(The quickest way to register)

Forum

  1. User picture
    • IssViews on Sat 24 Dec 2011
    • 05:13:38 PM UTC

    Fake dating sites.

    I have been getting quite a bit of spam from Indian dating sites and noticed that most used the same template and stock photos. Email harvesting using fake unsubscribe links too, imo.





    lovegalaxys.in
    thepleasurelife.in
    makefamily.in
    tenderloves.in
    luckyloveagency.in
    matchwithglobal.in
    lovemealwayss.in

    Registrant Name:Alex
    http://whois.domaintools.com/lovegalaxys.in
    http://whois.domaintools.com/thepleasurelife.in

    Registrant Name:Olaf Dain
    http://whois.domaintools.com/makefamily.in
    http://whois.domaintools.com/tenderloves.in
    http://whois.domaintools.com/matchwithglobal.in
    http://whois.domaintools.com/lovemealwayss.in

    Registrant Name:Bengamin
    http://whois.domaintools.com/luckyloveagency.in

    Hardly what I would call coincidental.

    Russian Brides hosted with .in




    Edit: Changed topic title from Fake Indian dating dites to just Fake dating sites due to the .in no longer being the main ofenders as .ua and others now use these templates, which are frequently being spammed now.

Comments:

  1. User picture
    • IssViews (not verified) on Sun 19 Feb 2012
    • 12:36:09 PM UTC

    RE: Fake Indian dating sites.

    Originally posted by: KTW
    [snip] any suggestions how we resolve getting these endless scam e-mails form these sites, I am not in the IT industry, but my business partner owns a large IT company and is willing to assist, all suggestions are welcomed.

    Sadly, once an email address has been harvested and hit a spam list, getting it removed is next to impossible. Over time, you will find more and more spam will come in. There is the options to set up spam filters but spammers often do use measures to evade them, ie: short term use of disposable addresses so new ones are nearly aways being the spam (if not spoofed), changing subject line text to avoid spam keyword checks, etc, etc.

    You could however send abuse reports to the mail host which often works with hotmail, gmail and most common mail services but many others are abuse report ignorant or simply criminal in their setup and workings.

    The best method to tackle this is to record the spammers at sites like www.stopforumspam.com and then to use WOT to rate the domain for spam and/or other relevent issues. This can and does have an impact on the domains themselves due to the amount of people who use WOT and the other services which utilise the WOT doughnut in their seo/page links.

    Last of all, you can submit a takedown request to the host providing the offending website service (as has been done with some sites in this thread previously) but, like mail providers, some will oblige some wont. People behind sites like the above, are always opening new ones, so it's a never ending process.

  2. User picture
    • IssViews (not verified) on Tue 21 Feb 2012
    • 01:21:11 PM UTC

    RE: Fake Indian dating sites.

    girlsof-world.net.ua

  3. User picture
    • IssViews (not verified) on Thu 23 Feb 2012
    • 11:33:43 PM UTC

    RE: Fake Indian dating sites.

    livesoulmate.in

  4. User picture
    • IssViews (not verified) on Sat 25 Feb 2012
    • 09:44:54 PM UTC

    RE: Fake Indian dating sites.

    flowerwe.net.ua

  5. User picture
    • IssViews (not verified) on Mon 27 Feb 2012
    • 06:52:37 PM UTC

    RE: Fake Indian dating sites.

    beamtime.net.ua
    light-life.net.ua

  6. User picture
    • IssViews (not verified) on Wed 29 Feb 2012
    • 01:01:39 PM UTC

    RE: Fake dating sites.

    meet-find.net.ua

  7. User picture
    • IssViews (not verified) on Tue 06 Mar 2012
    • 11:22:39 AM UTC

    RE: Fake dating sites.

    aniuta.in

  8. User picture
    • HansTheBlueFrog on Wed 07 Mar 2012
    • 07:13:23 AM UTC

    RE: Fake dating sites.

    This is actually a Russian dating scam. For more information on this see:
    ikillspammers.blogspot.com/2010/01/lady-marmelady-another-in-long-line-of.html

    "Once a blue frog, always a blue frog."

  9. User picture
    • HansTheBlueFrog on Wed 07 Mar 2012
    • 07:56:12 AM UTC

    RE: Fake dating sites.

    These resolve on ns2.hearts-attach.eu

    List of domains/hosts:

    anastacia.in
    rain-cristina.in
    after-cora.in
    aniuta.in
    hopemind.in
    prettyvoice.in
    moon-connie.in
    view-smile.in
    full-nigh.in
    morning-claudi.in
    kindness-cheri.in
    beautiful-moon.in
    beautiful-cleo.in
    long-chris.in
    flower-happiness.in
    tenderday.in
    way-cindy.in

    "Once a blue frog, always a blue frog."

  10. User picture
    • IssViews (not verified) on Thu 08 Mar 2012
    • 11:55:33 AM UTC

    RE: Fake dating sites.

    viola-fly.in

  11. User picture
    • IssViews (not verified) on Sat 10 Mar 2012
    • 12:19:37 PM UTC

    RE: Fake dating sites.

    yvonne-beam.net.ua

  12. User picture
    • HansTheBlueFrog on Sat 10 Mar 2012
    • 01:07:26 PM UTC

    RE: Fake dating sites.

    More "lady-marmelady" sites, here. Sorry for any duplicates.

    List of domains/hosts:

    view-wanda.net.ua
    anja.net.ua
    time-wilma.net.ua
    happiness-yana.net.ua
    agustina.net.ua
    anuta.net.ua
    anke.net.ua
    yolanda-hope.net.ua
    dream-yvette.net.ua
    vyky-value.net.ua
    alexandri.net.ua
    yvonne-beam.net.ua
    young-vivian.net.ua
    voice-wendy.net.ua
    thirst-virginia.in
    quiet-wilma.in
    wendy-single.in
    cecill.in
    willie-faithful.in
    vivian-passion.in
    vyky.in
    amanda.net.ua
    view-wanda.net.ua
    anja.net.ua
    heart-carla.net.ua
    time-wilma.net.ua
    ana.net.ua
    happiness-yana.net.ua
    agustina.net.ua
    alynna.net.ua
    anuta.net.ua
    anastaciya.net.ua
    willie-life.net.ua
    anke.net.ua
    yolanda-hope.net.ua
    dream-yvette.net.ua
    vyky-value.net.ua
    alexandri.net.ua
    kindness-cheri.net.ua
    agusti.net.ua
    yvonne-beam.net.ua
    young-vivian.net.ua
    choice-carmen.net.ua
    allison.net.ua
    long-chris.net.ua
    voice-wendy.net.ua
    amy.net.ua
    agusty.net.ua
    amanda.net.ua
    heart-carla.net.ua
    ana.net.ua
    kindness-cheri.net.ua
    choice-carmen.net.ua
    long-chris.net.ua
    amy.net.ua
    hopemind.in
    beautiful-moon.in
    wanda.in
    lonely-wanda.in
    anastacia.in
    thirst-virginia.in
    vyka.in
    quiet-wilma.in
    rain-cristina.in
    after-cora.in
    aniuta.in
    hopemind.in
    prettyvoice.in
    moon-connie.in
    wendy-single.in
    view-smile.in
    full-nigh.in
    morning-claudi.in
    kindness-cheri.in
    cecill.in
    willie-faithful.in
    vivian-passion.in
    beautiful-moon.in
    beautiful-cleo.in
    long-chris.in
    flower-happiness.in
    tenderday.in
    way-cindy.in
    vyky.in
    viola-fly.in
    look-forlady.ru

    "Once a blue frog, always a blue frog."

  13. User picture
    • IssViews (not verified) on Thu 15 Mar 2012
    • 09:42:45 AM UTC

    RE: Fake dating sites.

    brenda.net.ua

  14. User picture
    • HansTheBlueFrog on Sun 18 Mar 2012
    • 08:51:16 AM UTC

    RE: Fake dating sites.

    31.210.123.135

    List of domains/hosts:

    brenda.net.ua
    bella.net.ua
    rain-bella.net.ua
    bogdana.net.ua
    anuta.net.ua
    evening-barb.net.ua
    beatrice.net.ua
    belinda-wife.net.ua
    blondie.net.ua
    billie.net.ua
    morning-billie.net.ua
    billie.net.ua
    way-bonnie.net.ua
    brigitte.net.ua
    beth.net.ua
    fire-beth.net.ua
    yvonne-beam.net.ua
    bubbles.net.ua
    brigitte-night.net.ua
    becky-wait.net.ua
    birgit.net.ua
    day-birgit.net.ua
    beverly-heart.net.ua
    betsy-waist.net.ua
    bobbie-today.net.ua
    view-candy.net.ua
    mail.view-candy.net.ua
    beverly.net.ua
    anny.net.ua
    bunny.net.ua
    moon-bunny.net.ua
    betsy.net.ua

    Also see:
    http://ikillspammers.blogspot.com/2010/01/lady-marmelady-another-in-long-line-of.html

    "Once a blue frog, always a blue frog."

  15. User picture
    • IssViews (not verified) on Mon 19 Mar 2012
    • 10:37:48 AM UTC

    RE: Fake dating sites.

    young-bubbles.net.ua

  16. User picture
    • IssViews (not verified) on Fri 30 Mar 2012
    • 07:09:36 PM UTC

    RE: Fake dating sites.

    diana-wife.net.ua

  17. User picture
    • IssViews (not verified) on Wed 20 Feb 2013
    • 11:33:09 AM UTC

    RE: Fake dating sites.

    billie.biz.ua
    annett.biz
    ada.biz.ua
    adriana.biz.ua

  18. User picture
    • IssViews (not verified) on Mon 25 Feb 2013
    • 08:38:32 AM UTC

    RE: Fake dating sites.

    claudy.eu

  19. User picture
    • Boonsiri on Mon 25 Feb 2013
    • 01:52:21 PM UTC

    RE: Fake dating sites.

    Important Registrar Publicdomainregistry.com has notified the owner of the domain lookingformylove.net that ANY spam-activities (=spam-domains with a link to lookingformylove.net) after February 26th 2013 7:00 a.m. EST (= 12.00 noon GMT) will lead to the suspension of lookingformylove.net. So if anyone receives again spam for domains that like annett.biz & ada.biz.ua include a link to the registration page of lookingformylove.net, please forward the original UBE to the abuse address of Registrar Publicdomainregistry.com, mentioning:
    [#ICK-233-15105]: Removal request lookingformylove.net.
    Update: after one more spam-domain was reported (before the deadline) Registrar Publicdomainregistry.com has already suspended the domain lookingformylove.net. No doubt it will soon be replaced with a similar domain ~sigh~

  20. User picture
    • IssViews (not verified) on Fri 01 Mar 2013
    • 04:26:00 PM UTC

    RE: Fake dating sites.

    birgit.in.ua

  21. User picture
    • Boonsiri on Fri 01 Mar 2013
    • 05:47:49 PM UTC

    RE: Fake dating sites.

    Birgit.in.ua was used as a link to a registration-form at singlehearth.org. However, Registrar Publicdomainregistry.com has already notified the owner of singlehearth.org that any new spam linking to singlehearth.org will lead to immediate suspension of the domain. If you would get spam with a link to singlehearth.org please report the original UBE to the abuse address of Registrar Publicdomainregistry.com, mentioning: [#HKV-754-93120]: Removal request singlehearth.org. It seems however that this spammer has moved from Registrar Publicdomainregistry.com to Registrar "GRANSY S.R.O", where a new domain is abused: helenna.eu. If you get spam with a link to a registration form at helenna.eu please report it to the abuse address of Registrar "GRANSY S.R.O".
    http://www.mywot.com/scorecard/rain-cristina.in
    http://www.mywot.com/scorecard/helenna.eu

  22. User picture
    • Boonsiri on Mon 04 Mar 2013
    • 08:36:57 PM UTC

    RE: Fake dating sites.

    On 04-Mar-2013 helenna.eu had the name servers removed by Registrar "GRANSY", and has singlehearth.org been set on clientHold by Registrar "Publicdomainregistry.com".

  23. User picture
    • Boonsiri on Mon 04 Mar 2013
    • 08:40:19 PM UTC

    RE: Fake dating sites.

    bobbie.net.ua
    Message 04-Mar-2013: "Domain will be suspended during 24-48 hours when request will be processed by admin of the domain NET.UA."

  24. User picture
    • Boonsiri on Wed 06 Mar 2013
    • 04:47:42 PM UTC

    RE: Fake dating sites.

    wanda.kr.ua
    Used for registration at Valeri.in which replaces helenna.eu and singlehearth.org.
    Registrar "Directi" has been asked to suspend the domain valeri.in.

  25. User picture
    • IssViews (not verified) on Sat 09 Mar 2013
    • 10:27:30 AM UTC

    RE: Fake dating sites.

    hxxp://www.viola.kr.ua

  26. User picture
    • Boonsiri on Tue 12 Mar 2013
    • 05:55:13 PM UTC

    RE: Fake dating sites.

    helly.co.ua
    abra.in.ua
    Used for registration at Aniuta.biz.ua which replaces suspended domain Valeri.in.
    Registrar "Regnames.ua" has been asked to suspend the domain aniuta.biz.ua.

  27. User picture
    • IssViews (not verified) on Wed 20 Mar 2013
    • 12:32:38 PM UTC

    RE: Fake dating sites.

    janice.in

  28. User picture
    • Boonsiri on Thu 21 Mar 2013
    • 01:20:27 AM UTC

    RE: Fake dating sites.

    juanita.in
    It looks like the spammer has found "bullet proof" hosting at "Regnames.ua". Despite several requests this Registrar has not suspended the present target-domain aniuta.biz.ua.
    Edit: Within 2 hours of my removal request Registrar "Directi" wrote: "We have suspended the domain name 'juanita.in'." Updated Date : 21-Mar-2013 Name servers: NS1. & NS2.SUSPENDED-DOMAIN.COM "

  29. User picture
    • Boonsiri on Thu 21 Mar 2013
    • 07:50:43 PM UTC

    RE: Fake dating sites.

    yanny.org is another target domain that - besides aniuta.biz.ua - is spammed through dispensable domains like lyuda.in As yanny.org was registered at Registrar "Publicdomainregistry.com (R1935-LROR)" it will hopefully not last as long as aniuta.biz.ua.

  30. User picture
    • IssViews (not verified) on Tue 02 Apr 2013
    • 08:32:58 AM UTC

    RE: Fake dating sites.

    almudena.in.ua