Prestige Replicas
From Spamwiki
Contents |
[edit] Description
| Prestige Replicas is a counterfeit watch and counterfeit luxury brands operation that sells imitation watches and other goods for high prices.
On the left is the appearance of the site prior to April 2008, and on the right is the appearance since April 2008. The site contains errors that indicate it is not supported by the original product manufacturers, and has some serious contradictions about its warranty policies. It attempts to exempt itself from prosecution by anyone associated with the original manufacturers, even going so far as to bar them from visiting the site! The fact that this warning is on the site itself only magnifies the self contradictions. |  |  |
[edit] Warranty self contradiction
The Disclaimer page negates all warranties for all products sold from the web site.
We offer no warranties for any or the products sold by orders originating on this website these items are indeed great quality, but strictly for novelty purposes only.
We offer this site, and the products listed for sale on an & ldquo AS IS& rdquo basis, and will assume no liability for the defects or malfunctions.
These are novelty items, but sold at high prices, and there are no warranties. Compare that with the Warranty page and ponder over which one to believe.
As with all warranties out there, all timepieces purchased from Prestige Replicas are covered with a full manufacturer’s defects warranty. Please note that the warranty does not cover damage from customer abuse, or normal wear and tear (e.g scratches, broken glass etc). Our top quality timepieces are designed to withstand accidental splashes of water, but are not intended to be used in the shower, pool, steam rooms, or during any type of water sports. Water damage, damage of the stem (crown), clasps, as well as lost and stolen items are not covered under the manufacturer’s defects warranty.
[edit] Prosecutions prohibited
Lastly, the site prohibits anyone who works for the real manufacturers, or who previously worked there, to even view the web site, nor can anyone working for the original manufacturer prosecute them, nor can their family nor their friends! Nice try.
We enforce if you are affiliated with or working for a brand name company mentioned either directly or indirectly, or any other related group, or were formally a worker, you cannot enter this web site, cannot access any of its files and you cannot view any of the HTM(L) files. If you enter this site you are not agreeing to these terms and you are violating code 431.322.12 of the Internet Privacy Act signed by Bill Clinton in 1995 and that means that you cannot threaten our ISP(s) or any person(s) or company storing these files, and cannot prosecute any person(s) affiliated with this page which includes family, friends or individuals who run or enter this web site.
Discussion on Prestige Replicas may be found at the Fight Back forum.
[edit] False Pretenses
Although trying to represent itself as a reputable business, this spammer has not paid enough attention to the finer details. While showing total disregard for manufacturer's trade marks and copyrights, he has not bothered to check the spelling:
Fake with 5 errors 
compared with the genuine logos 
and 
Notice that there are at least two errors in the faked company logo, and a third error in the adjacent tag line. Can you imagine the genuine Tiffany & Co. advertising "Jewlery"?
It is clear that King Replicas is the work of the same illiterate site developer, as seen in the exact same errors on that nearly identical brand's site.
Same 5 errors again 
King Replicas suffers the identical self contradictions in its Warranty and Disclaimer pages, too.
[edit] Spam removal request
Clearly, the person behind the spam knows how people feel about receiving it (from support.php):
function ContainsRemoveWord(SubjectAndMessage){
SubjectAndMessage = RemoveNonAlphanumeric(SubjectAndMessage.toLowerCase());
RemoveWords = "fuck|whore|stop sending|unsubscribe|take me off|delete me|stop email|
opt out|spam|no more|assholes|die|unsolicted|abuse|remov";
RemoveWords = RemoveNonAlphanumeric(RemoveWords.toLowerCase());
return SubjectAndMessage.match(RemoveWords+"+")!=null;
}
If you add any of the terms in bold above, you will send your e-mail to removal.php. The result is a page that does nothing.
Example of the message sent via support.php (the contact us page) requesting removal from the spam's mailing list:
After passing through the ContainsRemoveWord function, the message was posted to removal.php, which returns the following page:
[edit] History
The registrations for this site run in parallel with registrations for US Healthcare, Diamond Replicas and My Canada RX Store. They use the same registrar and name servers, such as regsett4.com or servwee22.com.
[edit] Sample Spam 1
Dear (e-mail address deleted by SpamWiki Admin) http:(domain deleted by SpamWiki Admin) Oyster Perpetual Day-date - Full 18Kt Gold Specifications Automatic movement *Hack mechanism (second hand stops when crown is pulled out to set the time - standard feature on all genuine Rolex watches) *Sapphire crystal watchglass *Screws in the links, not pins *Rubber seal at trip-lock winding crown *Magnified quick-set date at 3 o'clock position *Serial band/number on last link/lugs *Heavily micron-plated genuine gold *Thick, heavy and solid Presidential-style watch bracelet *Genuine Presidential-style hiding clasp, exactly as per the original *All simulated diamonds are high grade cubic zirconia (CZ) stones *Full Stainless Steel-construction band/case, and will never fade or wear *Smooth date wheel adjustment *Solid back with characteristic Rolex green sticker *Screw-in watch crown *All the appropriate Rolex markings in the correct places Thanks Recieve 15% off when you buy 2 or more watches Thanks Cathy Anniston We offer more products like Rolex Mens, Vacheron ,Chanel ,Rolex Ladys , A.lange & Sohne ,Jacob & Co Rolex Boys,Glashute Original,Hermes,Patek Philippe ,Audemars Piguet,IWC,Jaeger-lecoultre,Cartier,Officine Panerai Bvlgari,Alain Silberstein, Franck Muller, Keychains , Breitling ,Lighters ,Omega, Cufflinks,Tag Heuer,Pens Chopard http:(domain deleted by SpamWiki Admin) (e-mail address deleted by SpamWiki Admin) wrote: > > Is Rolex good for you? opm8b1e1cg-
[edit] Sample Spam 2
A T4g Heuer w4tch is a luxury statement on its own. Unfortunately, that luxury comes with a price... Except when you visit Prest1ge Repl1cas, the web's most comprehensive collection of brand name repl1ca w4tches. In Prest1ge Repl1cas, any T4g Heuer is available for just over $200. (domain deleted by SpamWiki Admin) For those of us who have always dreamed of wearing a T4g Heuer, there is no better time to make our dream come true than this very moment, and no better place to do it, than at Prest1ge Repl1cas. Here you will find the most prestigious repl1ca T4g Heuers, at an unbeatable price. Come inside now... your T4g Heuer watch is waiting for you at Prest1ge Repl1cas. (domain deleted by SpamWiki Admin)
[edit] Domain Name Servers
Typically uses name servers like the following:
| Name Server | Name Server | IP Address | Spammed domains | ||||
|---|---|---|---|---|---|---|---|
| ns1.regsett4.com | ns2.regsett4.com | 200.12.211.238 | (Panama) | ||||
| polikkio.com | veritagg.com | leliipp.com | weddefeg.com | mineorrio.com | |||
| capissool.com | trebbiann.com | byuiiop.com | weddesell.com | nenenuioo.com | |||
| . | |||||||
| ns1.servwee22.com | ns1.servwee22.com | 193.200.50.96 | (Romania) | ||||
| admirrante.com | pollioww.com | aprendiee.com | toppperf.com | casikoo.com | |||
| . | |||||||
| ns1.caccopt.com | ns2.caccopt.com | 116.199.128.6 | (China) | ||||
| miracuole.com | selissia.com | posiiesa.com | bunsuub.com | parassce.com | |||
| sbbdhee.com | sdhhhee.com | assdlee.com | kosldppoee.com | casiikie.com | |||
| dueywhjj.com | oeieuwu.com | oprwtts.com | poslwiik.com | ppwllk.com | |||
| soiekkj.com | sopeiwij.com | sspplww.com | sueyhhb.com | syeuwhq.com | |||
| syewthhw.com | trwyyu.com | uyeuyehh.com | spoeuiuhh.com | ||||
| . | |||||||
| ns1.addaptar.com | ns2.addaptar.com | 222.122.56.238 | (Korea) | ||||
| kemooon.com | lisantt.com | repliqwestt.com | repmgx.com | veritasplace.com | |||
| . | |||||||
| ns1.dddkew1.com | ns2.dddkew1.com | 211.110.100.137 | (Korea) | ||||
| cclicckzz.com | |||||||
| . | |||||||
| ns1.eaddek00.com | ns2.eaddek00.com | 211.110.100.137 | (Korea) | ||||
| siuehbb.com | felodke.com | asssple.com | ponabuure.com | syetwggf.com | |||
| arrijehh.com | ssaldej.com | speywkj.com | arrpoekk.com | maddrekk.com | |||
| soiewjjn.com | sbbbewq.com | syewhs.com | klocckis.com | spoewjss.com | |||
| soeijhhu.com | snnbeew.com | marwelloww.com | duypopo.com | ||||
| . | |||||||
| ns1.monn12.com | ns2.monn12.com | 211.110.100.137 | (Korea) | ||||
| affgeww.com | |||||||
| . | |||||||
| ns1.deunisso2.com | ns2.deunisso2.com | 211.110.100.137 | (Korea) | ||||
| spokiijee.com | spoewlll.com | psoposll.com | debbveo.com | ssbddoo.com | |||
| . | |||||||
| ns1.bbrex99.com | ns2.bbrex99.com | 211.110.100.137 | (Korea) | ||||
| pillcarrew.com | |||||||
| . | |||||||
| ns1.yuoowrx.com | ns2.yuoowrx.com | 211.110.100.137 | (Korea) | ||||
| aviaookee.com | syewgfff.com | suyewhhg.com | spoewjhh.com | clcikkkop.com | |||
| yuoowrx.com |
The spammed domain thus has only 2 name servers that are short, and involve repeated letters and numbers.
Additionally, the DNS server for the primary and secondary DNS are both hosted on the same machine. There is a large number of machines in Korea.
At least one of these machines is used for multiple nameservers: 211.110.100.137. The whois details of this machine are as follows:
[ Organization Information ] Organization ID : ORG3930 Org Name : Hanaro Telecom Inc. Address : Yeoeuido-dong Yeongdeungpo-gu SEOUL Detail Address : 17-7 Asia One Bldg. Zip Code : 150-874 [ Technical Contact Information ] Name : IP manager Org Name : Hanaro Telecom Inc. Address : Yeoeuido-dong Yeongdeungpo-gu SEOUL Detail Address : 17-7 Asia One Bldg. Zip Code : 150-874 Phone : +82-2-106-2 E-Mail : ip-adm@hanaro.com [ ISP Network Abuse Contact Information ] Name : manager Phone : +82-2-106-2 E-Mail : abuse@hanaro.com
[edit] How to Report this Spam
[edit] Alert the Federation of the Swiss Watch Industry
The FSWI actively pursues the counterfeit operation. A contact at the Federation of the Swiss Watch Industry is Ms. Aubert (net(@)fhs.ch), who is in charge of the Internet Unit. You can contact her to bring any of the replica watch plans to her attention. She sends formal copyright complaints to the registrars.
[edit] Complain to the registrar
Complainterator is configured to generate removal requests to the registrars.
Alternatively, you can request the registrar to remove the name server domains by locking them out, placing on hold, and making the ns0, ns1, ns2 addresses null - 0.0.0.0 For example:
To: icanncompliance@aitcom.net
Registrar: THE NAME IT CORPORATION DBA NAMESERVICES.NET
Dear Registrar
This is a request for you to remove the domain regsett4.com
and to remove its name server Address record ns1.regsett4.com and ns2.regsett4.com
From this link, you can see that it is used as a spammed site's name server:
> http://www.dnsstuff.com/tools/traversal.ch?domain=addeses.com&type=a
From this link, you can see that your company is the name server's registrar
> http://www.dnsstuff.com/tools/whois.ch?ip=regsett4.com&email=on
To suspend the name server effectively, first set the name server Address record for ns1.regsett4.com and ns2.regsett4.com
to a nonroutable address such as 0.0.0.0 or 61.61.61.61
Then set the status of domain regsett4.com to
clientTransferProhibited
clientUpdateProhibited
clientDeleteProhibited
clientHold
You can test that this has been successful, by using the above traversal link.
Thank you for your efforts to reduce spam and to keep criminals from abusing your terms of service.
[edit] Related spam operations
The most recent registrations for spammed sites using the same name servers (ns1.regsett4.com and ns2.regsett4.com) are for Prestige Replicas and US Healthcare
[edit] Sponsor Organization
SanCash (in early 2008 known as "Etranzmu", the underground sponsor affiliate program related to Genbucks) is the sponsor organization behind this type of site. They pay spammers to promote it, and they don't shut down illegal spammers.
See:
