Category Archives: text messaging

bestbuyrwdcntr.com

Another Bestbuy Text Scams

Congrats Best Buy Shopper You Have Won A $1000 Giftcard! Go to scamalerthttp://bestbuyrwdcntr.com/a/?h and click continue to claim it NOW

 

 

The following A records are set to 50.97.137.50:

English:

English: (Photo credit: Wikipedia)

  1. 10dn6.com
  2. 5os.com
  3. akiba-world.co
  4. akiba.us
  5. akibanewsworld.com
  6. bestbuysms.net
  7. bestbuybunus.net
  8. bestbuycashcards.net
  9. buggybread.com
  10. bestbuywinnet.com
  11. bestbuywinmobi.net
  12. bbdailyprizes.biz
  13. bbdailyprizes.com
  14. bbcardalert.net
  15. bbdailyprizes.com
  16. bestbuycashcards.net
  17. akibaworld.com
  18. bbcardgiveaway.net
  19. giveawayalerts.net
  20. bestbuyrwdcntr.com
  21. BestBuyNotify.net
  22. bbcardrewards.net
  23. bbcashgiveaway.net
  24. bbgiveaway.com
  25. bbrewardcard.net
  26. bbspree.net
  27. bestbuygiveaways.mobi
  28. bestbuyprizes.mobi
  29. bestbuypromo.mobi
  30. bestbuyreward.mobi
  31. bestbuyrewardcard.net
  32. bestbuyrewards.mobi
  33. bestbuysurprise.com
  34. bestbuysurprise.mobi
  35. binarycredit.net
  36. binarycredit.org
  37. bitcoin2012.com
  38. cabinet-lequart.com
  39. cc.gl
  40. club-ottomobile.com
  41. fb.gd
  42. justhookup2.net
  43. myfreebbcard.net
  44. painlessloans.net
  45. pennystocknotify.net
  46. sekaitendencies.com
  47. shibuyanews.com
  48. spacepigtv.com
  49. stephane-quarre.net
  50. superbowlspeculation.net
  51. tw.gl, viagraforcheap.net
  52. worldakiba.com
  53. zbiddyauction.net

111.123.180.92

WarrenFCU.com Text Alert

Warren Federal Credit Union is issuing this ALERT to it’s members.

Be advised that some of our members are receiving text messages saying that their card has been deactivated.

The text states that your PIN needs to be reset, it asks that you call a local number and enter your card number and the old then new PIN in order to get your card reactivated. Fraud AlertPlease be advised that this is a scam, Warren will never make contact with you by text for this type of issue.

The ALERT READS:

THE CREDIT UNION CENTER ALERT: YOUR CARD HAS BEEN DEACTIVATED. Please call 307-200-XXXX

Credit Card Scam
This one is pretty slick since they provide YOU with all the information, except the one piece they want. Note, the callers do not ask for your card number; they already have it. By understanding how the VISA & Master Card telephone credit card scam works, you’ll be better prepared to protect yourself.

The scam works like this: Caller: This is (name), and I’m calling from the Security and Fraud Department at VISA. My Badge number is 12460. Your card has been flagged for an unusual purchase pattern, and I’m calling to verify.

This would be on your VISA card which was issued by (name of bank). Did you purchase an Anti-Telemarketing Device for $497.99 from a marketing company based in?

When you say ‘No’, the caller continues with, Then we will be issuing a credit to your account. This is a company we have been watching and the charges range from $297 to $497, just under the $500 purchase pattern that flags most cards. Before your next statement, the credit will be sent to (gives you your address), is that correct? You say yes. The caller continues – I will be starting a fraud investigation. If you have any questions, you should call the 1-800 number listed on the back of your card (1-800-VISA) and ask for security.

You will need to refer to this control number. The caller then gives you a 6 digit number. Do you need me to read it again?

Here’s the IMPORTANT part on how the scam works.
The caller then says, I need to verify you are in possession of your card. He’ll ask you to turn your card over and look for some numbers. There are 7 numbers; the first 4 are part of your card number, the next 3 are the security numbers that verify you are the possessor of the card. These are the numbers you sometimes use to make internet purchases to prove you have the card. The caller will ask you to read the 3 numbers to him. After you tell the caller the 3 numbers, he’ll say, That is correct, I just needed to verify that the card has not been lost or stolen, and that you still have your card. Do you have any other questions? After you say No, the caller then thanks you and states, Don’t hesitate to call back if you do, and ha

Source: Warren Federal Credit Union


Another Bestbuy Text Scams

The following A records are set to 64.64.51.41:

  • 1chan.orgEnglish:
  • 2rn.net
  • 5os.com
  • 5os.net
  • autovps.net
  • bestbuybonus.net
  • bestbuyspecial.net
  • bitcoin.in
  • bitcoin.it
  • bitcoincharts.com
  • bitcoinexchange.com
  • bitcoinwatch.com
  • bitomat.pl
  • bollzy.com
  • bombstrike.net111.123.180.92
  • bookgear.com
  • btcsportsbook.com
  • cc.dns.st
  • ceraphin.com
  • cu.ms
  • ddrmusic.com
  • digitaldentifrice.com
  • dudule.org
  • earthzeitgeist.org
  • est-un-boulet.com
  • fansub-fr.com
  • fansub-fr.org
  • francescu.com
  • fullxp.com
  • gg.st
  • gw.gd
  • heliasae.com
  • heliasae.org
  • hell.ne.jp
  • hikarihost.com
  • hugopoi.net
  • hugsfree.com
  • jack.li
  • kaf-team.eu
  • kanamichan.com
  • kenshin-blog.com
  • kphp.net
  • kujiu.org
  • lya.co
  • magicaltux.net
  • magicaltux.org
  • mail2php.com
  • mail2php.net
  • mdp-moving.com
  • mtgoxlive.com
  • mukumuku.org
  • mv-web.fr
  • netcollect.org
  • nihoncar.com
  • nnnl.net
  • nyug.org
  • objectif-japon.com
  • objectifjapon.com
  • objectifsjapon.com
  • obvx.com
  • openoptimus.org
  • pandaroux.net
  • peerdb.com
  • phpls.com
  • phpls.org
  • pinetd.net
  • pinpinlelapin.biz
  • pinpinlelapin.com
  • polysics.net
  • pxiv.net
  • screwbanks.net
  • shunei.net
  • spam-info.net
  • sslmix.com
  • studiotanuki.com
  • studiotanuki.net
  • taiki-no-fansub.com
  • tcmsystems.net
  • timeodanaos.org
  • titlien.com
  • titls.com
  • touhou.net
  • touhou.org
  • verasmithphotography.com
  • wallago.com
  • webclog.com
  • webcorporate.com.hk
  • wimip.fr
  • won-fma.com
  • xinetd.net
  • xta.net

bbdailyprizes.com ~ bbcardalert.net


Another Bestbuy Text Scams

The following A records are set to 50.97.137.50:

English:

English: (Photo credit: Wikipedia)

  1. 10dn6.com
  2. 5os.com
  3. akiba-world.co
  4. akiba.us
  5. akibanewsworld.com
  6. bestbuycashcards.net
  7. bbdailyprizes.biz
  8. bbdailyprizes.com
  9. bbcardalert.net
  10. bbdailyprizes.com
  11. bestbuycashcards.net
  12. akibaworld.com
  13. bbcardgiveaway.net
  14. giveawayalerts.net
  15. BestBuyNotify.net
  16. bbcardrewards.net
  17. bbcashgiveaway.net
  18. bbgiveaway.com
  19. bbrewardcard.net
  20. bbspree.net
  21. bestbuygiveaways.mobi
  22. bestbuyprizes.mobi
  23. bestbuypromo.mobi
  24. bestbuyreward.mobi
  25. bestbuyrewardcard.net
  26. bestbuyrewards.mobi
  27. bestbuysurprise.com
  28. bestbuysurprise.mobi
  29. binarycredit.net
  30. binarycredit.org
  31. bitcoin2012.com
  32. cabinet-lequart.com
  33. cc.gl
  34. club-ottomobile.com
  35. fb.gd
  36. justhookup2.net
  37. myfreebbcard.net
  38. painlessloans.net
  39. pennystocknotify.net
  40. sekaitendencies.com
  41. shibuyanews.com
  42. spacepigtv.com
  43. stephane-quarre.net
  44. superbowlspeculation.net
  45. tw.gl, viagraforcheap.net
  46. worldakiba.com
  47. zbiddyauction.net

111.123.180.92

giveBBGiveaway.net ~ bestbuyperke.net


Another Bestbuy Text Scams

The following A records are set to 50.97.137.50:

English:

English: (Photo credit: Wikipedia)

  1. 10dn6.com
  2. 5os.com
  3. giveawayalerts.net
  4. BestBuyGold.net
  5. PLAY4PRIZES
  6. bestbuyperke.net
  7. akiba-world.co
  8. bbprize.inf
  9. giveBBGiveaway.net
  10. akiba.us
  11. akibanewsworld.com
  12. akibaworld.com
  13. bbcardgiveaway.net
  14. giveawayalerts.net
  15. BestBuyNotify.net
  16. bbcardrewards.net
  17. bbcashgiveaway.net
  18. bbgiveaway.com
  19. bbrewardcard.net
  20. bbspree.net
  21. bestbuygiveaways.mobi
  22. bestbuyprizes.mobi
  23. bestbuypromo.mobi
  24. bestbuyreward.mobi
  25. bestbuyrewardcard.net
  26. bestbuyrewards.mobi
  27. bestbuysurprise.com
  28. bestbuysurprise.mobi
  29. binarycredit.net
  30. binarycredit.org
  31. bitcoin2012.com
  32. cabinet-lequart.com
  33. cc.gl
  34. club-ottomobile.com
  35. fb.gd
  36. justhookup2.net
  37. myfreebbcard.net
  38. painlessloans.net
  39. pennystocknotify.net
  40. sekaitendencies.com
  41. shibuyanews.com
  42. spacepigtv.com
  43. stephane-quarre.net
  44. superbowlspeculation.net
  45. tw.gl, viagraforcheap.net
  46. worldakiba.com
  47. zbiddyauction.net

111.123.180.92

Ipad4 or $1,000 Walmart Drawing Netflix

scamFRAUDalert see it appropriate to issue this ALERT as consumers have been scamalertcontacted by phone and text messaging regarding Ipad4 or $1000 Walmart Drawing from Netflix.com
Address lookup

Image representing Netflix as depicted in Crun...

Image via CrunchBase

canonical name bensurvey.net
aliases
addresses 69.6.27.100
Domain Whois record

Queried whois.internic.net with “dom bensurvey.net

This slideshow requires JavaScript.

Domain Name: BENSURVEY.NET
Registrar: DYNAMIC DOLPHIN, INC.
Whois Server: whois.dynamicdolphin.com
Referral URL: http://www.dynamicdolphin.com
Name Server: NS1.PQL.NET
Name Server: NS2.PQL.NET
Status: clientTransferProhibited
Updated Date: 20-aug-2012
Creation Date: 20-aug-2012
Expiration Date: 20-aug-2013

Last update of whois database: Sat, 09 Feb 2013 20:58:29 UTC
Queried whois.dynamicdolphin.com with “bensurvey.net

Registration Service Provided By: DYNAMIC DOLPHIN, INC

Domain Name: BENSURVEY.NET

Registration Date: 20-Aug-2012
Expiration Date: 20-Aug-2013

Status:LOCKED

Name Servers:
ns1.pql.net
ns2.pql.net

Registrant Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Administrative Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Technical Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Billing Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Network Whois record
Queried whois.arin.net with “n ! NET-69-6-27-0-1

NetRange: 69.6.27.0 – 69.6.27.255
CIDR: 69.6.27.0/24
OriginAS:
NetName: ORB-BLK-69-6-27-0
NetHandle: NET-69-6-27-0-1
Parent: NET-69-6-0-0-1
NetType: Reassigned
RegDate: 2005-05-06
Updated: 2005-05-06
Ref: http://whois.arin.net/rest/net/NET-69-6-27-0-1

OrgName: OptinRealBig.com
OrgId: OPTIN-2
Address: 1333 W 120th Ave.
Address: Suite 101
City: Westminster
StateProv: CO
PostalCode: 80234
Country: US
RegDate: 2004-01-06
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/OPTIN-2

OrgTechHandle: ABUSE896-ARIN
OrgTechName: abuse
OrgTechPhone: +1-303-464-8164
OrgTechEmail: abuse@optinbig.com
OrgTechRef: http://whois.arin.net/rest/poc/ABUSE896-ARIN

OrgAbuseHandle: ABUSE896-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-303-464-8164
OrgAbuseEmail: abuse@optinbig.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE896-ARIN

DNS records
name class type data time to live
bensurvey.net IN TXT v=spf1 a mx include:bounceio.net ~all bio=0fc4cd6da73a37c8d9e7b4146a0fa58106a3a37d 3600s (01:00:00)
bensurvey.net IN MX
preference: 0
exchange: mail.bensurvey.net
3600s (01:00:00)
bensurvey.net IN SOA
server: ns1.pql.net
email: webmaster@pql.net
serial: 1074789170
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
bensurvey.net IN A 69.6.27.100 3600s (01:00:00)
bensurvey.net IN NS ns1.pql.net 3600s (01:00:00)
bensurvey.net IN NS ns2.pql.net 3600s (01:00:00)
100.27.6.69.in-addr.arpa IN PTR theparkingplace.com 38400s (10:40:00)
27.6.69.in-addr.arpa IN SOA
server: ns1.wholesalebandwidth.com
email: support@jmws.net
serial: 106181852
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 38400
38400s (10:40:00)
27.6.69.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-02-19 17:02:41Z
signature inception: 2013-02-09 17:02:41Z
key tag: 16559
signer’s name: 69.in-addr.arpa
signature:
(1024 bits)
10800s (03:00:00)
27.6.69.in-addr.arpa IN NSEC
next domain name: 28.6.69.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
27.6.69.in-addr.arpa IN NS ns1.wholesalebandwidth.com 38400s (10:40:00)
27.6.69.in-addr.arpa IN NS ns2.wholesalebandwidth.com 38400s (10:40:00)

— end —

Related Article:

Washington Post – Security Fix, Brian Krebs of KrebsOnSecurity.com

$1000 Walmart Drawing Netflix.com

scamFRAUDalert see it appropriate to issue this ALERT as consumers have beenscamalertcontacted by phone and text messaging regarding Ipad4 or $1000 Walmart Drawing from Netflix.com
Address lookup

Image representing Netflix as depicted in Crun...

Image via CrunchBase

canonical name bensurvey.net
aliases
addresses 69.6.27.100
Domain Whois record

Queried whois.internic.net with “dom bensurvey.net

Domain Name: BENSURVEY.NET
Registrar: DYNAMIC DOLPHIN, INC.
Whois Server: whois.dynamicdolphin.com
Referral URL: http://www.dynamicdolphin.com
Name Server: NS1.PQL.NET
Name Server: NS2.PQL.NET
Status: clientTransferProhibited
Updated Date: 20-aug-2012
Creation Date: 20-aug-2012
Expiration Date: 20-aug-2013

Last update of whois database: Sat, 09 Feb 2013 20:58:29 UTC
Queried whois.dynamicdolphin.com with “bensurvey.net

Registration Service Provided By: DYNAMIC DOLPHIN, INC

Domain Name: BENSURVEY.NET

Registration Date: 20-Aug-2012
Expiration Date: 20-Aug-2013

Status:LOCKED

Name Servers:
ns1.pql.net
ns2.pql.net

Registrant Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Administrative Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Technical Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Billing Contact Details:
Privacy Protection
Privacy Protect admin@privacyprotectiondd.com
5023 W 120th Ave #233
Broomfield
Colorado,80020
US
Tel. +011.7208723477

Network Whois record
Queried whois.arin.net with “n ! NET-69-6-27-0-1

NetRange: 69.6.27.0 – 69.6.27.255
CIDR: 69.6.27.0/24
OriginAS:
NetName: ORB-BLK-69-6-27-0
NetHandle: NET-69-6-27-0-1
Parent: NET-69-6-0-0-1
NetType: Reassigned
RegDate: 2005-05-06
Updated: 2005-05-06
Ref: http://whois.arin.net/rest/net/NET-69-6-27-0-1

OrgName: OptinRealBig.com
OrgId: OPTIN-2
Address: 1333 W 120th Ave.
Address: Suite 101
City: Westminster
StateProv: CO
PostalCode: 80234
Country: US
RegDate: 2004-01-06
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/OPTIN-2

OrgTechHandle: ABUSE896-ARIN
OrgTechName: abuse
OrgTechPhone: +1-303-464-8164
OrgTechEmail: abuse@optinbig.com
OrgTechRef: http://whois.arin.net/rest/poc/ABUSE896-ARIN

OrgAbuseHandle: ABUSE896-ARIN
OrgAbuseName: abuse
OrgAbusePhone: +1-303-464-8164
OrgAbuseEmail: abuse@optinbig.com
OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE896-ARIN

DNS records
name class type data time to live
bensurvey.net IN TXT v=spf1 a mx include:bounceio.net ~all bio=0fc4cd6da73a37c8d9e7b4146a0fa58106a3a37d 3600s (01:00:00)
bensurvey.net IN MX
preference: 0
exchange: mail.bensurvey.net
3600s (01:00:00)
bensurvey.net IN SOA
server: ns1.pql.net
email: webmaster@pql.net
serial: 1074789170
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 3600
3600s (01:00:00)
bensurvey.net IN A 69.6.27.100 3600s (01:00:00)
bensurvey.net IN NS ns1.pql.net 3600s (01:00:00)
bensurvey.net IN NS ns2.pql.net 3600s (01:00:00)
100.27.6.69.in-addr.arpa IN PTR theparkingplace.com 38400s (10:40:00)
27.6.69.in-addr.arpa IN SOA
server: ns1.wholesalebandwidth.com
email: support@jmws.net
serial: 106181852
refresh: 10800
retry: 3600
expire: 604800
minimum ttl: 38400
38400s (10:40:00)
27.6.69.in-addr.arpa IN RRSIG
type covered: NSEC (47)
algorithm: RSA/SHA-1 (5)
labels: 5
original ttl: 10800 (03:00:00)
signature expiration: 2013-02-19 17:02:41Z
signature inception: 2013-02-09 17:02:41Z
key tag: 16559
signer’s name: 69.in-addr.arpa
signature:
(1024 bits)
10800s (03:00:00)
27.6.69.in-addr.arpa IN NSEC
next domain name: 28.6.69.in-addr.arpa
record types: NS RRSIG NSEC
10800s (03:00:00)
27.6.69.in-addr.arpa IN NS ns1.wholesalebandwidth.com 38400s (10:40:00)
27.6.69.in-addr.arpa IN NS ns2.wholesalebandwidth.com 38400s (10:40:00)

— end —