Low value goods scam. (ebuy2016.com / kf@onlinezh.net)

Hello everyone. This is another scam that works similar to a previous “high value electronics goods scam” that I’ve written about in the past. The websites, mostly, look professional and genuine. Take payment and then _never_ send any goods.

This scam seems to revolve around very small transactions (probably small enough that the credit card companies eat the fraud rather than charge it back to the fraudulent retailer). Or possibly they hope that the victims can’t be bothered with the paperwork and phone calls to report the fraud.

Most the goods on the websites are around £30 to £150ish with a rare few slightly higher priced goods mixed in. The page and form asking for credit / debit card payment isn’t even https / secure.

The good news – if you are a victim and you paid by Credit Card (or possibly even Debit Card) your bank is required to refund you!

http://www.ebuy2016.com/ – Seems to focus specifically on USB portable hard disks. Confirmed by victims as a scam.

http://www.betsbuyer.co.uk/ – Seems to sell GPS devices and sports “smart” watches.

http://www.top10tablet.us/ – Seems to sell Samsung Android tablets.

The first two of the above were registered 8th June 2016. The tablet site seems to have been registered 3rd November 2016. All are associated with the same domain registrant and / or have shared code between the domains.

Registered a month before is

https://www.prezzoshop.net/ – This appears to be the main domain name associated with the web hosting account and is another USB portable hard disk scam site aimed at victims in Italy. (162.218.179.41)

Other domains associated with the same scam:

http://www.prixonline.net – Seems to be aimed at French victims.

http://www.solde-tablette.com/ – Another site aimed at French victims.

http://www.tabprix.com/ – Another site aimed at French victims.

http://www.maillot-de-football.com/ – Football kit site aimed at French victims.

http://www.perruque-prix.fr/ – A hair / wig site aimed at French victims.

http://www.shopsunglass.net/ – Sunglasses store aimed at UK victims.

http://www.top-external-hard-drives.com/ – A copy of the portable hard disk scam site above.

http://www.nmdsneakers.com/ – Supposedly selling designer shoes / sneakers to US victims.

http://www.bayernoutlet.com – Another football kit scam site aimed at US victims. This domain is easily attributed to the www.nmdsneakers.com domain.

http://www.nmdforsale.com/ – Similar to the above. This domain is easily associated with the maillot-de-football.com scam.

http://www.luxuryonline.com.ru/ – Shoes store aimed at Russia.

http://www.ventepolo.com/

http://www.mlbforsale.com/ – Already taken down by a US Federal Court Order.

http://www.mlbofstore.com/ – A website already taken down by a court order.

http://www.shopmlbshirt.com – A website already taken down by a court order.

http://www.psgmaillotfr.com/ – Scam football (soccer) site.

http://www.aaqshop.com/ – Scam NFL website claiming to be nflshop.com.

http://www.inflmarket.com/ – Scam NFL site claiming to be nflshop.com

 

http://www.eyewearofstore.com/ – Scam Ray Ban sunglasses website.

http://www.glassesbestsale.com/ – Scam Ray Ban website.

http://www.camisas-futebol.com/ – Fake football / soccer kit store.

http://www.watchinshop.com/

http://www.bestfishop.com/

http://www.monclerofshop.com/

http://www.franceofjersey.com/

http://www.shop-jewelrys.com/ – Fake pandora online store

http://www.outletjewelryshop.com/ – Scam “Pandora” shop.

http://www.nhlstores.com/ – Fake NFL site claiming to be the “Official online store of the NHL”.

http://www.chicagocubstocks.com/ – A fake store claiming to be the “Official online shop” of the Chicago Cubs.

http://www.chicagocubsmarket.com/ – A fake store claiming to be the “Official online shop” of the Chicago Cubs.

http://www.footsportsoutlets.com/ – Somehow also associated with “www.awolf.net”, the website of someone who appears to be interested in hacking, databases, VPN servers, FTP server software and VMWare.

http://www.jerseys-shop.com/ – Fake NFL website claiming to be “The official online store of the NFL” (much like all the other “official” ones I’ve found then!).

http://www.barcashops.com/

 

http://www.shirts-store.com/ – Another fake NFL website.

http://www.clevelandindianshirt.com/

http://www.clevelandindianshop.com/

http://www.mkbagsonline.com/

http://www.mlbofshop.com/ – MLB fake online store.

http://www.mlbshirt-shop.com/ – MLB fake online store.

http://www.indians-shop.com/

http://www.indiansjersey.com/

http://www.sportskitonline.com/ – Fake NBA online store.

http://www.basketsforsales.com/ – Fake NBA online store.

http://www.lysportsmalls.com/ – Fake NBA online store.

http://www.officialmapleleafs.com/

http://www.bluejays-shops.com/

http://www.cheapbluejay.com/

http://www.bluejaysale.com/

http://www.onlineyeezy.com/

http://www.mapleleafshop.com/

http://www.fashionlinestore.com/

http://www.soccerjerseystores.com/

http://www.topishirt.com/ – Another fake NFL store.

http://www.mlbshirtshop.com/ – Fake MLB online store.

http://www.bluejaysoutlet.com/

http://www.officemlbshop.com/ – An already ceased / suspended domain by court order.

http://www.ievpolo.com/ – Fake Polo online store.

http://www.ferragamoshops.com/

http://www.eferragamoshop.com/

http://www.topbeltsshop.com/

http://www.hiferragamo.com/

http://www.outletferragamo.com/

http://www.ferragamobeltsshops.com/

http://www.ferragamoonline.com/

http://www.bagsbagsonline.com/

http://www.ferragamostores.com/

http://www.topferragamoonline.com/

http://www.bestbeltsonline.com/

http://www.vipferragamo.com/

http://www.usnflshops.com/ – Fake NFL online store.

http://www.maillotsdefrance.com/

http://www.basketijersey.com/ – Fake NBA store.

http://www.vipbasketjersey.com/ – Fake NBA store.

http://www.fchelseas.com/ – Chelsea FC fake store, supposedly “the official Asia Pacific online megastore”.

http://www.asoccerjerseys.com/ also associated http://www.headdres-store.com/

http://www.broncostores.com/ – Fake Denver Broncos “official online store”.

http://www.bestfootballshop.com/

http://www.storejewelryshop.com/

http://www.salejewelryshop.com/

Weirdly a lot of the above have SSL certificates self-issued to “tong.com”, probably an unrelated and invalid domain but still unusual.

There are so many associated websites and domains that I’ve given up crosschecking them! Here is the source list of the domains I’ve not yet investigated.

franceofjersey.com
nflsaleshops.com
eyewearmalls.com
strapshops.com
outletjewelrystore.com
b5jewellery.com
jerseysmarkets.com
basketjerseyshop.com
basketshirtshops.com
footballsshops.com
jewelrysstock.com
bagsbagsonline.com
nhlsmall.com
nhlstores.com
nflsportsstock.com
bagbagforsale.com
mlbsstores.com
baggoodsforsale.com
madeinnfl.com
nflsstocks.com
nflsshops.com
mlbsforsale.com
mlbonsale.com
beltonsale.com
ferragamoonsale.com
ferragamosonsale.com
ferragamodiscount.com
nikesonsale.com
ferragamosforsale.com
ferragamo4sale.com
ferragamosonline.com
nflsonsale.com
nflsdiscount.com
nflforsale.com
nflsstock.com
bananaces.com
iakqks.com
hotsalespro.com
hariees.com
chicagocubsoutlet.com
clevelandindianstore.com
bluejaysale.com
cfljerseyshop.com
ferragamonline.com
outletferragamo.com
ferragshop.com
fashionlinestore.com
ferragamocenter.com
basketshirts.com
shirtnba.com
chicagocubstore.com
nba-eshop.com
jerseynba.com
ibasketjersey.com
basketeshop.com
nfl-shirt.com
nfl-center.com
shoulderbagshop.com
crossbodybagshop.com
mlbshirtstore.com
footballshirtsale.com
buymlbshirt.com
ukfootballjersey.com
soccerjerseystores.com
wholesalemlbshop.com
mlbshirtsale.com
outletfootballshirt.com
outletmlbshirt.com
footballshirtoutlet.com
outletmlbstore.com
officemlbshirt.com
catmte.com
colorrushstore.com
officemlbshop.com
mlbinshop.com
mlbshirtshop.com
colorrushuniform.com
mlbshirtoutlet.com
colorrushcenter.com
colorrushmall.com
officemlbstore.com
colorrushop.com
colorrush2016.com
bestnflmall.com
nflbazaar.com
enflonline.com
topeshirt.com
topishirt.com
enfloutlet.com
nflshoppingcenter.com
bestluxshops.com
topilux.com
enflcenter.com
infloutlet.com
nfldiscount.com
nfljerseyoutlet.com
espcamisetasdefutbol.com
topmksale.com
fashionjewelrymalls.com
iluxjewelry.com
ibuylux.com
iluxfashion.com
luxferragamo.com
ferragamomall.com
iluxcenter.com
luxfashionshop.com
bestfootballjersey.com
topnflshirt.com
topfootballjersey.com
ievpolo.com
ssoccerjersey.com
uksoccershirts.com
salebasketshirts.com
iibasketjersey.com
ferragamosale.com
ferragamobagstore.com
ferragamobagshop.com
sferragamo.com
fferragamo.com
vipbasketjersey.com
eferragamobag.com
ibasketshirt.com
iferragamo.com
ebagshops.com
eferragamoshop.com
ebasketjersey.com
viferragamo.com
basketshirtonline.com
hiferragamo.com
yshoesoutlet.com
mkbagsonline.com
vipshoeshop.com
footballshirtonline.com
mkbagplazas.com
luxybagshops.com
mnushirts.com
manushirt.com
mujerseys.com
buycheapmkbag.com
mkbagsclub.com
suglassesclub.com
nflshirtstore.com
vipsunglasseshop.com
basketijerseys.com
nbasketsmarkets.com
manutdone.com
basket4sales.com
nbasketmaks.com
spolostocks.com
basketsdiscounts.com
ferragamoshops.com
vipferragamo.com
spolomalls.com
ferragamostores.com
usnflshops.com
cheapolos.com
manutdmalls.com
csoccerjerseys.com
itlaynbasket.com
spainbaskets.com
francebaskets.com
maillots-de-football.com
frmaillot.com
camisas-futebol.com
porsoccerjerseys.com
maillotsdefrance.com
basketijersey.com
ventepolo.com
fcbarcastock.com
bayernoutlet.com
fchelseas.com
asoccerjerseys.com
asoccershirts.com
broncostores.com
nflonsale.com
mlbforsale.com
birkstock.com
bksandals.com
mkbagsmalls.com
mkvipbag.com
mkbagsmarkets.com
vipmkbag.com
mkbagtop.com
nmdforsale.com
fcmudtjersey.com
airmaxshoeshop.com
psgmaillotfr.com
everyhoe.com
nicemkbag.com
acoachag.com

 

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Comment on this topic

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s