Joe Wein
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google
 

heretofind.com Browser Hijacking

If your web browser takes you to a website called http://www.heretofind.com whenever you type a URL starting with www. then you have become a victim of browser hijacking. The settings inside your browser have been changed to redirect URLs entered with a leading http:// to go to that website. There is a fix for this:

Usenet thread about heretofind.com Browser Hijacking
How do I get rid of "Heretofind.com" (able2know.com thread)

We haven't tested the suggestions made there, but hopefully they would help.

Anti-Spam Resources:
jwSpamSpy is our spam filter (free evaluation version available for download)
Anti-spam domain blacklist – list of domains that I refuse to receive mail from
Recent additions to domain blacklist (with whois details)
Plain text versions of the domain and 419 blacklist
Domain blacklist update (DBL-Update) archive
Frequently asked questions (FAQ)
How to trace senders of spam
Lookup an IP address on blacklists (http://dnsbl.net.au/lookup/)
Where to report child pornography

Useful information:
DNS-based IP and domain name blacklists
IP address ranges
Dynamic IP addresses (700 KB!)
Name server / Registrar combinations
Free email providers
AOL dial-up address ranges and mail servers

Computer Viruses

Advance fee fraud (419)
About the 419 (Advance Fee) scam
Frequently asked Questions (419 FAQ)
"419" scam sender/contact addresses ("Nigeria connection" address book)
Phone numbers used by 419 scammers
Domains registered by 419 scammers
Company names mentioned in 419 spam
Where to complain about spam that uses free email accounts
419 tsunami scams

Various spams and scams:
ShareYourExperiences.com spammers
Smyrnagroup spammers (in German)
"Joe job" information
newphotoid.com - Phishing scam or Joe Job?
Kaplan College spam
Spam phone numbers ("diploma" spam, etc.)
Stock Price Manipulation Spam ("Pump & Dump")
What's the deal with "OEM software"?
"Replica watches"
"High Yield Investment Programs" (HYIP)
"VENTURE CAPITAL BUSINESS" spam
'Phishing' for your wallet (Fraud)

Moneylaundering job fraud:
Job offer spam: Forwarding payments (Fraud)
Forwarding Paypal payments via Western Union (Fraud)

Various online frauds:
Fraud: mailorder shipping to Nigeria
ALABA STREET, MUSHIN, LAGOS
Cheap mobile phones from Lagos, Nigeria (cell phone scams)
Fraud: Car buyer with large cashier's check
Fraud: Bike seller uses bogus escrow service
Fraud: Appartment rental with large cashier's check
Fraud: Wedding photographer with large cashier's check
Fraud: eBay purchase for Nigeria using BidPay (Western Union)
"Tawa Enterprises" - attempted $98,600 fraud from Lagos, Nigeria
officelineworld.com - Be careful with orders from Nigeria!

"SP Trade Investments Capital Ltd" (sp-traderfund.com) [2004-11-23]
"Arkolaptops.com / Arco-laptops.com" [2004-11-23]
"skytech-computers.com" [2005-01-21]
"skytech-inc.com" [2005-01-22]
"pc-home.biz" [2004-12-19]
tt-transports.com (2005-01-24)
support-escrow.com fraudulent escrow service [2004-12-10]
wise-pay.com fraudulent escrow service [2004-12-10]
solidibank.com (hosted in Thailand)

Link exchange spam:
Link exchange offer spam
Getting creative with spam
Link exchange spam: allcarpictures.com

Sober-G/Sober-H:
Xenophobia, Spam and Viruses: The "German Spam" (Sober.H, Sober.Q)
Sober.H, Sober.Q – Racist German email spam spread by virus (in German)

Annoying and stupid:
Addressbook spam
Clueless virus filters spam innocent third parties
Challenge and Response spam filters: A selfish idea for selfish times
1.txt spam
Spam from sms.ac - Who are these guys?
Bank account debited by SOHQPAY.COM
Gouranga-spam

Abused sender addresses:
"Joe job" against joewein.de
Porn spam: watchsound.com
Porn spam: hotsalza.com

Spam domain name servers:
Name servers used by spammers: joker.com
Rogue name servers: mediadreamland.com
Rogue name servers: airmaramba.biz
Rogue name servers: bonafidecash.com
Rogue name servers: maileasy.biz

Browser hijacking: heretofind.com

Domain Blacklist Archive:
2006-03: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2006-02: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
2006-01: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-12: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-11: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2005-10: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-09: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2005-08: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-07: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-06: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2005-05: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-04: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2005-03: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2005-02: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28
2005-01: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2004-12: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2004-11: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2004-10: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
2004-09: 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
2004: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov
2003: Oct, Nov, Dec

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!