CraigsSecureDating.com

“Jennifer Smith” (jenniferbab86@gmail.com, jennifer86@softemail.net) sent us this:

Hello :)
thnx for reply back to my ad! Well, let me tell you a bit about myself…I’m young, I’m outgoing, i like to have fun, and sometimes I’m told that I’m cute lol. I attached my pic, so u can be the judge ;). To be honest I actually don’t have that much of a hard time hooking up with men, as I’m new to the area so i don’t actually know anyone yet and I’m not into the bar scene when I’m not with a group of my girl friends. I’m ready to just hook up with someone and have some fun, so i hope you’re looking for the same. at the same time, I’m kinda afraid of this kind of hookup online though. A friend of my said she tried it before and ended up with a crazy dude who never left her alone :/. not trying to throw you off though, i certainly would like to try this, i just wanna make sure you r actual and serious before we actually get together :). Hopefully you still wanna hook up, so yeah just send me an email back and we can work things out.
Looking forward to hear back u :D

We replied to that and she then sent us this:

Hi again,
Glad i hear back from you!! i’m bit excited just now, can not wait anymore to hook up :) as, like i said previou email, i’m not exactly all for this type of thing, but i am willig to try it out. i actually have a profile at http://craigssecuredating.com/members/jennifer86/ and i ask that you go there and complete the verification to show u r real and safe, as i previously have :). Really sorry if that seems like too much trouble, but it’ll just take a minute and i would like you to just get that done before we move forward. Once you complete it anyways you will have access to my full profile page with my phone number and address.Call my cell number instead of the home one if I’m out so we can talk sooner :)
Just text me if you can not get a hold of me, but you should be able to anyways…and then yes, my details are already there if you’d like me to host ;)

Anyway, I put a cute little picture up there for you, hope you love it! Theres some better ones on my full profile too :)

Here are the headers for that message:

Delivered-To: ***@***.****
Received: by 10.182.101.163 with SMTP id fh3csp204590obb;
Sun, 6 May 2012 19:17:58 -0700 (PDT)
Received: by 10.68.234.163 with SMTP id uf3mr40619803pbc.63.1336357078127;
Sun, 06 May 2012 19:17:58 -0700 (PDT)
Return-Path:
Received: from lpmail04.lunariffic.com (lpmail04.lunariffic.com. [209.200.229.221])
by mx.google.com with ESMTPS id of1si2096867pbb.136.2012.05.06.19.17.57
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 06 May 2012 19:17:58 -0700 (PDT)
Received-SPF: neutral (google.com: 209.200.229.221 is neither permitted nor denied by best guess record for domain of jennifer86@softemail.net) client-ip=209.200.229.221;
Authentication-Results: mx.google.com; spf=neutral (google.com: 209.200.229.221 is neither permitted nor denied by best guess record for domain of jennifer86@softemail.net) smtp.mail=jennifer86@softemail.net
Received: from [37.59.162.225] (port=64958 helo=WIN-N069QS41B0B)
by lpmail04.lunariffic.com with esmtpa (Exim 4.71)
(envelope-from )
id 1SRDSt-0001BV-NJ
for ***@***.****; Sun, 06 May 2012 19:14:20 -0700
MIME-Version: 1.0
Date: Sun, 06 May 2012 19:18:06 -0700
X-Priority: 3 (Normal)
Content-Transfer-Encoding: quoted-printable
Subject: Re: Re: HEAVY TASTE
Content-Type: text/plain
From: “Jennifer Smith”
Reply-To: jenniferbab86@gmail.com
To: ***

This is yet another scam whereby the person who created this Jennifer Smith character reaps profits by tricking people into signing up for porn sites. CraigsSecureDating.com is not an actual dating site, it’s just a mock-up of a dating site. If you give them your credit card information, you’ll find that you’ve been charged for subscriptions to porn sites.

CraigsSecureDating.com is hosted by HostGator. If you’ve received a scam message asking you to sign up for CraigsSecureDating.com, send a complaint to security@hostgator.com. Be sure to include a copy of the e-mail headers with your complaint. You should also send a complaint to LunarPages.com, which hosts lpmail04.lunariffic.com and softemail.net, the sites used for sending the scam messages. The address for that is abuse@lunarpages.com.

UPDATE 6/5/2012: CraigsSecureDating.com is no longer hosted HostGator. Ovh Systems hosts it now. Submit your complaints via their website abuse.ovh.net, or by sending an email message to abuse@ripe.net.

CasualRendezvous.com

Joanna Kerns (joannakerns@gmail.com), another fake person created by the scammer that brought us SafeCasualDating.net, sends us this:

Hi! How r u?? I guess you liked my ad. And YES, I am a real person! I’m new to the area and looking to meet people and have some fun. I moved here because of work, so i’m a very busy girl pretty much all the time, except tonight! I really don’t have time to date and I’m not looking to get into a relationship right now. I’m not one of those drama girls and I hate games! I just absolutely love having sex..But since moving here I haven’t really met anyone and I dont get nearly as much sex as I want. I’m really into giving blowjobs and I love doggie! Whats your favorite posistion?? You better say doggie, lol..I insist on using condoms, no time for babies and definiatly don’t want any diseases. Also, in this day and age you can never be to careful, so I’m very careful with giving out my personal info. i hope you like my pics, talk to you soon babe!

We replied to her with a blank e-mail message and got this automated response:

Hey hun, thanks for actually being interested. i’ve stopped believing in “Mr right” but maybe you could prove me wrong? i’m hot, small, and everything you’d want in a woman. i’m successful on my own and not looking for anybody to pay my bills, just a good man to fill the lonely nights in my new condo i just got in the city. I didn’t want to put my pictures on craigslist because I didn’t want my pics all over the internet. so i sent them in the last email….I don’t use aff because there’s so many fake profiles, i only use casualrendezvous because i know they are a legit site. hopefully you’re already on there? they make everyone make a little profile but its cool cuz its free. i do it so only guys who are ACTUALLY interested in me get to see my good pics…i promise they are sexy. check me out here http://casualrendezvous.com/lookinforfwb i have to weed out the guys who are just trying to waste my time so if i’m not worth getting more personal with then you’re not worth all i have to give.

i don’t know if you have Aim or Yahoo messenger, my sn on both is playfulhottie888. I honestly am hardly ever on so if you’re not lucky enough to catch me..I put my phone number in bold on my profile for you, please don’t give it to anyone.

Joanne aka playfulhottie
xoxox

Here are “her” pics:

Again, http://casualrendezvous.com/lookinforfwb is a scam site. It does not provide any sort of dating or verification service. If you were to sign up for it, all that would happen is that you would be signed up for porn sites. The scammer makes commissions from getting people to sign up for those porn sites.

Here is the registration information for the site. The company hosting it is PRQ. Send your complaints to abuse@prq.se.

Domain name: casualrendezvous.com

Registrant Contact:
PRQ Inet KB
Gottfrid Swartholm ()

Fax:
Box 1206
Stockholm, SE 114 79
SE

Administrative Contact:
PRQ Inet KB
Gottfrid Swartholm (registry@prq.se)
46.737721056
Fax:
Box 1206
Stockholm, SE 114 79
SE

Craigsllstsafe.org

A new scam site has been found: Craigsllstsafe.org. That’s right, its Craigsllstsafe.org, not Craigslistsafe.org. The misspelling of “Craigslist” in the domain name is deliberate. This site looks just like the now defunct scam site Clsafe.org, which we reported on March 14th. Like that old site, it uses your credit card information to sign you up for the porn site Sexxxxmatch.com.

The ISP for Craigsllstsafe.org is Leapswitch Networks. If you’ve received a scam message for this site, send a complaint to them at abuse@leapswitch.com, and also send a complaint to abuse@netriplex.com. Include the headers of the message with your complaint. Also, send a complaint to the ISP that was used to send you the message. Read our instructions on sending complaints to ISPs for more information.

UPDATE 5/14/11
Ishan Talathi of Leapswitch has left a comment on this post informing us that Leapswitch has suspended the website and that the new ISP for it is Worldstream. Your complaints should now be sent to abuse@worldstream.nl.

Clsafenet.com

Clsafenet.com is another fake “safe dating” site that asks you for your credit card number to verify your identiy. Like several other sites we’ve come across recently, this one uses your credit card number to sign you up for the porn site Sexxxxmatch.com.

Click to enlarge

Notice a couple things on the site’s home page. First, it says that if you want to meet people on the site that “a quick 30 second verification process will let you talk to them safely through our NSOCO.org approved contact system”. NSOCO.org supposedly maintains a database of known sex offenders. Well, guess what? There is no such organization as NSOCO.org.

Second, the sign up form is contained in a frame. That frame’s content comes from Sexxxxmatch.com.

Click to enlarge

Clsafenet.com’s ISP is Romania Data Systems. If you’ve been targeted by this scam and you’d like to help get this site shut down, then send a complaint to abuse@rcs-rds.ro. Also, you should find out the ISPs used for sending you the scam messages and send complaints to them, too.

Realdates.org

We’ve received another message from Amy of Cooldates.org. This time she’s sent us a link to Realdates.org. At the moment, the page at Realdates.org just has a frame that loads content from AdultFriendFinder. The scammer is trying to earn commissions from promoting that site.

Hey. I’d like to meet you.

I found this website and am on there because theres no cost. Not even a cc. Anyhow, if you want to meetup, get ahold of me once you have signed up. Send me your screen name and I’ll add you.

Here it is: http://www.realdates.org All my details are on there. I hope you’ll get back with me soon.

amy Hugs

Sent from my Blackberry® Wireless Device

The ISP for Realdates.org is FortressITX. If you get a scam message promoting this site, send a complaint to abuse@fortressitx.com. You should also send complaints to the ISPs being used for sending the messages. Here are the headers for this particular message.

Delivered-To: *****
Received: by 10.150.134.1 with SMTP id h1cs257305ybd;
Fri, 29 Apr 2011 07:08:35 -0700 (PDT)
Received: by 10.150.63.12 with SMTP id l12mr158272yba.120.1304086114912;
Fri, 29 Apr 2011 07:08:34 -0700 (PDT)
Return-Path:
Received: from transam.websitewelcome.com (transam.websitewelcome.com [174.122.175.66])
by mx.google.com with ESMTPS id t16si1944213ybe.16.2011.04.29.07.08.34
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 29 Apr 2011 07:08:34 -0700 (PDT)

Received-SPF: neutral (google.com: 174.122.175.66 is neither permitted nor denied by domain of amy.lewis2333@gmail.com) client-ip=174.122.175.66;
Authentication-Results: mx.google.com; spf=neutral (google.com: 174.122.175.66 is neither permitted nor denied by domain of amy.lewis2333@gmail.com) smtp.mail=amy.lewis2333@gmail.com
Received: from [74.117.59.214] (port=2789 helo=zap-server)
by transam.websitewelcome.com with esmtpa (Exim 4.69)
(envelope-from )
id 1QFoMz-0008AO-Pq
for *****; Fri, 29 Apr 2011 09:08:33 -0500

MIME-Version: 1.0
Date: Fri, 29 Apr 2011 07:08:06 -0700
Message-ID:
X-Priority: 3 (Normal)
Subject: *****
Reply-To: amy.lewis2333@gmail.com
From: “Amy”
To: “*****”
Content-Type: multipart/alternative;
boundary=”—–_chilkat_ee1_896a_391d4019.1d15d999_.ALT”
In-Reply-To: BANLkTikfOSqJ1owwvdVPG2Wodc2TDSe3Zw@mail.gmail.com
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – transam.websitewelcome.com
X-AntiAbuse: Original Domain – gmail.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (zap-server) [74.117.59.214]:2789

The “Received:” headers show that the message was routed through a server with the IP address 74.117.59.214 and the server transam.websitewelcome.com (174.122.175.66). The ISP for the first one is Psychz.net and the ISP for the second is ThePlanet.com, so complaints about this particular message should be sent to abuse@psychz.net and abuse@theplanet.com.

Please note: the servers used for sending any spam for Realdates.org that you yourself received might be different, so be sure to check the headers and identify the servers from the “Received:” headers before sending any complaints. You can look up the ISP for an IP address at cqcounter.com/whois/.

Cooldates.org, Safebootycall.org and Safergirls.org

Here are some messages from Amy of Cooldates.org, another CraigsSecure scam site that was just created a few days ago. This is yet another fake verification site that asks you for your credit card information and uses it to sign you up for the porn site SexxxxMatch.com. If you look at the page source for Cooldates.org, you will see that all it does is use a frame to get content from another site, Safergirls.org. Scammers often use multiple domains for a scam site in this way.

Yes I am an actual person. haha. I hope you are too.

I just wanted to say I’m not interested in any long term commitments, just some sexual activity with a capable person.

Here is a picture. I hope you like it. I would prefer not to share too much information that is personal until I get to know you. I hope you understand. Explain more about yourself..

Hi, glad to see you replied.

Here’s additional information on me, I’m completely clean. you have to be also, protection is required.

you can find me on my page, since I don’t want the risk of some body I know to see my email with all of this stuff. This is my personal page: http://www.cooldates.org

Hit me up with a private message saying when you’re free, and if you want to get to know eachother better at your place or my place, or in another place you have in mind. The site will require login and needs your credit card to verify you are legal. Well, speak with you today I hope once I get back

Let’s look at the headers for the second message. Here they are, with the recipient’s name and email address removed. Look at the parts that are highlighted.

Delivered-To: *****
Received: by 10.150.134.1 with SMTP id h1cs217972ybd;
Thu, 28 Apr 2011 07:33:39 -0700 (PDT)
Received: by 10.236.182.197 with SMTP id o45mr4437364yhm.330.1304001219652;
Thu, 28 Apr 2011 07:33:39 -0700 (PDT)
Return-Path:
Received: from tiguan.websitewelcome.com (tiguan.websitewelcome.com [174.120.5.66])
by mx.google.com with ESMTPS id 22si6055883yhl.249.2011.04.28.07.33.39
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 28 Apr 2011 07:33:39 -0700 (PDT)

Received-SPF: neutral (google.com: 174.120.5.66 is neither permitted nor denied by domain of amy.lewis2333@gmail.com) client-ip=174.120.5.66;
Authentication-Results: mx.google.com; spf=neutral (google.com: 174.120.5.66 is neither permitted nor denied by domain of amy.lewis2333@gmail.com) smtp.mail=amy.lewis2333@gmail.com
Received: from [74.117.59.214] (port=1512 helo=zap-server)
by tiguan.websitewelcome.com with esmtpa (Exim 4.69)
(envelope-from )
id 1QFSHi-0004Xi-9u
for *****; Thu, 28 Apr 2011 09:33:38 -0500

MIME-Version: 1.0
Date: Thu, 28 Apr 2011 07:33:10 -0700
Message-ID:
X-Priority: 3 (Normal)
Subject: *****
Reply-To: amy.lewis2333@gmail.com
From: “amy”
To: “*****”
Content-Type: multipart/alternative;
boundary=”—–_chilkat_46d_7fe4_005a4654.a044ceca_.ALT”
In-Reply-To: BANLkTikfOSqJ1owwvdVPG2Wodc2TDSe3Zw@mail.gmail.com
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – tiguan.websitewelcome.com
X-AntiAbuse: Original Domain – gmail.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (zap-server) [74.117.59.214]:1512

The sections highlighted in red and blue are the “Received:” headers. These headers, along with the “X-” headers at the bottom are the most useful ones for determining who actually sent the message. They show the various servers and email accounts that were used for sending it. Even though the sender’s address is a Gmail address, the message was routed through two other servers before it got to the Gmail server.

The “Received:” headers should be read from bottom to top. The first of them, highlighted in blue, shows that the message was first sent from a machine with the IP address 74.117.59.214 to tiguan.websitewelcome.com. Above this we have an “Authentication-Results:” header and a “Received-SPF:” header, neither of which concern us. The second of the “Received:” headers, highlighted in red, shows that the message was then sent from tiguan.websitewelcome.com (IP 174.120.5.66) to mx.google.com. So the scammer routed the message through two machines before it was received by Gmail.

Now that we know the IP addresses of the servers that were used for sending this message, we can look up the ISPs for those servers and send them complaints. A good site for looking up this information is cqcounter.com/whois/. (Note: The site CQCounter is picky about this URL. It requires that you include that very last slash in the URL, otherwise it can’t find the page.)

Using this site, we see that the ISP for 74.117.59.214 is Psychz.net and that the ISP for tiguan.websitewelcome.com (174.120.5.66) is ThePlanet.com. The email addresses to which you should send complaints then are abuse@psychz.net and abuse@theplanet.com.

UPDATE 5/18/11
Someone has reported another site being used for this scam: Safebootycall.org. Just like Cooldates.org, Safebootycall.org loads its content from Safergirls.org in a frame. The ISP for Safebootycall.org is Netelligent. If you receive a scam email asking you to visit this site, then send a complaint to abuse@netelligent.ca. Also send a complaint to the ISP that was used for sending you the scam email. To learn how to do this, read our instructions on sending complaints to ISPs..

UPDATE 5/10/11
Beasafedate.org is also being used for the scam. It loads its contents from Safergirls.org, just like the other sites mentioned.

Casualmeetup.com

“Kayla B” is promoting Casualmeetup.com, another fake dating site.

Click to enlarge

This is one of the messages she’s sending out using the email address sweetpeppy1@gmail.com:

hey again,

you sound pretty cool and i’m definitely interested in meeting up with you.. i gotta work tomorrow and will get home around 3-4 and it would be awesome to meet up after that.. we can grab a drink and see how we connect.. to get my number just go to http://www.casualmeetup.com and look up
“sexcbebe5940″ .. my number will be right on the first page.. they never charge you or anything, they just verify to make sure you aren’t a rapist or anything, you know a girl can never be too careful

As usual, you’re told that this is a free verification service that Kayla B (who doesn’t exist, of course) would like you to use before she meets you. After you fill out the first sign up form, you get taken to this page at join.securepaypass.com:

Click to enlarge

Here is the fine print on the page. It’s not visible in the above picture but can be found near the bottom of the page.

(**) Your free access to http://www.discreethoneys.com includes $1.25 for 1 day trial to xxxboobs4u.com. To avoid being charged a monthly fee, simply cancel your memberships to xxxboobs4u.com before the trial period ends. If you remain a member beyond the trial period, your membership will renew at $49.81/month respectively, or then applicable rate until cancelled. Your free access to http://www.discreethoneys.com remains active even if you cancel your xxxboobs4u.com membership.
(+) Your FREE VIP bonus membership includes $38.97 for 30 days trial membership to megasitearchive.com and $1.00 for 5 days trial membership to justporno.com, renewing at $38.97/month and $39.99/month respectively, until cancelled.

So, once again, there is no verification service, this site Casualmeetup.com is a scam used to fool you into signing up for porn sites. In this case those porn sites are discreethoneys.com and xxxboobs4u.com. If you’re tired of receiving this sort of crap and would like to see this site shut down, then forward the email message you received to abuse@savvis.net. Be sure to let Savvis know that Casualmeetup.com has been confirmed to be a scam site and send them a link to this post.

UPDATE 5/4/11
We’ve received another message promoting this site. This one was sent using the address michsanch@gmail.com. This email address was also used for the Kayla B. scam reported in January .

hey again,

you sound pretty cool and i’m definitely interested in meeting up with you.. i gotta work tomorrow and will get home around 3-4 and it would be awesome to meet up after that.. we can grab a drink and see how we connect.. to get my number just go to http://www.casualmeetup.com/1 and look up
“sexcbebe5940″ .. my number will be right on the first page.. they never charge you or anything, they just verify to make sure you aren’t a rapist or anything, you know a girl can never be too careful

UPDATE 5/8/11: The email address sweetpeppytwo@gmail.com is also being used for this scam.

Clistsafe.com

Clistsafe.com is a clone of Clsafe.com, a site we’ve already reported. This site does not provide any sort of dating verification service, it has no members, and there are no people on it to meet. It is a scam used to fool you into signing up for the porn site SexxxxMatch.com. After you fill out the sign-up form on Clistsafe.com, you get taken to a page on secure.i-promotions.net:

Click to enlarge

This is the fine print on the order form above:

+ You are entitled to free lifetime access as a basic member without any charge or further participation. Additionally, free premium access* will be granted at no charge provided you complete an online profile and confirm your information within two days, otherwise this membership will recur monthly at 39USD until cancelled.

Clistsafe.com is hosted by LeaseWeb. Forward any scam messages you receive for that site to abuse@leaseweb.com and make sure to mention that Clistsafe.com is known to be a scam site. Be sure to include a copy of the message headers.

UPDATE, 4/25: One of the fake identities used for this scam is Vicky Lattore and her profile page on the site is http://www.clistsafe.com/profiles/vickyyy1/
Another of the fake identities is Diana Richardson who has this profile
http://clistsafe.com/profiles/dia99

Clsafe.com

The site Clsafe.org that was shut down has been replaced with Clsafe.com. One of the fake names being used in the scam messages is Diana Richardson.

Clsafe.com is hosted by LeaseWeb. Forward any scam messages you receive for that site to abuse@leaseweb.com and make sure to mention that Clsafe.com is known to be a scam site. Be sure to include a copy of the message headers.

UPDATE 4/25: Another name being used for this scam is Vicky Lattore. See the comments below.

Craigssafedating.com

Thanks to EJA for letting us know that yet another site has been created for the Jeni Saten scam. The site is Craigssafedating.com.



Craigssafedating.com is being hosted by Leaseweb.com. If you’d like to help get this site shut down, then forward the messages you received from Jeni/Jenni/Jenn along with the message headers to abuse@leaseweb.com. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that craigssafedating.com is a known scam site. It might also help to provide links to these posts:

http://craigslistscams.wordpress.com/2011/04/03/craigssafedating-com
http://craigslistscams.wordpress.com/2011/01/21/craigslistdatesafely-com
http://craigslistscams.wordpress.com/2011/02/07/craigslist-date-safe-org

Craigslistsafe.org

The site Clsafe.org has been shut down, but the scammer has moved his operation to a new domain, Craigslistsafe.org.

The ISP for Craigslistsafe.org is NetDirect, a German company. If you’d like to help get this site shut down, then forward the scam messages you received along with the message headers to abuse@netdirekt.de. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that Craigslistsafe.org is a known scam site. It might also help to provide links to these posts:

http://craigslistscams.wordpress.com/2011/03/14/clsafe-org
http://craigslistscams.wordpress.com/2011/03/31/craigslistsafe-org

Clsafe.org

Clsafe.org is yet another site pretending to offer the CraigslistSafe verification service. Someone posted a m4w ad on Craigslist and received this reply from “Elizabeth Babicke” (robynwhitfield55kk@yahoo.com):

hey I saw your ad and would love an occasional hookup partner.so get back to me.



After he replied to her, he received this message:

hi again are you free right now totalk?
i screen so do this for me and message me on there
securedate
cant stay on much longer though

talk to ya soon,
elizabeth



The securedate link in the message points to http://www.clsafe.org/profiles/elizzy.



The sign up form is contained inside a frame. When you look at the source code for the frame you see that it comes from sexxxxmatch.com, a porn site.

Source for clsafe.org sign up form




Again, there is no CraigslistSafe verification service. Clsafe.org is not a dating site, it’s just a scam used to sign you up for porn sites and the scammer who owns clsafe.org gets a commission for each person he signs up. Anytime a site asks to use your credit card to verify your identity, it’s a scam like this one.

Bumpdate.org, Greatdater.org, Prodater.org, Realtimedate.org

We’ve found some new dating verification scam sites very similar to the old site Livesafetoday.net which we got shut down.

The main site used for the scam is Greatdater.org. The other sites in the list just load the content from Greatdater.org in a frame. Once again, the scam here is that these are not real dating sites. They do not provide any dating service or verification service. There are no site members for you to meet. If you give these sites your credit card number to verify your identity, what will actually happen is that you will be signed up for porn sites.

Bumpdate.org
Greatdater.org
Prodater.org
Realtimedate.org

The ISP for Greatdater.org is Pacnet. If you would like to help get this site shut down, then forward your e-mail with a complaint to abuse.hk@pacnet.com.

UPDATE 3/16/11
The site Dailydater.org is also being used for this scam. It is yet another site that loads pages from Greaterdater.org. And as of now, Prodater.org and Realtimedate.org are loading content from various other scam sites.

UPDATE 5/11/11
Realtimedate.org is now loading content from the site Nsadater.org, which was registered on 3/26/11. Bumpdate.org and Prodater.org are loading content from the scam site Facebookofsex.com.

UPDATE 5/31/11
Localnsa.org is another site loading content from Nsadater.org. It was just registered today. The ISP for Localnsa.org is Netelligent. If you’v received spam promoting this site and you’d like to help get it shut down, send a complaint to abuse@netelligent.ca. Also, send complaints to the ISPs that were used for sending you the messages. If you don’t know how to do this, then read our instructions on sending complaints to ISPs.

Craigs-date-safety.org

The Jeni Saten scam has been moved to yet another server, Craigs-date-safety.org. The previous server that we reported that was being used for the scam, Craigslist-safe-dates.org is no longer active. In addition, yet another email address is being used for the scam: jennthehottie@live.com

Craigs-date-safety.org is being hosted by Leaseweb.com. If you’d like to help get this site shut down, then forward the messages you received from Jeni/Jenni/Jenn along with the message headers to abuse@leaseweb.com. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that craigs-date-safety.org is a known scam site. It might also help to provide links to these posts:

http://craigslistscams.wordpress.com/2011/01/21/craigslistdatesafely-com/
http://craigslistscams.wordpress.com/2011/02/07/craigslist-date-safe-org/

Livesafetoday.net has been shut down

Livesafetoday.net and all of the other sites that were associated with the fake hosting company Global-host.org

easydatingnet.org
freemail4you.org
global-host.org
myprivatemailbox.net
onesinglesnet.net
safe2day.net
send2mail.org
send3me.net
wktv5newsalerts.com
zmails.org

have been shut down. The ISP for these sites is Ecatel, a company that pretty much ignores complaints. They were shut down on February 8th, soon after the following message was sent to Ecatel.

By the way, it’s clear that the person who owns these sites is Christopher Lawell, the person who owned mysafenet.net and localsafe.org, which were also on Ecatel servers. (http://craigslistdatingscams.blogspot.com/2010/12/christopher-lawell-and.html) Let Mr. Lawell know that he should shut down his current scam sites if he wants to avoid further embarrasment.

Yes, these sites are owned by Chris Lawell a.k.a VegasChris, the man who sells the e-whoring chat bot Miyabot and who ran the scam sites localsafe.org and safeandlocal.org. After he was informed that we knew he owned the sites, he shut them down himself. Ecatel did not suspend his account, because if that had happened, then the sites would still have been up but displaying a message saying that the account had been suspended.

For now we’re not going to publish the evidence that led us to the conclusion that Chris Lawell is the owner of these sites. We’re not interested in helping him become a better scammer, so if he wants to know how we discovered this information, he’ll have to figure that out for himself. Perhaps if he decides to stop remaining silent we’ll provide some details, but he’s obviously never going to do that since the last time he tried defending himself he gave a story which we showed to be false. He prefers to just remain silent and avoid embarrassing himself again.

Anyone here speak Russian?

Kyle Uchitel has updated his Facebook profile again. Now he has a Russian name, Дед Мороз Учитель, that appears to mean something like “Professor Santa Claus”.

Дед Мороз
http://en.wiktionary.org/wiki/Учитель

Alex Vasser has also updated his Facebook profile with a Russian name, Крокодил Гена. which is the name of a fictional character that translates into English as Crocodile Gena.

Is this any cause for suspicion?

This is our temporary new blog

We’ve ran into some technical difficulties with Craigslist Dating Scams. It has been temporarily removed by Blogger’s spam prevention robots. When we logged into Blogger today we received this message:

Blogger’s spam-prevention robots have detected that your blog has characteristics of a spam blog. (What’s a spam blog?) Since you’re an actual person reading this, your blog is probably not a spam blog. Automated spam detection is inherently fuzzy, and we sincerely apologize for this false positive.

We received your unlock request on February 12, 2011. On behalf of the robots, we apologize for locking your non-spam blog. Please be patient while we take a look at your blog and verify that it is not spam.

It turns out that a lot of people are affected by this problem. We’re just going to have to wait patiently for Blogger to review the blog and restore it. In the meantime, we will be posting our articles here.

Craigslist-safe-dates.org

The Jeni Saten scam lives! It’s been moved to yet another server, Craigslist-safe-dates.org. Jennifer (also Jen, Jeni, Jenni, and Jenn) has new email addresses now:

jenthehottie@live.com
jennthehotie@live.com

Here are a couple of her messages.

hey there big guy, i hope your big in all the right places ;) was my ad enticing enough? haha. i post on that site because I just love random SAFE sex with strange guys, nothing gets me wetter, and my nipples harder! lol! I AM REAL! are you?! i hope your not a spammer. geez whats up with those people? always asking me if im a ‘bot’, what the hell is that? what positions r ur favorites? mine is doggy, and i just love getting my titties fondled.. and i hope you have a taste for fish haha! just kidding, im clean and disease free (and u defintely must be the same), you do give oral right? dont be lame -_- because i love sucking cock, and love gagging. and gettin jizzd on my face.. but sorry i dont swallow, ew. so when do you think we can meet up? most definetly not my place, and im not going to ur place.. so a hotel.. on you of course haha!.. bring some alcohol, it always adds to the fun! please dont ask for any personal info.. im here for discrete encounters.. i just have way too much energy rite now! gotta stop drinking them darn redbulls.. i hope i can use this energy in more productive/fun ways, ;) hehehe. anways, ive attached a few pix of me, im hot rite? rethorical question! i know i am ;p well, if you’re interested, reply back!

xoxo
~me!

i had a feeling i’d hear from u again ;P i know, im hot.. but wtf is up with these losers who do not want to meet up and give me a good dicking? wtf?! i hope ur not afraid of a real woman, r u tough guy?! i figured the best way to do this without me giving u any of my info. i created a profile here: http://www.craigslist-safe-dates.org/jenn/ it wont let you access it if you’re a child under 18, and i wouldnt want an inexperienced kiddie tryin to sex me up.. and besides that, its considered rape! haha. i am 23 afterall, u r legal rite? prove it! anyways, once u log in, u’ll get my number (no its not my real #, and u wont be getting that!) but this number forwards to my celly. so just give me a call and lets do this! hope to talk to u soon, u have sexy voice amirite? i hope to find out! xoxo~

~me again!

The messages are being sent from a server with IP address 96.43.138.23, which is owned by Joe’s Data Center. To help get this scam shut down, send a complaint to security@joesdatacenter.com. Be sure to include a copy of the headers along with the message. You should also send a complaint to Mir Telematiki Ltd, a.k.a Hostkey, which is the ISP for Craigslist-safe-dates.org. Their address is support@hostkey.ru.

Craigslist-date-safe.org has been shut down

Complaints were sent to Turnkey Internet about Craigslist-date-safe.org and they have shut the site down. A complaint was also sent to Staminus Communications about the account that was used for sending the fraudulent email messages from Jeni Saten and they said they are asking their customer to take action.

Thank you for your report.

We have forwarded your report to our downstream customer for review and action.

We have also assisted you by reporting the domain to craigslist.com as a possible copyright/trademark infringement so that they can confiscate the domain and shut down the fraud.

Best Regards,

John Blazek
Abuse Department
Staminus Communications
Office: 949-202-5305
http://www.staminus.net
Dedicated Server Hosting Solutions

Thank you Turnkey and Staminus for your quick response to these complaints and for taking fraud seriously.

Craigslist-date-safe.org

Remember Jeni Saten and Craigslistdatesafely.com, which were reported on January 21st? We were able to get Craigslistdatesafely.com shut down, but this scam has been moved to a new site, Craigslist-date-safe.org. She (he, most likely) is still using the e-mail addresses jenisaten@live.com and jennisaten@live.com. The site is being hosted by Turnkey Internet and the email messages are beings sent from a server with IP address 72.20.18.226, which is owned by Staminus Communications.

If you’d like to help get this site shut down, then forward the messages you received from Jeni/Jenni/Jenn along with the message headers to abuse@turnkeyinternet.net and abuse@staminus.net. Instructions for finding email message headers are available at spamheaders.com. In your message, be sure to explain that craigslist-date-safe.org is a known scam site. It might also help to provide links to these posts:

http://craigslistscams.wordpress.com/2011/01/21/craigslistdatesafely-com/
http://craigslistscams.wordpress.com/2011/02/07/craigslist-date-safe-org/

Follow

Get every new post delivered to your Inbox.

Join 69 other followers