Hello everyone. This is another scam that works similar to a previous “high value electronics goods scam” that I’ve written about in the past. The websites, mostly, look professional and genuine. Take payment and then _never_ send any goods.
This scam seems to revolve around very small transactions (probably small enough that the credit card companies eat the fraud rather than charge it back to the fraudulent retailer). Or possibly they hope that the victims can’t be bothered with the paperwork and phone calls to report the fraud.
Most the goods on the websites are around £30 to £150ish with a rare few slightly higher priced goods mixed in. The page and form asking for credit / debit card payment isn’t even https / secure.
The good news – if you are a victim and you paid by Credit Card (or possibly even Debit Card) your bank is required to refund you!
http://www.ebuy2016.com/ – Seems to focus specifically on USB portable hard disks. Confirmed by victims as a scam.
http://www.betsbuyer.co.uk/ – Seems to sell GPS devices and sports “smart” watches.
http://www.top10tablet.us/ – Seems to sell Samsung Android tablets.
The first two of the above were registered 8th June 2016. The tablet site seems to have been registered 3rd November 2016. All are associated with the same domain registrant and / or have shared code between the domains.
Registered a month before is
https://www.prezzoshop.net/ – This appears to be the main domain name associated with the web hosting account and is another USB portable hard disk scam site aimed at victims in Italy. (18.104.22.168)
Other domains associated with the same scam:
http://www.prixonline.net – Seems to be aimed at French victims.
http://www.solde-tablette.com/ – Another site aimed at French victims.
http://www.tabprix.com/ – Another site aimed at French victims.
http://www.maillot-de-football.com/ – Football kit site aimed at French victims.
http://www.perruque-prix.fr/ – A hair / wig site aimed at French victims.
http://www.shopsunglass.net/ – Sunglasses store aimed at UK victims.
http://www.top-external-hard-drives.com/ – A copy of the portable hard disk scam site above.
http://www.nmdsneakers.com/ – Supposedly selling designer shoes / sneakers to US victims.
http://www.bayernoutlet.com – Another football kit scam site aimed at US victims. This domain is easily attributed to the www.nmdsneakers.com domain.
http://www.nmdforsale.com/ – Similar to the above. This domain is easily associated with the maillot-de-football.com scam.
http://www.luxuryonline.com.ru/ – Shoes store aimed at Russia.
http://www.mlbforsale.com/ – Already taken down by a US Federal Court Order.
http://www.mlbofstore.com/ – A website already taken down by a court order.
http://www.shopmlbshirt.com – A website already taken down by a court order.
http://www.psgmaillotfr.com/ – Scam football (soccer) site.
http://www.aaqshop.com/ – Scam NFL website claiming to be nflshop.com.
http://www.inflmarket.com/ – Scam NFL site claiming to be nflshop.com
http://www.eyewearofstore.com/ – Scam Ray Ban sunglasses website.
http://www.glassesbestsale.com/ – Scam Ray Ban website.
http://www.camisas-futebol.com/ – Fake football / soccer kit store.
http://www.shop-jewelrys.com/ – Fake pandora online store
http://www.outletjewelryshop.com/ – Scam “Pandora” shop.
http://www.nhlstores.com/ – Fake NFL site claiming to be the “Official online store of the NHL”.
http://www.chicagocubstocks.com/ – A fake store claiming to be the “Official online shop” of the Chicago Cubs.
http://www.chicagocubsmarket.com/ – A fake store claiming to be the “Official online shop” of the Chicago Cubs.
http://www.footsportsoutlets.com/ – Somehow also associated with “www.awolf.net”, the website of someone who appears to be interested in hacking, databases, VPN servers, FTP server software and VMWare.
http://www.jerseys-shop.com/ – Fake NFL website claiming to be “The official online store of the NFL” (much like all the other “official” ones I’ve found then!).
http://www.shirts-store.com/ – Another fake NFL website.
http://www.mlbofshop.com/ – MLB fake online store.
http://www.mlbshirt-shop.com/ – MLB fake online store.
http://www.sportskitonline.com/ – Fake NBA online store.
http://www.basketsforsales.com/ – Fake NBA online store.
http://www.lysportsmalls.com/ – Fake NBA online store.
http://www.topishirt.com/ – Another fake NFL store.
http://www.mlbshirtshop.com/ – Fake MLB online store.
http://www.officemlbshop.com/ – An already ceased / suspended domain by court order.
http://www.ievpolo.com/ – Fake Polo online store.
http://www.usnflshops.com/ – Fake NFL online store.
http://www.basketijersey.com/ – Fake NBA store.
http://www.vipbasketjersey.com/ – Fake NBA store.
http://www.fchelseas.com/ – Chelsea FC fake store, supposedly “the official Asia Pacific online megastore”.
http://www.asoccerjerseys.com/ also associated http://www.headdres-store.com/
http://www.broncostores.com/ – Fake Denver Broncos “official online store”.
Weirdly a lot of the above have SSL certificates self-issued to “tong.com”, probably an unrelated and invalid domain but still unusual.
There are so many associated websites and domains that I’ve given up crosschecking them! Here is the source list of the domains I’ve not yet investigated.