What happens to a website when their owners are not using it anymore?

Mammut is a Swiss company specialized in mountain sports. Personally I was not familiar with this brand, but thanks to the desenmascara.me project a vast amount of brands, being counterfeited in the black corners of Internet, have become known for me.

 Mammut logo

While doing some research about the Mammut brand in order to add it to the desenmascara.me service, I come across the below web domain:

http://www.bldgblok.com

Created on 2012-02-09, expired TODAY and registered through a proxy as it’s common on this activities to not disclose owner details:

http://whois.domaintools.com/bldgblok.com

 
which shows (at the time of this writing) a tipical 'access denied' message as below:

Forbidden

You don't have permission to access /quickstart.html on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

And based on this linkedin page, the above domain belongs to an Architecture and Planning company located in New York, without much activity lately as their last twitter was on 10. Jun 2014.



But then the thing is that such a web domain has some indexed resource such as:

Mammut keywords in the www.bldgblok.com site

With several misconfigured mammut links pointing to a vast amount of FAKE websites targeting to the main fashion brands such as:

Gucci FAKE website

Tiffany FAKE website

Moncler FAKE website

NFL FAKE website

Louboutin FAKE website

RayBan FAKE website

and even fashion FAKEs hoverboards

UGG FAKE website taken down

The above examples are just a few sites to give you an overview of the size of this knock-off luxury campaign which target to many luxury brands at once. But of course there are more roles involved on campaigns like this such as spammers either on twitter:

Notice the change when the twitter account is mentioned

or in the below google search (which at the time of this writing has no results anymore. -Well done Google.):

“link:http://www.bldgblok.com mammut“

The above google search did show hundreds of results with websites either compromised (due to old Joomla versions..) or spammed with comments to distribute this massive spam campaign of knock-off luxury products. 

This knock-off luxury online campaign does show how this online counterfeit business operate in a conglomerate of entities linked between them with different roles and ramifications as pointed out  in this Google research.

By collecting information from all the above FAKE websites there are email address and more information which is useful to track more FAKE online campaigns from the same actors. I tried to contact with some of the targeted brands but the communication was not successful so this article is just to let you know how this business operate online and to let you know what happen with a web domain which is not used anymore by their owners but it remains still active: it will be used by the bad guys!!.

If you are a brand representative of any of the brands affected either on this incident or any other online counterfeiting issue, do not hesitate to contact me for further details and cooperation.

If you do not trust a website unmask it to see what is behind it