Marmeladies.com and Lady-Marmelady.com - Updates on this Russian Dating Scam

Just a quick update that I made a brief addendum to my January posting regarding the by-now-well-known "Lady Marmelady" Russian dating spam setup.

In a nutshell:

Marmeladies.com appears to be a fairly recent additional property spammed in precisely the same way.

The URL "littledatenow.com" is a very heavily spammed URL. As with previous "Lady Marmedlady" spam, it never divulges where you will end up, but the confirmation email inevitably leads there should you foolishly complete a registration. (And why would you do that? It was received via spam. Use your brain!)

When the spammers promoting this are not spamming that particular URL, the link in the spam message is nearly always (yet again) an MSN Live Spaces URL, or that of some other free-redirection url. That started in March, but especially in the recent two weeks has instead changed back to the "littledatenow.com" URL. A few hours after I posted that domain, I started receiving notice from numerous recipients that the new domain being spammed is "dateyourgirl.com".

The MSN Live Spaces urls typically redirect or link to an unpronouncable domain name, passing one of a series of affiliate ID's. The domain at the current time is redactjuri.info, and they pass affiliate ID's 132, 134, 135 and 136 (that I have seen or been informed of.)

Here's a list of all the domains that these MSN Live Spaces locations redirect to:

http://united-states-russian-dating.ru/
http://sexy4sex.info/
http://redactjuri.info/index.php?idAff=###
http://pornorate.ru/index.php?idAff=###
http://jink.ru/index.php?idAff=###
http://pove.ru/?idAff=###
http://gerl-007.ru/index.php?action=3
http://sexualmeet.ru/

(Where "###" is any of the aforementioned "affid" values of 132, 134, 135 and 136.)

redactjuri.info is again registered via GoDaddy using totally fake - and, I might add, incomplete - contact information. Hosted on IP address 111.148.252.71, provided by "North Star Information Hi.tech Ltd. Co." in (of course) Beijing, China.

littledatenow.com was registered via Regtime LTD. on April 5th 2010, just in time to be spammed to millions of recipients. It features questionable contact information claiming to be in Russia. The site is hosted on IP address 219.232.228.204 courtesy of course of "CNCITYNET" in Beijing, China. dateyourgirl.com was registered today (April 19th, 2010) using different but more than likely still fake Russian contact information, registered at Regtime.net. It's hosted on the exact same IP address in China.

[I wonder why the sudden change? Possibly reading this blog? Keep it up. I hear from hundreds of angry recipients of your spam, Marmeladies.]

Nobody from Marmeladies has responded to numerous requests into why they continue to use criminal spam operations to promote their service, but their "service" appears to be a 100% scam anyway based on the multiple messages I've received from the victims of their ongoing financial swindling.

Stay far, far away. Marmeladies.com is a complete and utter scam, more than likely run by criminals.

SiL / IKS / concerned citizen

[Edited 04/19/2010 9:23:09 AM to include MSN Live Spaces redirection information.]

[Further edited 04/19/2010 2:34:16 PM to include newer spammed domain, dateyourgirl.com]

[Further edited 04/20/2010 10:32:23 AM to include further MSN Spaces redirection URLs.]