Monday, January 24, 2011

Securemeetup.com and Safecouplesconnect.com

Here are sample fraudulent email messages that are sent out to promote these sites. Some of the headers are included. Note that the senders' addresses are at the same domain, longtermwax.com, which is privately registered with 1and1.com. The sites being plugged are also privately registered with 1and1.com. The server emailrelatedservice.com is being used to host the content of these two sites. Emailrelatedservice.com is hosted by HostGator. If you receive an email message asking you to visit any of these sites, forward the message to security@hosgtator.com and abuse@1and1.com along with the message headers. Be sure to explain to HostGator that the site you visited gets its content from emailrelatedservice.com. Also explain to both hosting companies the circumstances under which you received the message (e.g., you replied to an ad on Craigslist, it was a reply to an ad you posted on Craigslist, etc.). Instructions on how to find the message headers can be found at spamheaders.com.

A sample email message promoting securemeetup.com

X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Mon, 24 Jan 2011 08:40:23 -0700
From: Tom Rozenberg <tomr@longtermwax.com>
To: ****** <**************>
Subject: Re: please help my wife out...
MIME-Version: 1.0
Content-Type: text/plain


hi thanks for replying to my ad. my name is tom and basically i am doing this for my wife of 15 years. I was recently injured in an accident, and can no longer 'be' with my wife the way we used to. I am in desperate need to do anything to help her out and her happiness is of utmost importance to me. Since we are both in an open relationship now she is looking for someone to come over and have 'fun' with on a weekly basis. I will not be there when you come over, so no worries regarding that.

we have enrolled to an online profile so my wife can chat with you online and on the phone prior to meeting with you to make sure the terms are ok. this is both for our and your safety. please do the same and email me back with your ID so I can forward it to my wife so she can talk to you. i appreciate you helping her out and i think it will improve the marriage for both of us. looking foward to hearing from you soon

securemeetup.com/profile=4222

tom


A sample message promoting safecouplesconnect.com.

Delivered-To: *******
X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Sun, 23 Jan 2011 15:27:51 -0700
From: Nicole Giovanni <nicole@longtermwax.com>
To: ******* <*******>
Subject: Re: cl couple 4 m meetup
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------F6FE13910AD86BF"

------------F6FE13910AD86BF
Content-Type: text/plain


Hi this is Nicole, thanks for responding to our cl ad. As previously stated in the ad, my boyfriend likes to watch me perform with another guy and gets really turned on by it all - and if it is ok with you, he usually wants to join. We have gone through this site to facilitate our hookups. We usually book a hotel room at the place shown on our page. Please go through the free hookup service we use to get connected to us. Can't wait to have you in me ;)


safecouplesconnect.com

nicole


UPDATE 1/25
We received another message from Nicole today. Now she's asking us to visit another of the emailrelatedservice.com sites, fucksafely.com.
From: Nicole Giovanni
To: ********************
Subject: Re:Re: cl couple meetup
MIME-Version: 1.0
Content-Type: text/plain



hey I was looking at the site that I gave you a few days ago and realized that it wants a credit card to verify!
I think that's un-needed and silly to do that so I found a better place that only requires your email to get in
touch with us. Sorry for the hassle, hopefully you can join us still ;0

we are still free the rest of the week and wanna meet up so come to my site and meet up with us now

http://fucksafely.com/nicole341/?bK3=2vnRc
nicole

When you visiting the URL in the message you are automatically redirected to the dating site Mate1.com. The scammers here are making money from directing traffic to that site.

No comments:

Post a Comment

Comments are moderated and it may take up to a day for them to be published.