Monday, March 14, 2011

Clsafe.org

Clsafe.org is yet another site pretending to offer the CraigslistSafe verification service. Someone posted a m4w ad on Craigslist and received this reply from "Elizabeth Babicke" (robynwhitfield55kk@yahoo.com):
hey I saw your ad and would love an occasional hookup partner.so get back to me.



After he replied to her, he received this message:

hi again are you free right now totalk?
i screen so do this for me and message me on there
securedate
cant stay on much longer though


talk to ya soon,
elizabeth




The securedate link in the message points to http://www.clsafe.org/profiles/elizzy.




The sign up form is contained inside a frame. When you look at the source code for the frame you see that it comes from sexxxxmatch.com, a porn site.


Again, there is no CraigslistSafe verification service. Clsafe.org is not a dating site, it's just a scam used to sign you up for porn sites and the scammer who owns clsafe.org gets a commission for each person he signs up. Anytime a site asks to use your credit card to verify your identity, it's a scam like this one.

Saturday, March 12, 2011

Bumpdate.org, Greatdater.org, Prodater.org, Realtimedate.org

We've found some new dating verification scam sites very similar to the old site Livesafetoday.net which we got shut down.

The main site used for the scam is Greatdater.org. The other sites in the list just load the content from Greatdater.org in a frame. Once again, the scam here is that these are not real dating sites. They do not provide any dating service or verification service. There are no site members for you to meet. If you give these sites your credit card number to verify your identity, what will actually happen is that you will be signed up for porn sites. You can verify this by

Bumpdate.org
Greatdater.org
Prodater.org
Realtimedate.org

The ISP for Greatdater.org is Pacnet. If you would like to help get this site shut down, then forward your e-mail with a complaint to abuse.hk@pacnet.com.

UPDATE 3/16/11
The site Dailydater.org is also being used for this scam. It is yet another site that loads pages from Greaterdater.org. And as of now, Prodater.org and Realtimedate.org are loading content from various other scam sites.

Monday, March 7, 2011

Craigs-date-safety.org

The Jeni Saten scam has been moved to yet another server, Craigs-date-safety.org. The previous server that we reported that was being used for the scam, Craigslist-safe-dates.org is no longer active.




Craigs-date-safety.org is being hosted by Leaseweb.com. If you'd like to help get this site shut down, then forward the messages you received from Jeni/Jenni/Jenn along with the message headers to abuse@leaseweb.com. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that craigs-date-safety.org is a known scam site. It might also help to provide links to these posts:

http://craigslistdatingscams.blogspot.com/2011/01/craigslistdatesafelycom.html
http://craigslistdatingscams.blogspot.com/2011/02/craigslist-date-safeorg.html

Friday, March 4, 2011

We're back! And we have a new blog!

Finally, our blog has been restored! It took more than two weeks, but here we are again. For those of you who don't know, this blog was flagged by Blogger's spam-prevention robots as being a possible spam blog. We received the following message when we logged in to our Blogger account on February 12th and tried viewing the blog.
Blogger's spam-prevention robots have detected that your blog has characteristics of a spam blog. (What's a spam blog?) Since you're an actual person reading this, your blog is probably not a spam blog. Automated spam detection is inherently fuzzy, and we sincerely apologize for this false positive.

We received your unlock request on February 12, 2011. On behalf of the robots, we apologize for locking your non-spam blog. Please be patient while we take a look at your blog and verify that it is not spam.

Luckily we had a backup of the blog saved on disk and we were able to create a mirror of it over at Wordpress. That blog is Craigslist Scams.

But even so, two weeks to have our blog restored is much too long of a wait as far as we're concerned. Also, there's the possibility that our blog might get flagged again. On the Blogger help forums there is someone who complained that this happened to him three times! A situation like that is just not acceptable, so we've decided that from now on, our Wordpress blog Craigslist Scams will be our primary blog and that this one will the backup. We will post are articles over at Craigslist Scams and also post them here, but we will no longer accept comments on this blog; all comments that you wish to make on any of the posts on this blog should be made on the matching posts over at Craigslist Scams.

Thursday, February 17, 2011

Livesafetoday.net has been shut down.

Livesafetoday.net and all of the other sites that were associated with the fake hosting company Global-host.org

easydatingnet.org
freemail4you.org
global-host.org
myprivatemailbox.net
onesinglesnet.net
safe2day.net
send2mail.org
send3me.net
wktv5newsalerts.com
zmails.org

have been shut down. The ISP for these sites is Ecatel, a company that pretty much ignores complaints. They were shut down on February 8th, soon after the following message was sent to Ecatel.

By the way, it's clear that the person who owns these sites is Christopher Lawell, the person who owned mysafenet.net and localsafe.org, which were also on Ecatel servers. (http://craigslistdatingscams.blogspot.com/2010/12/christopher-lawell-and.html) Let Mr. Lawell know that he should shut down his current scam sites if he wants to avoid further embarrasment.

Yes, these sites are owned by Chris Lawell a.k.a VegasChris, the man who sells the e-whoring chat bot Miyabot and who ran the scam sites localsafe.org and safeandlocal.org. After he was informed that we knew he owned the sites, he shut them down himself. Ecatel did not suspend his account, because if that had happened, then the sites would still have been up but displaying a message saying that the account had been suspended.

For now we're not going to publish the evidence that led us to the conclusion that Chris Lawell is the owner of these sites. We're not interested in helping him become a better scammer, so if he wants to know how we discovered this information, he'll have to figure that out for himself. Perhaps if he decides to stop remaining silent we'll provide some details, but he's obviously never going to do that since the last time he tried defending himself he gave a story which we showed to be false. He prefers to just remain silent and avoid embarrassing himself again.

Wednesday, February 9, 2011

Craigslist-safe-dates.org

The Jeni Saten scam lives! It's been moved to yet another server, Craigslist-safe-dates.org. Jennifer (also Jen, Jeni, Jenni, and Jenn) has new email addresses now:

jenthehottie@live.com
jennthehotie@live.com

Here are a couple of her messages.

hey there big guy, i hope your big in all the right places ;) was my ad enticing enough? haha. i post on that site because I just love random SAFE sex with strange guys, nothing gets me wetter, and my nipples harder! lol! I AM REAL! are you?! i hope your not a spammer. geez whats up with those people? always asking me if im a 'bot', what the hell is that? what positions r ur favorites? mine is doggy, and i just love getting my titties fondled.. and i hope you have a taste for fish haha! just kidding, im clean and disease free (and u defintely must be the same), you do give oral right? dont be lame -_- because i love sucking cock, and love gagging. and gettin jizzd on my face.. but sorry i dont swallow, ew. so when do you think we can meet up? most definetly not my place, and im not going to ur place.. so a hotel.. on you of course haha!.. bring some alcohol, it always adds to the fun! please dont ask for any personal info.. im here for discrete encounters.. i just have way too much energy rite now! gotta stop drinking them darn redbulls.. i hope i can use this energy in more productive/fun ways, ;) hehehe. anways, ive attached a few pix of me, im hot rite? rethorical question! i know i am ;p well, if you're interested, reply back!

xoxo
~me!

i had a feeling i'd hear from u again ;P i know, im hot.. but wtf is up with these losers who do not want to meet up and give me a good dicking? wtf?! i hope ur not afraid of a real woman, r u tough guy?! i figured the best way to do this without me giving u any of my info. i created a profile here: http://www.craigslist-safe-dates.org/jenn/ it wont let you access it if you're a child under 18, and i wouldnt want an inexperienced kiddie tryin to sex me up.. and besides that, its considered rape! haha. i am 23 afterall, u r legal rite? prove it! anyways, once u log in, u'll get my number (no its not my real #, and u wont be getting that!) but this number forwards to my celly. so just give me a call and lets do this! hope to talk to u soon, u have sexy voice amirite? i hope to find out! xoxo~

~me again!


The messages are being sent from a server with IP address 96.43.138.23, which is owned by Joe's Data Center. To help get this scam shut down, send a complaint to security@joesdatacenter.com. Be sure to include a copy of the headers along with the message. You should also send a complaint to Mir Telematiki Ltd, a.k.a Hostkey, which is the ISP for Craigslist-safe-dates.org. Their address is support@hostkey.ru.

Tuesday, February 8, 2011

Craigslist-date-safe.org has been shut down

Complaints were sent to Turnkey Internet about Craigslist-date-safe.org and they have shut the site down. A complaint was also sent to Staminus Communications about the account that was used for sending the fraudulent email messages from Jeni Saten and they said they are asking their customer to take action.
Thank you for your report.

We have forwarded your report to our downstream customer for review and action.

We have also assisted you by reporting the domain to craigslist.com as a possible copyright/trademark infringement so that they can confiscate the domain and shut down the fraud.


Best Regards,

John Blazek
Abuse Department
Staminus Communications
Office: 949-202-5305
http://www.staminus.net
Dedicated Server Hosting Solutions

Thank you Turnkey and Staminus for your quick response to these complaints and for taking fraud seriously.

Monday, February 7, 2011

Craigslist-date-safe.org

Remember Jeni Saten and Craigslistdatesafely.com, which were reported on January 21st? We were able to get Craigslistdatesafely.com shut down, but this scam has been moved to a new site, Craigslist-date-safe.org. She (he, most likely) is still using the e-mail addresses jenisaten@live.com and jennisaten@live.com. The site is being hosted by Turnkey Internet and the email messages are beings sent from a server with IP address 72.20.18.226, which is owned by Staminus Communications.

If you'd like to help get this site shut down, then forward the messages you received from Jeni/Jenni/Jenn along with the message headers to abuse@turnkeyinternet.net and abuse@staminus.net. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that craigslist-date-safe.org is a known scam site. It might also help to provide links to these posts:

http://craigslistdatingscams.blogspot.com/2011/01/craigslistdatesafelycom.html
http://craigslistdatingscams.blogspot.com/2011/02/craigslist-date-safeorg.html

Sunday, February 6, 2011

Asaferdate.org (Livesafetoday.net)

Recently, someone received this cryptic message from Chelette Dullen (cheletterfiw@hotmail.com) in response to a m4w ad that he placed on Craigslist.

length into self Theyf

That was it. Being curious, he replied to her and he then received this message from Hilde Hearst (hildehearst217@yahoo.com) along with a photo.

Hey there. We are a very fun couple looking for some fun with a bi guy :) Race is no big to us, we are both caucasian, but we welcome everyone :) I am 32 and he is 22, so anyone in that age range is welcome :)


So he played along and sent a message to amy@zmails.org. He got a reply from "~ amy :-)" (phylabespectacledfa@gmail.com) asking him to visit asaferdate.org.

Hey, Im very happy ur for real! I have had a horrible time meeting some one normal to hookup with. You appear to be the kind of guy i'd really love to get to know.

I'm trying to arrange a NSA arrangement. I assume that is what you are here for also. I don't do this often, but having recently gotten out of a 5 year relationship.

If you're interested in meeting with me, I have only got one requirement. I had a really scary experience with a guy once so I am requiring you to register here for my peace of mind. Theres no cost and it will just ensure I can enjoy my time with you and not be nervous when we meet. I just want to have good time and if you can't do this for me, then it won't be any fun and I'd appreciate it if you just didn't contact me back.

If this sounds good to you, just go here:
http://asaferdate.org Fill out a username and send me your profile details. I can then private message you to make plans. My contact info is on there along with some photos and even a video message I made.

I hope to meet you soon. Im really excited to meet someone new.

Amy

This site, like safenetdate.com which was reported here on February 1st, has just a frame that loads a page from the fake dating site Livesafetoday.net which was reported here on December 20th. It's the same page, as a matter of fact: livesafetoday.net/id-amy1102.

UPDATE 2/7/11
Livesafetoday.net and zmails.org both have IPs administered by Ecatel. If you'd like to help get these sites shut down, then send a complaint to abuse@ecatel.net. Forward them the message you received along with the message headers.

Asaferdate.org has an IP administered by Netelligent. To get that site shut down, send a complaint to abuse@netelligent.ca. Forward them the message you received along with the message headers.

Instructions on how to view message headers are available at spamheaders.com.

Craigssafe.com

This summary is not available. Please click here to view the post.

Tuesday, February 1, 2011

Messages from Amy of Livesafetoday.net and Safenetdate.com

A report on the fake dating site Livesafetoday.net was posted on December 20th, 2010. Here are some sample messages you receive from "Amy" who supposedly has a profile on that site.

Delivered-To: **********
Received: by 10.229.25.15 with SMTP id x15cs294686qcb;
Tue, 1 Feb 2011 19:10:29 -0800 (PST)
Received: by 10.204.71.141 with SMTP id h13mr7580074bkj.180.1296616228078;
Tue, 01 Feb 2011 19:10:28 -0800 (PST)
Return-Path:
Received: from mailout-eu.gmx.com (mailout-eu.gmx.com [213.165.64.42])
by mx.google.com with SMTP id j10si51971927bka.45.2011.02.01.19.10.27;
Tue, 01 Feb 2011 19:10:28 -0800 (PST)
Received-SPF: pass (google.com: domain of ilene62024@gmx.us designates 213.165.64.42 as permitted sender) client-ip=213.165.64.42;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of ilene62024@gmx.us designates 213.165.64.42 as permitted sender) smtp.mail=ilene62024@gmx.us
Received: (qmail invoked by alias); 02 Feb 2011 03:10:25 -0000
Received: from NSG-Static-074.33.72.182.airtel.in (EHLO hf4fi488ce) [182.72.33.74]
by mail.gmx.com (mp-eu001) with SMTP; 02 Feb 2011 04:10:25 +0100
X-Authenticated: #70993414
X-Provags-ID: V01U2FsdGVkX1/FL4cmNALFb4BOIqAZqU/GY4+gHB9Aq6Mbfi+G3v
TtHDDLdQWr3ogX
MIME-Version: 1.0
Date: Tue, 01 Feb 2011 19:09:57 -0800
X-Priority: 3 (Normal)
Content-Transfer-Encoding: quoted-printable
Subject: Re:
Content-Type: text/plain
From: "Amy"
To: "*****" <**********>
X-Mailer: Opera/6.05 (Windows 2000;
U) [fi]
Message-ID:
X-Y-GMX-Trusted: 0

Hey,

I am very excited ur not fake! I've had the hardest time finding some body normal to meet. You appear to be the kind of guy I would really like to get to know.
i am trying to find a no strings arrangement. I assume that is what you are looking for as well as. I don't do this much, but having recently gotten out of a 3 year relationship.

If ur interested in meeting with me, I only have one requirement. I had a kinda scary situation with a guy once so i am requiring you to register here for my peace of mind. Theres no cost and it will just make sure I can enjoy my time with you and not be concerned when we hookup. I just want to have some fun and if you can't do this for me, then I won't have any fun and I'd appreciate it if you just didn't contact me again.

If this sounds reasonable to you, just go here:

http://n2z7321z.safenetdate.com

Fill out a username and send me your profile info. I can then private message you to make plans. My contact info is on there along with some photos and even a video message I made.
I hope to see you soon. i am really excited to meet some body new.

amy

Delivered-To: **********
Received: by 10.151.109.12 with SMTP id l12cs178937ybm;
Tue, 1 Feb 2011 20:11:01 -0800 (PST)
Received: by 10.42.230.1 with SMTP id jk1mr10734117icb.67.1296619861152;
Tue, 01 Feb 2011 20:11:01 -0800 (PST)
Return-Path:
Received: from mailout-us.gmx.com (mailout-us.gmx.com [74.208.5.67])
by mx.google.com with SMTP id s15si54910icd.22.2011.02.01.20.11.00;
Tue, 01 Feb 2011 20:11:01 -0800 (PST)
Received-SPF: pass (google.com: domain of osgood610@gmx.com designates 74.208.5.67 as permitted sender) client-ip=74.208.5.67;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of osgood610@gmx.com designates 74.208.5.67 as permitted sender) smtp.mail=osgood610@gmx.com
Received: (qmail invoked by alias); 02 Feb 2011 04:10:58 -0000
Received: from 109-227-255-123.nts.su (EHLO hf4fi488ce) [109.227.255.123]
by mail.gmx.com (mp-us005) with SMTP; 01 Feb 2011 23:10:58 -0500
X-Authenticated: #70989690
X-Provags-ID: V01U2FsdGVkX18ocH0a2QYo6GsCNVLXcrI6qVl0XSCBNd2CU6pED8
06lLxYB8o+yybZ
MIME-Version: 1.0
Date: Tue, 01 Feb 2011 20:09:56 -0800
X-Priority: 3 (Normal)
Content-Transfer-Encoding: quoted-printable
Subject: Re:
Content-Type: text/plain
From: "Amy"
To: "**********" <**********>
X-Mailer: Mozilla 4.7 [en]C-CCK-MCD NSCPCD47 (Win98;
I)
Message-ID: <324DD01D48FAEF79E67743AC7ADA39CEE42845FB@hf4fi488ce>
X-Y-GMX-Trusted: 0


Hi,

I'm really glad ur real! I've had a really hard time finding some body normal to meet. You appear to be the kind of guy I would love to get to know.
I am trying to arrange a friends with benefits arrangement. I take it that is what you are looking for also. I don't do this often, but having recently gotten out of a 4 year relationship.

If ur still interested in meeting with me, I only have one requirement. I had a very scary situation with a guy once so I am requiring you to register here for my peace of mind. There's no cost and it will just ensure I can enjoy my time with you and not be concerned when we see each other. I just want to have some fun and if you won't do this for me, then I won't have any fun and I'd appreciate it if you just didn't contact me again.

If this sounds acceptable to you, just go here:

http://x6f8865y.safenetdate.com

Fill out a profile and send me your profile info. I can then private message you to make plans. My contact info is on there along with some photos and even a video message I made.
I hope to meet you soon. I am really excited to meet some body new.

amy

Notice a couple things here. The links in the messages are not to livesafetoday.net but to subdomains of safenetdate.com:

x6f8865y.safenetdate.com
n2z7321z.safenetdate.com

The subdomain is probably an automatically generated random string of characters used to identify the site's visitors and maybe to make it harder to find information on the site by searching the web. Right now, if you search for safenetdate.com on Google you get results. But at right this moment as I'm typing this you find no results for x6f8865y.safenetdate.com. Having a new, random string of characters added to the beginning of the domain name prevents people from getting any search results when they search for the full domain name stated in the email because there will be no web pages out there about safedatenet.com that contain that random text. This prevents people from finding reports that safenetdate.com is a scam.

Once you visit safenetdate.com or one of the subdomains you are actually viewing the site livesafetoday.net. All that safenetdate.com consists of is some rudimentary HTML with a frame that loads a page from that other site. In both of the examples above, the content comes from livesafetoday.net/id-amy1102/.

Craigslistdatesafely.com and Craigssafety.info suspended

Craigslistdatesafely.com and craigssafety.info have been shut down again. The hosting accounts for the sites have been suspended.

Discussion of emailrelatedservice.com and AVKY Inc at aa419.org

There was a thread posted over at aa419.org concerning emailrelatedservice.com and AVKY Inc. The thread is currently not available. Alex Vasser posted in it using the alias dartnight. He had a discussion with Philw wherein he made some statements denying that he, Kyle, and AVKY Inc owned emailrelatedservice.com and the scam sites hosted on it. He also said that he contacted HostGator and 1&1 about the sites and he related what he says the hosting services told him. Since we feel that his side of the story is important, we are posting his discussion with Philw of aa419.org here. At the end of this post are links to screen shots from Google's cached copy of the page that will show that we are posting Alex's and Phil's actual words. The times given are GMT.


dartnight
Thu Jan 27, 2011 12:54 am


Hello Phil

I received a phone call today from someone that started talking to me about something I did not understand. After a couple minutes they told me they found my number on this site and some blog. I spent the last couple hours trying to figure out what is going on. Both me and my friend kyle were really shocked to see all this info on us. I called 1and1 and all their departments other then technical are closed so I have to talk to someone tomorrow. This is indeed our company and correct information, BUT we are not associated with these websites. We will be following up with that domain provider trying to figure out whats going on and how we can get these people taken down. So far they have atleast temporary closed the domain down until we call tomorrow and figure this out with the correct department. We do not know how our company and names got involved in this but you bet that we are taking this seriously and will be trying to find out. The good news is we have checked all our credit cards and no unauthorized charges have been found. So all the information they had about us atleast did not include credit info. Kyle's credit card did get replaced for a breach in a merchant database(or something along those lines), but that was atleast a year ago so not sure how this would have to do with it. Thank you for finding this and bringing this to light.I would appreciate if you could take down some of our personal info and possibly guide me on who I need to contact other then 1and1 to get this resolved. I have messaged you my email


dartnight
Thu Jan 27, 2011 12:55 am

Seems like I do not know how to message you here, but do not want to post my email on here, so if you can message me please do.


Philw
Thu Jan 27, 2011 4:38 pm


Alex,

I'm not sure who you are referring to when you say domain provider. Are you talking about HostGator? You can send a complaint to them at security@hostgator.com. They also have other support options.

For the domains that are using your personal and company information, in addition to contacting 1&1 you should file a complaint on the Internic website and you can also try contacting the registrar.

http://wdprs.internic.net/
http://registrar.schlund.info

Please let us know what HostGator and 1&1 have to say about all of this.


dartnight
Thu Jan 27, 2011 8:21 pm

Phil,

Ok I contacted hostgator and they told me the hosting and domain has been taken down and they are investigating. They took the issue seriously and didn't just blow me off but when I tried to get more information from them about the owner of the sites they wouldnt tell me. They said I would need a court order to find information about payee and such. They basically just gave me the run around saying they are conducting their own investigation from prior complaints. Also they did tell me who its publicly registered to and it doesn't seem like its me, its some other address which sounded fake and the last name vanner and not mine. So I left it at that.

I tried calling 1and1 again today and receive a "because of Philadelphia weather, our office are currently closed, try again tomorrow". Thats what it said yesterday. I will be calling again tomorrow, but am slightly discouraged after during further reading. According to some websites I read, unless a court order is issued companies are not allowed to disclose anything. So atleast they already took down the site's and when I get a hold of them hopefully they can help remove our names from there and clear our names and company of this mess. If not I will be submitting to that internic site you linked for me(but I am not sure what the second link is to or what to do with it).

Can you remove our personal information as well please, its hard enough trying to get this sorted out, all while receiving phone calls/facebook messages and such. Thanks again for pointing this out, never thought all that identity theft garbage they advertise on the radio would hit so close to home. We are just happy that its not our financial data i suppose.


Philw
Thu Jan 27, 2011 10:59 pm

Well, emailrelatedservice.com was not suspended by HostGator. The people who own it are just hiding their content. If the site were suspended, you'd always be automatically redirected to HostGator's suspended page whenever you try to access any content on the site. That doesn't happen. It's still possible to see the default website page, for instance.




Also, my little buddy DJ Adulesentz informed me that when you call 1&1 you receive no message about the office being closed due to the weather. I confirmed this myself.


dartnight
Thu Jan 27, 2011 11:03 pm

Hmmm, looks like Ill have to call them again. Always the run around


As for 1and1, please try and call them and you will see... You have to go through the steps to be transferred to the correct departments. Ince you hear a dial, you will be transferred to an answering machine with that message. Or if you talk to technical support, ask them....


dartnight
Fri Jan 28, 2011 6:50 pm

How are you reaching that page, I do not see it when I go to that link. Hostgator will not go further then say they are doing their own investigation.

Why are you deliberately avoiding responses to me asking to take down our information, we shouldn't be punished for something that is not our doing especially when we are the victim of this situation as well. Doing all we can to clear this up, but the effectiveness of the domain/hosting company response to this shouldn't have anything to do with us.


Philw
Fri Jan 28, 2011 10:32 pm

More changes have taken place. Emailrelateservice.com no longer resolves to an IP address and some of the registration information for the sites has changed.


Domain name: emailrelatedservice.com

Registrant Contact:

don divenchenzo ()

Fax:
750 w scottsdale rd
tempe, fl 85254
US


domain: safelyhookup.com
created: 09-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 09-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com


domain: securemeetup.com
created: 12-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 12-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com


For emailrelatedservice.com there is a new registrant name (Don Divenchenzo) and a fake Florida address. For safelyhookup.com and securemeetup.com there is a new Tempe address and an Alabama phone number.

Alex, regarding your personal and corporate data, I am going to leave the registration information that was reported by the whois servers since that was what was on record. I will remove the Facebook screen shots even though there is nothing in them that is really private or that should cause you any embarrassment. I will leave the rest of the information up unless a site administrator asks me to remove it because I believe that it is still an open question as to whether AVKY Inc, you and Kyle, actually own these sites. The circumstances here are rather suspicious. The registration information for the sites has your corporate information and a registrant name similar to yours that looks like a deliberate alteration of your real name. When Kyle discovered that this information was posted here he changed his Facebook name and hid all of his personal information. The site emailrelatedservice.com was not suspended as you said it was, and I think that it is very unlikely that HostGator would go ahead and say that it was suspended when it wasn't. I've dealt with them many times in the past and they do not appear to be the sort of company that would lie about something like this. As a matter of fact, I know that the people who run emailrelateservice.com were busy hiding their content a couple nights ago. At first they moved the content into a directory called ztemp. For a while I was still able to view the content in that directory, but then its permissions where changed so I couldn't access it.




I'm sure that they noticed my activitiy on their site because they then tried to change things so that you would always see a blank page regardless of the path in the URL. However, they didn't or couldn't get this to work completely and it was still possible to view the default website page. Now they have made these changes to the registration information and they have changed the DNS information so that emailrelatedservice.com no longer resolves to an IP.

None of this proves that AVKY Inc owns these sites, of course, and I am not going to make any claims like that or argue about it at all because the information here is inconclusive. I will simply state that it is an open question and no one should take what is presented here as proof that AVKY owns these sites. I will also say to anyone who has had their money taken by these scams that they should not contact you or Kyle or AVKY Inc. It has not been shown who owns these sites and it would not be right to send complaints to either of you or your company. Victims of these scams should instead send complaints to the hosting companies, www.ic3.gov, their banks or credit card companies, and also contact their local police.


Screen shots of the conversation:

Part 1
Part 2
Part 3
Part 4
Part 5
Part 6

Saturday, January 29, 2011

Emailrelatedservice.com is down

Emailrelatedservice.com no longer resolves to an IP address and the sites listed on January 22nd all appear to be dead. Some of the registration information for the sites has changed.

Domain name: emailrelatedservice.com

Registrant Contact:

don divenchenzo ()

Fax:
750 w scottsdale rd
tempe, fl 85254
US

domain: safelyhookup.com
created: 09-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 09-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com

domain: securemeetup.com
created: 12-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 12-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com

For emailrelatedservice.com there is a new registrant name (Don Divenchenzo) and a fake Florida address. For safelyhookup.com and securemeetup.com there is a new Tempe address and Aleksandr Vasser's phone number was replaced with an Alabama phone number.

Wednesday, January 26, 2011

Emailrelatedservice.com and AVKY Inc. (Update)

Well, there have been some interesting developments in this case. Complaints were sent to both HostGator, who host emailrelatedservice.com, and 1&1, who host the sites in the long list of emailrelatedservice.com scam sites. HostGator said that they are investigating the matter but 1&1 still have not responded. Some of the sites in that long list above are no longer active. For instance:

http://safecoupleconnect.com/
http://safecouplesconnect.com
http://safelyhookup.com
http://securemeetup.com

But emailrelatedservice.com is still up and you can still view their content there:

http://emailrelatedservice.com/SafeCoupleConnect
http://emailrelatedservice.com/SafeCouplesConnect
http://emailrelatedservice.com/SafelyHookup
http://emailrelatedservice.com/SecureMeetup

Another change is that Kyle Uchitel has updated his Facebook profile. He hid his friends list and all of his personal information and he even changed his name to Kyle Uch.



Hmm...

Monday, January 24, 2011

Securemeetup.com and Safecouplesconnect.com

Here are sample fraudulent email messages that are sent out to promote these sites. Some of the headers are included. Note that the senders' addresses are at the same domain, longtermwax.com, which is privately registered with 1and1.com. The sites being plugged are also privately registered with 1and1.com. The server emailrelatedservice.com is being used to host the content of these two sites. Emailrelatedservice.com is hosted by HostGator. If you receive an email message asking you to visit any of these sites, forward the message to security@hosgtator.com and abuse@1and1.com along with the message headers. Be sure to explain to HostGator that the site you visited gets its content from emailrelatedservice.com. Also explain to both hosting companies the circumstances under which you received the message (e.g., you replied to an ad on Craigslist, it was a reply to an ad you posted on Craigslist, etc.). Instructions on how to find the message headers can be found at spamheaders.com.

A sample email message promoting securemeetup.com

X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Mon, 24 Jan 2011 08:40:23 -0700
From: Tom Rozenberg <tomr@longtermwax.com>
To: ****** <**************>
Subject: Re: please help my wife out...
MIME-Version: 1.0
Content-Type: text/plain


hi thanks for replying to my ad. my name is tom and basically i am doing this for my wife of 15 years. I was recently injured in an accident, and can no longer 'be' with my wife the way we used to. I am in desperate need to do anything to help her out and her happiness is of utmost importance to me. Since we are both in an open relationship now she is looking for someone to come over and have 'fun' with on a weekly basis. I will not be there when you come over, so no worries regarding that.

we have enrolled to an online profile so my wife can chat with you online and on the phone prior to meeting with you to make sure the terms are ok. this is both for our and your safety. please do the same and email me back with your ID so I can forward it to my wife so she can talk to you. i appreciate you helping her out and i think it will improve the marriage for both of us. looking foward to hearing from you soon

securemeetup.com/profile=4222

tom


A sample message promoting safecouplesconnect.com.

Delivered-To: *******
X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Sun, 23 Jan 2011 15:27:51 -0700
From: Nicole Giovanni <nicole@longtermwax.com>
To: ******* <*******>
Subject: Re: cl couple 4 m meetup
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------F6FE13910AD86BF"

------------F6FE13910AD86BF
Content-Type: text/plain


Hi this is Nicole, thanks for responding to our cl ad. As previously stated in the ad, my boyfriend likes to watch me perform with another guy and gets really turned on by it all - and if it is ok with you, he usually wants to join. We have gone through this site to facilitate our hookups. We usually book a hotel room at the place shown on our page. Please go through the free hookup service we use to get connected to us. Can't wait to have you in me ;)


safecouplesconnect.com

nicole


UPDATE 1/25
We received another message from Nicole today. Now she's asking us to visit another of the emailrelatedservice.com sites, fucksafely.com.
From: Nicole Giovanni
To: ********************
Subject: Re:Re: cl couple meetup
MIME-Version: 1.0
Content-Type: text/plain



hey I was looking at the site that I gave you a few days ago and realized that it wants a credit card to verify!
I think that's un-needed and silly to do that so I found a better place that only requires your email to get in
touch with us. Sorry for the hassle, hopefully you can join us still ;0

we are still free the rest of the week and wanna meet up so come to my site and meet up with us now

http://fucksafely.com/nicole341/?bK3=2vnRc
nicole

When you visiting the URL in the message you are automatically redirected to the dating site Mate1.com. The scammers here are making money from directing traffic to that site.

Craigslistdatesafely.com is back online

Craigslistdatesafely.com is now back online with a new IP address: 219.23.9.179. If you receive any messages asking you to visit craigslistdatesafely.com, please send a complaint to abuse@worldstream.nl. The complaint should consist of a forwarded copy of the scam message along with that message's headers, and an explanation of why this site is a scam. (You can find such an explanation in our post about that site.) If you don't know how to view an email message's headers, then go to spamheaders.com for instructions on how to do this. If you have any more questions or need more assistance, please contact us at craigslistdatingscams (at) gmail (dot) com.

Saturday, January 22, 2011

Emailrelatedservice.com and AVKY Inc

The server emailrelatedservice.com is being used to host the content of numerous confirmed or suspected scam sites. Emailrelatedservice.com is hosted by HostGator and the domains that get their content from it are hosted by 1&1 Hosting. If you receive an email message asking you to visit any of these sites, forward the message to security@hosgtator.com and abuse@1and1.com along with the message headers. Be sure to explain to HostGator that the site you visited gets its content from emailrelatedservice.com. Also explain to both hosting companies the circumstances under which you received the message (e.g., you replied to an ad on Craigslist, it was a reply to an ad you posted on Craigslist, etc.). Instructions on how to find the message headers can be found at spamheaders.com.

http://annatsfreecam.com
http://ashleysfreecams.com
http://freecindycam.com
http://fucksafely.com
http://hannahsbestmassage.com
http://hannahsmassage.com
http://jqdproductions.com
http://jill4secretary.com
http://job-verify.com/ (suspected)
http://joshsfreecam.com
http://kimstsblogcam.com
http://kinkymeetup.com
http://www.layerproductions.com
http://www.lindseyspage.com
http://localtrannyhookup.com
http://mysafehookup.com
http://naughtymade4u.com
http://nsocdatabase.com
http://nursepleasure.com
http://parlorbyrachel.com
http://pornorecruiter.com
http://postnumbers.com
http://rachelpleasures.com
http://rachelsparlor.com
http://rachelsparlor4u.com
http://safecoupleconnect.com
http://safecouplesconnect.com
http://safegaymeetup.com
http://safelyconnectcouples.com
http://safelyhookup.com
http://safelymeetme.com
http://securemeetup.com
http://sexymaid4u.com
http://stacyshomepage.com
http://swingeasynow.com
http://tanyasfunpage.com
http://tinashaircuts.com
http://tinashcuts.com
http://topcitypleasures.com
http://trannyrubs.com
http://trannyproductions.com
http://vzyproductions.com

These sites all load their content from that emailrelatedservice.com in a frame. They are mostly fake dating sites that actually sign you up for porn sites, but some are variations on that scam. Rachelsparlor4u.com is supposed to be a site run by a massage therapist who is offering free massages for new clients. Ads are placed on Backpage advertising this special offer. When you reply to one, you get a response like this:

From: Rachel Henry [mailto:rachel@noreasontogoduh.com]
To: *****
Subject: Re: backpage response: providing no charge massage aro

thank you for the interest in my new special...with this economy i have been trying to acquire new customers by first giving away a few free massages.

I have been practising massage therapy since 2008, and no session is ever the same. My work is always changing

I do strive for a a perfect massage any way you like it to keep you happy, even if you want a happy ending and will make sure to take care of you well.

To speed up the process of me seeing you, and due to an overwhelming response so far, so go through my booking form below and send me a message to let me know when you are done to see me for free!


rachelsparlor4u.com

Job-verify.com appears to be a fake job search site, probably used for harvesting peoples' personal information, but this hasn't been confirmed.

Nsocdatabase.com is supposed to be the National Sex Offender and Criminal Organization Database. The way it works is that you receive a message from a girl who wants you to go to the site and verify you're not a criminal before she meets you. She gives you her member ID for the site. When you enter it there and click the "Check Now!" button, a message pops up saying that she's been verified and that now you should verify yourself. At the same time, a form appears for you to fill out. The form is loaded from a porn site. Here is some of the code for the click event for the button, which is contained in the home page of the site. This code shows that the site is not querying a database to verify people, but simply displays data embedded in the web page itself. It also shows that the form displayed when it's your turn to verify yourself comes from a porn site.
if(memID=='2938457'){

var pop3="http://www.freeteenpass.com/exit/pjs.php?popup=1&revid=247753&opt=&adtr=";

var include_file = document.createElement('script');

include_file.language = 'javascript';

include_file.src = pop3;

gName="Mandy Korsikova";

sexFM="female";

nameID.innerHTML=gName;

sexID.innerHTML=sexFM;

iBox.showURL('#inner_content');

document.getElementById("joinPage").style.display = "block";

test=1;

joinPage.innerHTML='<table width="500" height="72" border="0" bgcolor="#CC9999"><tr><td bgcolor="#CC9999"><div align="center"><iframe src="FPB.php" width="650" height="650" scrolling="yes" frameborder="0" class="style1"></iframe>'+'<iframe src="http://www.freeteenpass.com/?revid=247753&track=NSOCD" width="1" height="1" frameborder="0" scrolling="yes"></iframe>';

var phone="723";

}

The registration information for emailrelatedservice.com.
Domain name: emailrelatedservice.com

Registrant Contact:

Alex Vanner ()

Fax:
750 w scottsdale rd
tempe, 85254
US

Administrative Contact:
Hostgator.com
Brent Oxley (@hostgator.com)
+1.7135745287
Fax: +1.11
11251 Northwest Fwy suite 400
Houston, TX 77092
US

Most of the sites in the list are registered with privacy protection, but a few aren't.

domain: safelyhookup.com
created: 09-Aug-2009
last-changed: 03-Dec-2010
registration-expiration: 09-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 20100 N 78th Pl
registrant-street2: #2044
registrant-pcode: 85255
registrant-state: AZ
registrant-city: Scottsdale
registrant-ccode: US
registrant-phone: +1.4407257446
registrant-email: avkyinc@gmail.com

domain: securemeetup.com
created: 12-Aug-2009
last-changed: 03-Dec-2010
registration-expiration: 12-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 20100 N 78th Pl
registrant-street2: #2044
registrant-pcode: 85255
registrant-state: AZ
registrant-city: Scottsdale
registrant-ccode: US
registrant-phone: +1.4407257446
registrant-email: avkyinc@gmail.com

At the moment, it is still possible to see the registrant information for some of the privacy protected ones on sitetrail.com, probably because the protection was just recently added and this is cached registration data.


Safecouplesconect.com registration information. (Click to enlarge.)

Localtrannyhookup.com registration information. (Click to enlarge.)


The registration email address is avkyinc@gmail.com and the names used for registering these sites are Alex Vanner and Aleksandr Vanner. This Alex Vanner supposedly lives in the Phoenix area and he has an Ohio phone number. When I researched the phone number 440-725-7446, I found that it is owned not by an Aleksandr Vanner, but an Aleksandr Vasser. The Arizona Corporation Commission lists Alex as the Vice President of the company AVKY Inc which has an address in Scottsdale, Arizona, but whose state of domicile is Ohio. The address 20100 N 78th Pl #2044 is used for four of the above registrations, and this is also the corporate address for AVKY Inc:

http://starpas.azcc.gov/scripts/cgiip.exe/WService=wsbroker1/names-detail.p?name-id=F14121615&type=CORPORATION

The business type for AVKY Inc is given as "COMPUTER ADV", and its corporate application states its purpose as "sell advertisements on the internet". The director, president, and CEO of the company is listed as Kyle Uchitel. On Facebook, I found a Kyle Uchitel in Arizona who is attending ASU and who says his main job is internet advertising.

Kyle Uchitel (Click to enlarge.)


In the bottom left corner of the above picture, you can see that one of his friends is Alex Vasser, who lives in Scottsdale, AZ.

Alex Vasser (Click to enlarge.)


So these two guys are probably the owners of AVKY Inc. But are they also the actual owners of the scam sites, or is someone else using their personal and corporate data? That is still an open question.

Safelynsa.com and Safelydate.com

This summary is not available. Please click here to view the post.

Craigslistdatesafely.com and Craigssafety.info Have Been Blocked

Worldstream responded to the complaint about Craigslistdatesafely.com They have blocked the IP that the site was using. Since that IP was also used for Craigssafety.info, that site is now down too.

Friday, January 21, 2011

Craigslistdatesafely.com

"Jenn" (jenisaten@live,com, jennisaten@live.com, and others) sends us this:
Hiya! Im Jenn. I guess you like my ad huh? hahaha ;) I post on CL because I am new to the area, and do not know any guys, that, and i also love having safe sex with random strange guys... and boy am I hooooooorrrrny! Seriously, I have been here for three weeks and I have not found anyone! NO, I am not a "bot", whatever the hell that is, and I am very much sooo real, why do guys always ask that?..I've attached a few pictures, am I hot or what? I just love being pounded from the back, and I looove the taste of hot cum drippin down from my mouth (but no, i dont swallow, sorry).. gosh.. i guess you're a guy, you'll never understand! Of course, I like to also get eaten out! the longer your tongue the better! that also goes for your penis size hahaha. ;) I am down for whatever, maybe we can meet up at a hotel, and just do it like how they do it on discovery channel! haha. I want to be safe, so condoms is a must, and ofcourse, i have paperwork saying im disease free so hopefully you are too!.. and please dont ask for any personal information.. lets keep this discrete.. gosh I do not need ANYMORE stalkers. Anyways, if you're down.. reply back. see ya!

Jenn

One of her photos:



If you reply to this message you get another one where she asks you to visit craigslistdatesafely.com.

Thank god you wrote back! So you like the pics then? I am hot right?! Thats what I thought, but I cannot seem to get a good lay.. geez. All I want is a good fucking, that is it... no strings attached for either you and I... thank god i found someone, hopefully we can meet tonight? I created a profile with some sexy pics of me (yes, nude! lol) at
http://craigslistdatesafely.com/jenn/ they wont let you in unless you're 18 because of the nudity, and quite honestly, I wont meet you unless you're 18, i am 23 afterall and that would be considered rape! NO thanks! once you're a member, you will get my 'virtual phone number', so I dont have to give out my real one.. and just give me a call! hopefully we can meet up tonight?!! please! haha. seriously though, i need some.

As usual, the dating verification service that the site pretends to offer doesn't exist and the sign up form is in a frame that gets its content from a porn site, so all that you will end up with if you give them your credit card information is some subscriptions to porn sites.




Looking up the whois information for craigslistdatesafely.com shows that its IP address is 217.23.5.75 and that its ISP is WorldStream. Worldstream is known to take fraud complaints seriously, so a complaint is being sent to them about this site.The headers for the second message show that it originated from another Worldstream IP, 217.23.5.21, and that it was routed through servers owned by NetDorm a.k.a. DNSExit. A complaint is being sent to that organization too.

Tuesday, January 18, 2011

Safecasualdating.net

The site Safecasualdating.com that we reported on January 10th appears to be down. However, it has been resurrected as Safecasualdating.net. "Kaylee Gerhart" is sending out messages like this.

Hey! Thanks for writing back! I'm really excited to meet you. This whole "meeting a stranger" gets me hot just thinking about it. as i said in my last email, i'm just looking for some fun with no attachments. i just dont have time for the BS..u know? :) I'm just glad that you're into this type of thing too...sometimes guys get weird when a girl just wants to get her rocks off too... hehe
I made up a profile with more of my pics on it here: http://www.safecasualdating.net/id2877.html I also have some dirty ones there too...you just have to do the verify your age thing because they don't let anyone in thats under 18. this proves to me that you are real and who you say you are. have to be safe..as i'm still a girl...ya know? :)
once youre a member, my MSN and phone number are in the members area, so you can contact me asap. If I don't answer right away, leave me a message, so I can get back to you right away. I'm looking to do this hopefully tonight or tomorrow. HURRY UP!! i really need to get laid asap...i'm dying over here! THANKS,

Kaylee

The same email addresses are being used for sending Kaylee's messages:

kayleegerhart2234333@gmail.com.
kayleegerhart2233433@gmail.com

Kate a.k.a. Ashley

This summary is not available. Please click here to view the post.

Sunday, January 16, 2011

Kayla b.

"Kayla b." sends messages like this:
Hi there.

Thanks for your reply, I want to tell you a little about myself now, My name is kayla, I am GENUINE european girl, half german-half czech. I am very open minded and consider myself attractive... I drink socially, I do not smoke..trying to keep fit. When it comes to "these" things I am allways up for fun and trying new things. I am not a slut and I rarely go on craigslist, I just looking for some fun, I wanna hear some more about you and pics.

Let me know if your still interested


The email addresses she uses are superjj86@gmail.com, superjj75@gmail.com, and similar ones. The picture she includes is this one, which is a closeup of one of the same pictures used by "Roxane".




If you reply to this message, she sends you another one like this:

I am interested in something thats long term, NSA. I kinda want to keep this discreet - my ex-boyfriend is kinda a psycho ever since we broke up. haha.. 3.5 year relationship. Anyways.. I don't know if I told you or not yet, I have a daughter who is 22 months old, but she will always be sleeping by the time you come over...

This is my first time doing this kinda thing online - so Im kinda iffy about it.

I dont use any messengers - only one that I use at work...

i was hoping we could stay in contact from a free site if your interested in making it long term.... my profile is at http://tracking.singlesnet.com/redirect/8400?sid= .... my profile name on there is "sexcbebe5964" I have my cell phone number on there - if you want to send me a text and we could get together tonight or tomorrow night - that would be great.... im signing off the computer now though, hope to hear from you.


When you receive messages like this, you should never click on the link. Even if the website you get taken to is safe to browse, there is the possibility that the person who sent you the message is making money from the clicks and we don't want that scammer to stay in business.

Update 1/24/11
The address michsanch@gmail.com is also being used to send these messages.

Update 1/29/11
The site greatlocalnsa.com is also being used for this scam. It's supposedly part of the "Safe Dating Network".

Update 2/1/11
We would like to clarify exactly what sort of scam this is. Some people were under the impression that there is an actual woman here who is engaged in a romance scam, that this woman wants to get close to you in order to get your money. That is not what this is at all. There is no real woman behind these messages. They are sent out by an email autoresponder. The person who has this operation set up is trying to make money by directing traffic to dating sites. He has affiliate marketing accounts with these sites and he gets paid for each person who signs up, or perhaps for each person who visits the site. These sites themselves might be legitimate, but what this affiliate is doing is fraudulent since Kayla doesn't exist.

Wednesday, January 12, 2011

SafeHook-Up.com and AmateurMatch.com

"Roxane" has been very active lately. She sends you a message like this:

Hi there

Thanks a lot for your response, im sorta speechless by all these messages guys are sending me. It appears like most of them are not even replies for the post of mine, it seems to be an issue with the website or sometng.. Because your email really caught my eye I thought I’d answer back again to you first :)

My name is Roxane, I'm 22 yrs old and also a new school grad. and I moved right here two months before. I like adventuring and sports :) I have to admit that I'm not exactly that skilled in bed, even though I'm no longer a virgin, it is only because my ex-bf (we were dating for three years) was sorta prudish. Now that we are finally over I'm in need of sometng enjoyable to do :) Not really fascinated with a romantic relationsp, just sometng NSA, but I guess you never know what can occur....

We ought to hookup at either of our places, we could have a good time for a bit and then go our own ways? If we both like the other we could hook up awle longer - but that's all I'm interested in now.

Will you please go here and confirm you are not a killer or anytng.. It's totally free, didnt even ask for a credit card like a few of the other silly websites I’ve been to. You do not seem like the type of guy that would do anytng bad, but now a-days you cannot be too careful you know? I just hope to make sure we both have a secure great time :) Once you go there you can call me :) Please msg me then so we are able to figure out when to get together?

or this

Hey

Thanks a great deal for the email, I'm sorta speechless from all these emails guys are sending me. It seems like most of them are not even replies for the post of mine, it must be a problem using the website or sometng.. Simply because your email truly caught my eye I figured I’d answer back to you first :)

My name is Roxane, I am 22 years old and also a recent college grad. and I moved here two months ago. I enjoy adventuring and sports :) I gotta admit that I am not precisely that experienced in bed, even though I am no longer a virgin, it's only simply because my ex-bf (we had been together for three years) was sort of prudish. Now that we're completely done I am in need of sometng enjoyable to entertain me :) Not truly interested in a romantic relationsp, just sometng NSA, but I guess you by no means know what can happen....

We ought to hookup at either of our places, we could have fun for awle after wch go our own directions? If we both like each other we could hook up awle later - but that's all I am interested in now.

Will you please go here and confirm you're not a killer or anytng.. It's totally free, didnt even ask for a bank card like a few of the other stupid websites I’ve been to. You don't seem like the type of man that might do anytng bad, but now a-days you cannot be too careful you know? I just hope to make sure we both have a secure great time :) As soon as you get verified we can talk more :) Please msg me then so we can determine when to meet up?

Sometimes the link in her message will take you to a page on the fake dating site SafeHook-up.com. At other times it will redirect you to AmateurMatch.com or another site. Here are some of her pictures.