1 / 115

A study of ” Chinese counterfeit shops”

A study of ” Chinese counterfeit shops”. The growing threat to the ” free ” Internet. RIPE 65 27 sept 2012. Peter Forsman Abuse Manager @ .SE ( aka ” Internet Sweden ”). ..the bitter pill. .SE ( The Internet Infrastructure Foundation ).

thy
Download Presentation

A study of ” Chinese counterfeit shops”

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. A studyof ”Chinesecounterfeit shops” Thegrowingthreat to the ”free” Internet RIPE 65 27 sept2012 • Peter Forsman • Abuse Manager @ .SE • (aka”Internet Sweden”)

  2. ..the bitter pill .SE (The Internet Infrastructure Foundation) ” Make it as difficult and inconvenient for thugs under .se, that they choose other TLDs for their activities.” .SE WhatI canthandleunder .SE, I write about on my bloginternetsweden.se

  3. So whatdo I define as”Chinesecounterfeit shops”?

  4. Falsesecurity?

  5. Free to use for anyone?

  6. We start 2 yearsago..

  7. ICE takedown on 82 domains29/11 -10

  8. ICE takedown150 domains28/11 -1168 morethen the yearbefore

  9. ”Operation FakeSweep” Out of 150 domains= 120 related to NFL and Football-jerseys

  10. And right before Super Bowl

  11. ICE did 525 takedowns in only 450 days – butdid it actuallyhadanyeffect on anything?

  12. Searchvolumes - global

  13. Searchvolumes - Sweden

  14. Whatreallystarted my interestwas a search of ”Moncler” last year

  15. MONCLER – check 5/11 2011

  16. MONCLER – check 5/11 2011 This domainwasregisteredonly3 daysearlier! 3 days to reach 3rd place in the competition of 55, 5 millions websites. And on top of that, with a 70 percentdiscount offer – whichattractany ”buyer”!

  17. Howwas this possible? • Spamblogs • Comment spamming - Articlesbehindthe ”chinashop” • SQL-injections, FTP-intusions, SW Exploits So lets look at [monclersverige.org]!

  18. Blog- and comment spam

  19. Facebook-cloneflinkos

  20. The user shows relation to anotherblog

  21. Confuse by redirects

  22. Valueaddedredirects Checkedlink: coachfactoryoutletstore-online.net Type of redirect: 301 MovedPermanently Redirected to: online-storecoachfactoryoutlet.com Checkedlink: online-storecoachfactoryoutlet.com Type of redirect: 301 MovedPermanently Redirected to: http://www.outletstorecoachfactoryonline.com coachfactoryoutletstore-online.net = Registrar: NAME.COM LLC (12 nov 2011), heqiannikesuppliers3@hotmail.com online-storecoachfactoryoutlet.com = Registrar: INTERNET.BS CORP. (4 apr 2012) ”FundacionPrivate Whois” outletstorecoachfactoryonline.com = Registrar: ENOM, INC. (10 apr 2012), WhoisGuard

  23. outletstorecoachfactoryonline.com

  24. Just stop for a sec! Checkedlink: coachfactoryoutletstore-online.net Type of redirect: 301 MovedPermanently Redirected to: online-storecoachfactoryoutlet.com Checkedlink: online-storecoachfactoryoutlet.com Type of redirect: 301 MovedPermanently Redirected to: http://www.outletstorecoachfactoryonline.com coachfactoryoutletstore-online.net = Registrar: NAME.COM LLC online-storecoachfactoryoutlet.com = Registrar: INTERNET.BS CORP. outletstorecoachfactoryonline.com = Registrar: ENOM, INC. A 301 redirectis understood by Google as if the address is permanentlymoved and all rankning and strength from linksis forwarded to the new address.

  25. So this means! BLOGSPAM, SEO, LINKS, BLACK HAT coachfactoryoutletstore-online.net Chinashop

  26. So this means! BLOGSPAM, SEO, LINKS, BLACK HAT coachfactoryoutletstore-online.net online-storecoachfactoryoutlet.com Chinashop

  27. So this means! BLOGSPAM, SEO, LINKS, BLACK HAT coachfactoryoutletstore-online.net online-storecoachfactoryoutlet.com outletstorecoachfactoryonline.com Chinashop

  28. SPAM! During a fewweeksmay 2012.. ”Uttalande denna korta artikel” Which is ”Google translated” probably from anotherlanguagethenenglish.. ”Statement this shortarticle”

  29. SPAM!

  30. SPAM!

More Related