-known adage that says,

Don’t believe everything you read in the papers (Point 1)

Another, (which is derived from the mantra of the old UK stock market) goes like,

An Englishman’s word is his bond (Point 2)

Make what you want of them, but many people still go by this, replacing “An Englishman’s” with the word “MY”.

The Need for New Rules of Trust

The internet has made the job of snake oil salesmen, gangsters and other assorted conmen so much easier that the adages need to be re-thought and rules written.  It’s a bit like Isaac Asimov’s Rules of Robotics.   Here are mine, but please note the notes just below….

Note 1: All on-line businesses are required to reveal their correct identity through the WHOIS process.  The only exclusions are for private non-trading individuals in certain countries.  (Some people have a bit of a debate about this, but when you sign up for a domain, you’ll see!)

Note 2: The internet, (or world wide web), by its very nature is like the newspaper business – see Point 1 above!

Note 3: There is a consensus among decent people and a certain legality regarding tax etc., that most legitimate businesses would like to be known and contactable, or else they appear like spiv barrow boys on the make.

Note 4: There is no note 4… yet.

The New Rules of Trust

Rule 1:

Do not believe anything on-line without double or treble checking as a minimum.

Rule 2:

For any business that hides its WHOIS entry, do not believe anything that they say!!

Rule 2 and a half:

For any business that previously hid their WHOIS entry and later chooses to reveal it – same as Rule 2!

Example: Jesse Willms and his “businesses”

n.b. This is one example.  This whole web area is currently ballooning and Willms is not alone!

  • A business that is anonymous, is on the edge of trust. (Willms’ businesses have previously been cloaked in the main.  Only recently have they had publicly exposed WHOIS records.)
  • A business that uses false or misleading advertising, is on the edge of trust. (This very website is plagued by dodgy adverts, for which I apologise – it takes some time for the Google adwords filters to kick into play.)

The infamous Jesse Willms got his internet start by selling counterfeit software from Microsoft and Symantech (at least), and for which he had to pay oodles of dollars in damages.

Note: Willms translates this information on his website fluffs like so:

Before becoming a philanthropist, Willms was known for starting his first business – buying and selling computers and software when he was 16 – and launching several Internet companies by the time he was 22.  see http://jessewillms.com/ & link & link (two links WHOIS hidden)

His current activities are in the business of skirting the lotteries and gambling laws with On-line “Bid” “Auctions”.   These (and Willms is only one of many) are so far removed from the normal concept of an auction that they are more like Bingo.

In tandem with this he’s promoting himself as an internet good guy while still hypocritically continuing along the same vein of his previous activities. Like so…

His previous businesses included flogging green tea and acai fruits to either clean your bowels or make you thin with rippling muscles, and nicking the idea of and ruining the rotten business of a teeth whitening company, for which there have been sues and counter-sues which were resolved “with prejudice” as the wigs say (see link courtesy of @Justin Asking).

Like many fly-by-night websites, these were all promoted and run:

  • via email spam from a plethora of hidden marketing businesses, some of which he may or may not have had direct control although he admits to having close contact….(see info from @Justin Asking again)
  • via fake websites in the form of informational blogs or news websites designed to appear as such, although minutely disclaimered as otherwise – good link with screenshots here and another hereThese first two are run under the concept of “affiliate marketing” which harbours a whole realm of fly-by-night operations with virtually no scruples or accountability.  Someone once remarked that managing affiliates was like herding cats….
  • via a plethora of drop-point contact addresses, widely dispersed around the globe having no relevance to site visitors’ locations.
  • via a plethora of dubious phone number contacts of highly variable functionality.
  • with an early predilection for multiple un-called for monetary withdrawals from customer credit accounts
  • with a penchant for rapidly changing website names that came and went faster than the seasons although much of the modus operandi and contact points would remain unaltered – a good test for these is that the registration period is generally only a year.

Swipe Offerings

SwipeBids.com which kicked off at the end of 2009 soon morphed into SwipeAuctions.com  (see final point above!)  How long this lasts is anyone’s guess… (p.s. swipebids domain expires soon).

Willms' Latest Fib

Currently, you’ll find that SwipeBids.com now redirects back to SwipeAuctions.com at a “prelogin” page.  There, sit a heap of hysterically hypocritical statements right on this front page – see screenshot on the left and dissection below!

This website is Jesse Willms’ latest saucy effort at world domination! Tied in with this has been a massive internet hype of “Jesse Willms, the caring philantropist”.

The plethora of websites for which he’s been loathed continues in the myriad of hype sites and linkage referrals containing the vomit inducing self-promotional bilge, plus a continuing swathe of fake news websites.

Uncharacteristically, he sticks with only one “bid auction” website…?  Hmm?  (p.s. since this was written, the site has been pulled although rumours are rife about a new startup…!)

Meanwhile, like snake oil, the Swipe-Bid-Auction scam has proved very enticing to all the scum of the earth and has turned into a veritable plague…  (p.s. since this was written, the plague of copycat sites is now a deluge)

Bid Auction Scum Fight it Out – it’s Getting Dirty

Dirty?

Yep! There’s a veritable bidding war going on to get to the top of the Google search results and the Facebook sidebar.  As noted elsewhere, BidSauce.com has joined the affray and Willms’ lawyers have been issuing writs a-plenty.

Amongst others…..  How so?

A. Well do a Google search for BidSauce.com, SwipeAuctions.com & SwipeBids.com (click links to see results – my results today are below), and you’ll see what I mean.

BidSauce.com

SwipeAuctions.com

SwipeBids.com

Bid Auction Scum New Kids on the Block

My results show the following paid for ads on Google and their WHOIS hidden status.

BidSauce.com

Bidhere.com – Hidden

Biddi.com – disclosed UK company, KSB Trading Ltd

SwipeAuctions.com

SwipeAuctions-Register.com – Hidden!  It also redirects to SwipeAuctions.com which is registered in California.  Check out this info from @Not Kevin for an earlier version of the listings.

MadBid.com – disclosed as Marcandi Ltd in the UK

Bidhere.com – Hidden (again!)

SwipeBids.com

No paid for ads at the top but some of the above appear in the right-side advert box of paid for ads.  Interestingly, swipeauctions.com is top!

What Does it Mean and What Should I Do?

puZZleMean? It means that many people have seen this “bid-auction” as a good bandwagon to join, while it lasts!

Do? What I do is click on the paid for ads as much as possible! These ads are costing well over a pound to place and it costs those businesses for every click!!!   (n.b. if you think I’m being hypocritical in allowing similar ads onto this website, then read my privacy policy.)

If it’s Facebook where I see the ad, I also click on it so that it fires up in a new window so the geezers have to pay again, then I click the cross next to the advert and report the adverts as “Misleading” – because, from all my research as seen on this website and others, plus the example searches shown above, they are all misleading.

Penny/Bid Auctions Mislead?

They mislead as it’s gambling, not an auction.

They mislead as you pay to enter the auction at each step, it’s not a bid.

They take money in advance – no auction does this, even one for a Van Gogh or an old wardrobe, because anyone can bid!

Swipe Auctions Duff Photo Evidence

Willms' Latest Fib (at the bottom)

Yep! At the bottom of his new landing page of swipeauctions.com, under “picture testimonials” Jesse states, today:

Each and every testimonial on the site should have a picture of the customer who sent it in. You can only use someone’s picture with his or her permission, so if there is a photo you can be sure the testimonial is legitimate. If there is no photo, the site’s management could have written a false testimonial.

Compare and contrast with my screen-shots of his website here where I explicitly show the fake photos from a testimonial: http://strangelyperfect.tv/7955/facebook-msnbc-jesse-willms-swipe-auctions-and-doctored-photos/ –   these photos are from an affiliate’s website about which there is some conflict of ownership evidence.

And compare Jesse’s fine words with the fantastic investigative ScamRaiders revelation that the picture of an “auctioned” Honda as used on his website was taken and then Photo-shopped even before the website was set up!!!

Don’t you just love it when the creeps are so blatantly bad? !!

Suggested Further Reading

http://www.webcops.net/just_think_media_spam_scams_8001.html – Best expose on early Willms’ scams.  How he threatened legal action as his whereabouts were exposed.

http://strangelyperfect.tv/7955/facebook-msnbc-jesse-willms-swipe-auctions-and-doctored-photos/#comments-2834 – info on the incarnations and IP addresses of Willms’ Swipe**** sites  (I am currently taking legal advice on this article so it’s withdrawn pending notice.  Contact me for its contents which most right-minded folk would consider fair and accurate reporting.)

http://www.jimlillig.com/internet-marketing/abcs-news-2020-features-jesse-willms-among-others-in-alleged-deceptive-practices-story/ – smiling Jesse is exposed by “the CPA Guy”  n.b. currently offline but transcribed here courtesy of this link.

http://www.bbbroundup.com/ – discredits much of the BBB rating system and how entries flip and change due to possible business collusion.

http://www.walletpop.com/blog/2010/09/14/better-business-bureau-risks-losing-credibility-over-ratings-co/ – more info on BBB ratings not being what they seem…

http://forums.moneysavingexpert.com/showpost.html?p=36648669&postcount=22 – comment detailing the above BBB conflict of interests and how Jesse Willms’ businesses generated 2612 complaints at the BBB before they revised his status with his newer websites!  n.b.  This is one of the top UK websites!

http://onlinescamwebsites.com/how-do-penny-auctions-work/ – clearly explains how these “auctions” work

Suggested Reverse IP Checks

Reverse IP checking is a very good indicator that many websites are related in some businesses, commercial or personal sense.  Using this website, this website strangelyperfect.tv shows as follows:

Found 4 domains hosted on the same web server as strangelyperfect.tv (174.120.2.125).

ceinonline.org

crawlingchaos.co.uk

strangelyperfect.tv

www.foetusproducts.com

This is hardly surprising and I make no secret of the fact…

Using this website again, enter these three domains into the box. What you find are a host of probably related dodgy websites, fake blogs and news sites, and other stuff. Look and see!

SWIPEAUCTIONS-REVIEW.COM :2 domains

live9news.com, swipeauctions-review.com

SWIPEAUCTIONS-REGISTER.COM: 101 domains including such gems as:

1r2chat.com 24-7keybank.com  AcaiBerryBurnTrial.com  ColonCleanse4FreeTrial.com  Resveratrol-Resveratrol.com  acaiforceformen.com buy-wii-in-stock.com  buyipodnow.net  buyps4console.com  buyps4now.com  consumerhealthreporter.com  consumernewsreporter.com dazzlesmilefreetrial.com findluxurywatches.com   goboff.com hairexpert.org myhairexpert.org natural-hair-transplant.com  naturalhairtransplant.org swipeauctions-register.com thumoney.com  top3-coloncleanse.com top3-whiteteeth.com  www.buywiinow.net www.findluxurywatches.com www.natural-hair-transplant.com www.thumedia.net  www.thumoney.com  www.top3-resveratrol.com  www.tradeblogger.net

I’ve omitted most of the “foreign” domains.  Make of that what you will but it is noticable that many snake oil websites are to be found grouped under a single IP address.

SWIPEAUCTIONS.COM: has just the canonical and www domains.

Disclaimer

Many things are said above that rope all “bid” “auctions” into the same boat.  While some may have differing operational procedures with perfectly legal transactional and customer services, and may differ in their Terms & Conditions to Jesse Willms’ offerings, I accept those facts.

However, I consider all web-operations in this field of “bid” “auction” to be nothing more than gambling, and they should all be governed by those gambling laws applicable to their country of viewing and business location.


Related Posts:

eBay Success System – Blatant Lie

Introduction

Some time ago I did a little investigation into the spam & scam end of the Google Treasure Chest type schemes, all apparently sourced from Utah in the USA.  See Robert G Allen, Grants, and a Credit Card Slimeball

One benefit of the ensuing deluge of spam that I now receive is that it keeps me abreast of the latest scam methods!

Email Spam

Today I received one addressed to my spam-trap alter-ego, Murdon!  This is it:

  • From: eBay HR [[email protected]]
  • Title: Do you qualify for a paid position with eBay?

Hello Murdon,

To reduce support costs and become more ‘earth friendly’ eBay is shifting the majority of its sales and support teams from internal employees to work at home representatives.

Due to eBay’s new “Remote Employee Initiative” (REI) there are openings for approximately 245 positions.

Earn $6k+ per month + bonuses!

Great Benefits

Never before has a company of this size offered positions that allow the employee to telecommute 100% of the time. Register for your position now.

* Limited number of positions, please apply now if you are interested

Analysis

Truth be told, there’s not much analysis to be done – it’s a blatant lie, from top to bottom!

  1. Firstly, it implies several times that paid positions are available with the eBay company – they’re not.
  2. Secondly, it says that eBay has a new scheme called “Remote Employee Initiative” – click this Google search on the exact phrase – and none exists!
  3. The link isn’t anything like an eBay link…

It actually goes to this page:

http://www.eauctionsuccesssystem.com/index25march09.php?caCode=EBAYSYS5&p=0&caid=14900&cid1=0&cid2=2242&cid3=0&cid4=False&sid=&stID=67&new=1&misc3=6648  after copius redirections.

Now greatmoveonline.org seems to be gaffered here:

Name:Jared Pierce
12152 Gracie View Pl
Draper
UT 84020

Down this street, actually.

– whereas eauctionsuccesssystem.com wishes to remain anonymous behind the “Whois Privacy Protection Service, Inc.” – and we all know what that means, don’t we?

eauctionsuccesssystem.com

eBay Success System Kit header image

eBay Success System Kit header image

These actually proclaim that they’ve been seen on a host of major media companies at the top of their page.  Yeah right!  Switch off the odious actor avatar pretending to be someone called Michael Greene or else you’ll go insane.

In fact, don’t read any further at all without first checking the terms and conditions links at the bottom…

Because you’ll find out that it’s LANETE ENTERPRISES LTD WHOSE REGISTERED ADDRESS IS 3, BELL LANE, GIBRALTAR – again!

..and  “these Terms of Use will be in the courts in Nicosia, Cyprus

Conclusion

Of course, I’ve seen all this before.  What is important is that the spam email is full of several complete and blatant lies. It’s a fraudulent representation of the business of a perfectly legal business entity.  Impersonation, if you like.

Related Posts:

It’s Time to Move

Introduction

  • So it’s time to move…
  • It’s time to get down with it…
  • It’s time to testify..
  • …and I want to know…
  • ARE YOU READY TO TESTIFY?
  • Brothers and sisters…
  • I give you..
  • A testimonial…
  • The MC5!

With a vague resemblance to my personal life and status, and a bit like “technology mirroring life”, this domain will shortly be getting legs and pushing off to a new webhost.

I’ve become increasingly frustrated at the continuing dropouts and waits from my current host, ixWebhosting.  They were okay when I first started on this yabberring into space life, but now, in a typical pitmatic Northumberland phrase, it’s become:

Hard to Bear

This phrase closely mirrors my personal status – initial relationship,bright hopes for the future, increasing frustration, hard to bear – but I’ll leave it at that.

Webhosting

Funnily enough, while checking through the many hosting companies, one in particular made me quake somewhat.  This one is BlueHost.  It looked okay until I saw the address as:

Bluehost Inc.
1958 South 950 East
Provo, UT 84606

Now they may be all fine and dandy, but I’ve seen some pretty dodgy shit hanging around UTAH over the last three months.  It’s not all fresh air and snowy mountains by a long chalk  I can tell you,  after my numerous investigations into Google Treasure Chest and other related scams…  So they are out!

Search Problems

Finding a new web hosting service is a bit like Russian Roulette, actually.  It’s almost as bad as the Google scammers as virtually all reviews are loaded and/or fictional.  Honest truth is very hard to find.  The only way to tell is to jump in and test the boiling snake oil!

So what I have done, is to check hosts from sites that I “trust” and use, making a mental check of any downtimes I’ve come across and noting the general speed of these sites, as that’s important.  (I know my site is overloaded with crap, but hey – I hate chucking stuff out!)

So I’ve plumped for Site5.   Only time will tell if I’ve made the right choice.  It’s servers are in Texas but it’s registered in Colorado – yeeHaH

I’ve got a while to play with stuff.  The backend user interface is totally different to the current setup so it’s another learning experience for me.  The only bit the same is phpAdmin, although they use a newer version with a claimed 50Meg upload size for database imports!

Then it’s a question of copying files, setting FTP, setting emails, setting up databases, installing WordPress, re-jigging wp-config for better security and finally, changing the DNS pointers etc at my domain name registrar.  Maybe I’ll move all images to another domain for faster page loading…?

So I won’t be posting much while I’m doing this, and hopefully, with a nice bit of luck on top of my planning, the site won’t be down for too long while waiting for domain propagation….  Watch this space!

Related Posts:

Comments are closed

© 2007-2017 Strangely Perfect All Rights Reserved