http://www.securemydeal.com

[peg]

for http://www.securemydeal.com


Dear Sir/Ma'am:

You are receiving this email because you are either directly or indirectly linked with a fraudulent site hosted at http://www.securemydeal.com/

This particular site is using a known fraudulent layout. This particular layout can be seen in our gallery area at http://escrow-fraud.com/images/sites/Layout18 .

The website itself resolves to 222.47.76.230

Additionally, You will also find the site is FRAUDULENTLY using the Verisign Logo. This can be found at http://www.securemydeal.com/VERISIGN/verisign_info.htm . The page itself even declares

- Make sure that the URL of this page begins with "https://seal.verisign.com" -

Which it obviously is not because it is a fraud.

Please be diligent in removing or helping to remove this fraudulent website. Additionally, there may have been fees paid in registering the domain. If these fees were collected by your company, you may also find that they were paid for with fraudulent or stolen credit cards and Identities.

Thank you for your co-operation in this matter. Please feel free to visit http://escrow-fraud.com for more information about fraudulent sites.

Sincerely


Sign an appropriate name

This email shoudl be sent to the following addresses.

Addresses associated with WHOIS of DNS Host (no email for normal domain)
pantao@xinnet.com, lihm@xinnet.com

Addresses associated with whois of ip 222.47.76.230 (which is where http://www.securemydeal.com resolves to)
hm-changed@apnic.net, wangpei@crc.net.cn, ipas@cnnic.net.cn, crnet_mgr@chinatietong.com, crnet_mgr@chinatietong.com


Also I have filed an abuse complaint with Verisign for the misuse of their logo.

Please copy and paste the text into a new email and send it to each of the addresses above. The goal obviously is that the hosts will get the point that they are hosting a fraud site and ultimately may shut them down sooner.

Once we (someone) notices that the site is shut down, then we can add a message in here saying so. The topic will then be changed to indicate it (to avoid sending email about sites already closed.

[peg]

Within 24 hours this site was closed. Apparently the Chinese don't want the scams either

[Eniac]

NACK, the site is lame but alive. I would have wondered how you can get a chinese bullet proof hosted scammer site shut down in 24 hours.

Due to the bogus whois record of the site you should file a Whois Data Problem Report to InterNIC: http://wdprs.internic.net/ , maybe the site is kicked then.

Eniac

[peg]

Interesting. I checked it last night after I got the Return Receipt from one of the email recipients, and it was down. I checked it again this AM (~ 8 AM EST) and it was still down.

Wonder what happened?


Oh... I see what I did... When I checked it I checked http://securemydeal.com but there is apparently no domain configured there. It does work at http://www.securemydeal.com

Thanks Eniac for catching my goof.