People have reported receiving spam via text on their cellphones which tells them that they won a gift card and directing them to visit bestbuygold.net.Going to the site, I was redirected to http://126.96.36.199/bb// which looks like every other scam site posing as one offering you a Best Buy gift card. Nothing special about it.
"Thanks for your recent entry into out contest! You were victorious. Please enter 8747 at www.BestBuyGold.net to claim"
I decided to try a WHOIS search and discovered this:
DOMAIN: BESTBUYGOLD.NETFrom what I have seen, the email address firstname.lastname@example.org is associated with no other websites. The site is registered through Kalyhost, so I will be reporting this site to them as soon as I am done writing this blog. The server belongs to Softlayer and they will be getting an email from me soon.
created-date: 2013-01-28 16:10:10
updated-date: 2013-01-28 16:21:44
registration-expiration-date: 2014-01-28 16:10:10
owner-name: James Louis
owner-street: 4948 West Easy Brook Lane
admin-name: James Louis
admin-street: 4948 West Easy Brook Lane
tech-name: James Louis
tech-street: 4948 West Easy Brook Lane
billing-name: James Louis
billing-street: 4948 West Easy Brook Lane
nameserver: ns1.xta.net 188.8.131.52
nameserver: ns2.xta.net 184.108.40.206
The site BestBuyGold.net is simply a redirect to http://220.127.116.11/bb// and I discovered this site is registered in China. Of course, this is no surprise, since every Best Buy scam site I have blogged about comes from there.
Other websites that serve as a redirect include:
Websites that are no longer online include
Another link maing the rounds is bestbuybonus.net but that site is apparently down. However, the spammers haven't gotten the message and continue to textspam people.
If you enter any four-digit number in the box, it again redirects you to another site. This one is freegiftcardworld, an anonymously-registered site with its domain IP out of the Netherlands, but with servers located in the USA and the United Kingdom.