novemberb755.com aka PlayBingoLive.com is still active and scaming people’s email address and passwords. A family member of mine fell for this somehow, and my wife received an invite to play Bingo. My wife asked me if the web site was for real? I checked it and the first thing it does is ask for your email address and password! Be aware that going to www.novemberb755.com doesn’t work, no DNS is set up. Remove the www and you are fine.
A Google search turned up: Don’t give your password to PlayBingoLive.com and I need help with situation at PlayBingoLive.com
Whois Info for novemberb755.com:
Registrant:
Radiance Enterprises
Kosta Ourani, 6
Pera Chorio Nisou, PC 2572
Cyprus
Registered through: MyDomainBook.com
Domain Name: NOVEMBERB755.COM
Created on: 13-Nov-06
Expires on: 13-Nov-07
Last Updated on:
Administrative Contact:
Enterprises, Radiance support@expertservers.net
Kosta Ourani, 6
Pera Chorio Nisou, PC 2572
Cyprus
(800) 949-1828
Technical Contact:
Enterprises, Radiance support@expertservers.net
Kosta Ourani, 6
Pera Chorio Nisou, PC 2572
Cyprus
(800) 949-1828
Domain servers in listed order:
NS1.PBL-SUPPORT.NET
NS2.PBL-SUPPORT.NET
Looking through the novemberb755.com Privacy Policy gave me the link to PlayBingoLive.com. The EULA says the governing law of the web site will be Costa Rica. They also have a prominent link to ReportMySpam.com. That site has no privacy policy, or terms. They just want your email address.
ReportMySpam Whois info:
Domain name: REPORTMYSPAM.COM
Registrant Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Administrative Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Technical Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Status: Locked
Name Servers:
ns3.expertservers.net
ns3.expertservers.net
ns4.expertservers.net
ns4.expertservers.net
Creation date: 11 Aug 2006 16:10:07
Expiration date: 11 Aug 2007 00:00:00
I submitted a virgin address to ReportMySpam.com, we’ll see when it gets spam. Looking at the source code of the page that comes up after entering an opt-out request shows some web bugs with the email address and my IP address being recorded at billionsmachine.com. Again, no www web presence, but leave out the www you get a login prompt. The web bugs were at http://services.billionsmachine.com/ws_reportspam.asp and http://services.billionsmachine.com/ws_getresponse_unsub.asp. Billionsmachine.com Whois info:
Domain name: BILLIONSMACHINE.COM
Registrant Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Administrative Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Technical Contact:
Tech Support
Technical Support (support@expertservers.net)
+1.8009491828
Fax:
PO Box 7334 - 101844
San Francisco, CA 94120-7334
US
Status: Locked
Name Servers:
ns3.expertservers.net
ns3.expertservers.net
ns4.expertservers.net
ns4.expertservers.net
Creation date: 23 Mar 2006 22:47:50
Expiration date: 23 Mar 2007 00:00:00
ExpertServers.net (mentioned in both Whois listings above) does not have a web presence. Their Whois:
Domain name: EXPERTSERVERS.NET
Registrant Contact:
Radiance Enterprises
NULL NULL (NA)
NULL
Fax:
Kosta Ourani, 6
Pera Chorio Nisou, PC 2572
CY
Administrative Contact:
Radiance Enterprises Ltd
Radiance Enterprises (support@expertservers.net)
+1.8009491828
Fax:
Kosta Ourani, 6
Pera Chorio Nisou, P.C. 2572
CY
Technical Contact:
Radiance Enterprises Ltd
Radiance Enterprises (support@expertservers.net)
+1.8009491828
Fax:
Kosta Ourani, 6
Pera Chorio Nisou, P.C. 2572
CY
Status: Locked
Name Servers:
ns1.load.com
ns1.load.com
ns2.load.com
ns2.load.com
Creation date: 06 Dec 2005 16:08:32
Expiration date: 06 Dec 2007 00:00:00
Mike, They are up to novemberb900 now I believe. A search on the isp they use to spam from their victim’s mailbox to their victim’s contacts (secondary victims, lol) shows they are using Wild West Domains as the registrar, and domain was shown as vmachine14.com. Return path was apache@vmachine1a.com, NOT my friends addy…tsk. Isn’t there somewhere we can report this or at LEAST get the word out in a major way?