Emailrelatedservice.com is down

Emailrelatedservice.com no longer resolves to an IP address and the sites listed on January 22nd all appear to be dead. Some of the registration information for the sites has changed.

Domain name: emailrelatedservice.com

Registrant Contact:

don divenchenzo ()

Fax:
750 w scottsdale rd
tempe, fl 85254
US

domain: safelyhookup.com
created: 09-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 09-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com

domain: securemeetup.com
created: 12-Aug-2009
last-changed: 28-Jan-2011
registration-expiration: 12-Aug-2011

nserver: ns57.1and1.com 74.208.2.9
nserver: ns58.1and1.com 74.208.3.8

status: CLIENT-TRANSFER-PROHIBITED

registrant-firstname: Aleksandr
registrant-lastname: Vanner
registrant-street1: 135 W Baseline Rd
registrant-pcode: 85283
registrant-state: AZ
registrant-city: Tempe
registrant-ccode: US
registrant-phone: +1.3342344323
registrant-email: avkyinc@gmail.com

For emailrelatedservice.com there is a new registrant name (Don Divenchenzo) and a fake Florida address. For safelyhookup.com and securemeetup.com there is a new Tempe address and Aleksandr Vasser’s phone number was replaced with an Alabama phone number.

Securemeetup.com and Safecouplesconnect.com

Here are sample fraudulent email messages that are sent out to promote these sites. Some of the headers are included. Note that the senders’ addresses are at the same domain, longtermwax.com, which is privately registered with 1and1.com. The sites being plugged are also privately registered with 1and1.com. The server emailrelatedservice.com is being used to host the content of these two sites. Emailrelatedservice.com is hosted by HostGator. If you receive an email message asking you to visit any of these sites, forward the message to security@hosgtator.com and abuse@1and1.com along with the message headers. Be sure to explain to HostGator that the site you visited gets its content from emailrelatedservice.com. Also explain to both hosting companies the circumstances under which you received the message (e.g., you replied to an ad on Craigslist, it was a reply to an ad you posted on Craigslist, etc.). Instructions on how to find the message headers can be found at spamheaders.com.

A sample email message promoting securemeetup.com

X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Mon, 24 Jan 2011 08:40:23 -0700
From: Tom Rozenberg
To: ******
Subject: Re: please help my wife out…
MIME-Version: 1.0
Content-Type: text/plain

hi thanks for replying to my ad. my name is tom and basically i am doing this for my wife of 15 years. I was recently injured in an accident, and can no longer ‘be’ with my wife the way we used to. I am in desperate need to do anything to help her out and her happiness is of utmost importance to me. Since we are both in an open relationship now she is looking for someone to come over and have ‘fun’ with on a weekly basis. I will not be there when you come over, so no worries regarding that.

we have enrolled to an online profile so my wife can chat with you online and on the phone prior to meeting with you to make sure the terms are ok. this is both for our and your safety. please do the same and email me back with your ID so I can forward it to my wife so she can talk to you. i appreciate you helping her out and i think it will improve the marriage for both of us. looking foward to hearing from you soon

securemeetup.com/profile=4222

tom

A sample message promoting safecouplesconnect.com.

Delivered-To: *******
X-Complaints-To: abuse@dnsExit.com
X-SPAM: Please report Spam to abuse@dnsExit.com
By service at http://www.dnsExit.com/Direct.sv?cmd=mailRelay
Accounts will be suspended immediately if convicted Spam
Date: Sun, 23 Jan 2011 15:27:51 -0700
From: Nicole Giovanni
To: *******
Subject: Re: cl couple 4 m meetup
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”———-F6FE13910AD86BF”

————F6FE13910AD86BF
Content-Type: text/plain

Hi this is Nicole, thanks for responding to our cl ad. As previously stated in the ad, my boyfriend likes to watch me perform with another guy and gets really turned on by it all – and if it is ok with you, he usually wants to join. We have gone through this site to facilitate our hookups. We usually book a hotel room at the place shown on our page. Please go through the free hookup service we use to get connected to us. Can’t wait to have you in me ;)

safecouplesconnect.com

nicole

UPDATE 1/25
We received another message from Nicole today. Now she’s asking us to visit another of the emailrelatedservice.com sites, fucksafely.com.

From: Nicole Giovanni
To: ********************
Subject: Re:Re: cl couple meetup
MIME-Version: 1.0
Content-Type: text/plain

hey I was looking at the site that I gave you a few days ago and realized that it wants a credit card to verify!
I think that’s un-needed and silly to do that so I found a better place that only requires your email to get in
touch with us. Sorry for the hassle, hopefully you can join us still ;0

we are still free the rest of the week and wanna meet up so come to my site and meet up with us now

http://fucksafely.com/nicole341/?bK3=2vnRc
nicole

When you visiting the URL in the message you are automatically redirected to the dating site Mate1.com. The scammers here are making money from directing traffic to that site.