If you’ve event run events on Facebook or another social media platform, you’ve probably run into the problem before of bot accounts posting on your event. A new one that came to us recently was a complete fake page setup in the name of the event which then created some fake events using logos and images from the event.
Bot accounts were sharing this page and event and bot accounts were also posting on the real event’s posts trying to encourage people to watch a live stream (there was no live stream).
SPAM website being promoted: livestreams-now.com
All the details of the domain are redacted as you’d expect.
The webpage is a rather generic (stuck in the 90’s?) page offering to sell you access.
The watch now link directs you to a script on the 8pp33.com domain which in turn bounces through mcmo22.com then go.tffkroute.com then turnhub.net and finally lands you at goenjoymedia.com which is a more modern site where you can sign up to stream…. it doesn’t really say.
goenjoymedia.com is appearing as the destination for lots of other urls so it’s clearly the endpoint for a whole lot of this fake event SPAM from multiple sources.
It you’re running events, this is now a fact of life.
Tip from the submitter, contacting Facebook Business Support by messenger is the quickest way to get these pages and events shutdown (they found out after the fact).
@nexigen.digital
Registrar Abuse Contact Phone: +61.383999483
Reseller Name:
Status: serverRenewProhibited https://afilias.com.au/get-au/whois-status-codes#serverRenewProhibited
Status Reason: Not Currently Eligible For Renewal
Registrant Contact ID: 1629817392279102
Registrant Contact Name: Domain Admin
Tech Contact ID: 1629817392279102
Tech Contact Name: Domain Admin
Name Server: NS1.SYD4.HOSTYOURSERVICES.NET
Name Server: NS2.SYD4.HOSTYOURSERVICES.NET
DNSSEC: unsigned
Registrant: KAAY HOLDINGS PTY LTD
Registrant ID: ABN 78166666164
Eligibility Type: Company