{"id":9840,"date":"2013-03-20T13:37:59","date_gmt":"2013-03-20T20:37:59","guid":{"rendered":"http:\/\/37prime.wordpress.com\/?p=9840"},"modified":"2013-03-20T13:37:59","modified_gmt":"2013-03-20T20:37:59","slug":"spammer-alert-x-celerated-com","status":"publish","type":"post","link":"https:\/\/37prime.com\/news\/2013\/03\/20\/spammer-alert-x-celerated-com\/","title":{"rendered":"Spammer Alert: x-celerated.com"},"content":{"rendered":"<p>UPDATE 4:<br \/>\nThis spammer also related to <a href=\"http:\/\/knujon.com\/owners\/wreese2013@hotmail.com.html\" target=\"_blank\">wreese2013@hotmail.com<\/a>.<br \/>\nThe first spam reported to us is coming from ldirect.us domain<br \/>\nDefinitely related to thegrapekiwi@gmail.com.<br \/>\nThe phone number given as administrative contact <a href=\"http:\/\/www.google.com\/#q=1.5037469135\" target=\"_blank\">1.5037469135<\/a> seems to be used a lot for spam domain names.<\/p>\n<p>UPDATE 3:<br \/>\nThis spammer is also related to thegrapekiwi@gmail.com which is in the Register of Known Spam Operation (ROKSO).<br \/>\nSource: <a href=\"http:\/\/www.spamhaus.org\/rokso\/evidence\/ROK9632\/quick-cart-pro\/Partner%20in%20spam:%20%20Adam%20Bate\" target=\"_blank\">The Spamhaus Project<\/a><\/p>\n<p>UPDATE 2:<br \/>\nAlso related with Xcelerate<\/p>\n<blockquote><p>cherwo.co.uk (Registered on: 21-Mar-2013)<\/p>\n<p>Domain name:<br \/>\ncherwo.co.uk<\/p>\n<p>Registrant:<br \/>\nEvoMedia<\/p>\n<p>Registrant type:<br \/>\nNon-UK Corporation<\/p>\n<p>Registrant&#8217;s address:<br \/>\nPO Box 025250 #52990<br \/>\nMiami<br \/>\nFL<br \/>\n33102<br \/>\nUnited States<\/p>\n<p>Registrar:<br \/>\neNom, Inc. [Tag = ENOM]<br \/>\nURL: http:\/\/www.enom.com<\/p><\/blockquote>\n<p>UPDATE:<br \/>\nBased on recent findings, tslater@x-celerated.com spammer is related to admin@sevenquest.com spammer.<\/p>\n<p>We&#8217;ve been getting requests to investigate a particular round of spam emails a few weeks ago. The spam seems to be using domain names with the same registration information.<\/p>\n<blockquote><p>Administrative Contact:<br \/>\nXcelerate<br \/>\nTom Slater (tslater@x-celerated.com)<br \/>\n+1.7733288013<br \/>\nFax: +1.5555555555<br \/>\n1608 S. Ashland Ave<br \/>\nChicago, IL 60608<br \/>\nUS<\/p><\/blockquote>\n<p>Partial list of domains registered with email tslater@x-celerated.com through enom.com \/ namecheap.com:<\/p>\n<ul>\n<li>abovearrange.co.uk (Registered on: 27-Dec-2012)<\/li>\n<li>acceptgrand.com (creation date: 06-mar-2013)<\/li>\n<li>acceptjust.com (creation date: 14-mar-2013)<\/li>\n<li>acceptmatter.com (creation date: 14-mar-2013)<\/li>\n<li>alongsidethrough.co.uk (registered on: 18-Mar-2013)<\/li>\n<li>appledefine.co.uk (Registered on: 27-Dec-2012)<\/li>\n<li>behindbelow.co.uk (registered on 18-Mar-2013)<\/li>\n<li>buyseem.com (creation date: 21-feb-2013)<\/li>\n<li>consideringplus.co.uk (registered on: 18-Mar-2013)<\/li>\n<li>dowould.com (creation date: 15-mar-2013)<\/li>\n<li>fixuntil.com (creation date: 14-mar-2013)<\/li>\n<li>drawnegotiate.co.uk (Registered on: 27-Dec-2012)<\/li>\n<li>eitherthose.co.uk (Registered on: 07-Mar-2013)<\/li>\n<li>excludingdown.co.uk (registered on 18-Mar-2013)<\/li>\n<li>explainlist.com (creation date: 18-mar-2013)<\/li>\n<li>findgive.com (creation date: 14-mar-2013) <strong>*BLOCKED DUE TO SPAM*<\/strong><\/li>\n<li>fixuntil.com (creation date: 14-mar-2013)<\/li>\n<li>insuredegree.net (creation date: 11-mar-2013)<\/li>\n<li>measureease.co.uk (registered on: 16-mar-2013)<\/li>\n<li>mindget.net (creation date: 11-dec-2012)<\/li>\n<li>needwith.com (creation date: 13-mar-2013)<\/li>\n<li>organiseevent.us (Domain Registration Date: Oct-10-2012)<\/li>\n<li>readeach.com (creation date: 15-mar-2013)<\/li>\n<li>sandez.co.uk (registered on: 21-mar-2013)<\/li>\n<li>sellstill.com (creation date: 13-mar-2013) <strong>*BLOCKED DUE TO SPAM*<\/strong><\/li>\n<li>startenough.co.uk ( Registered on:\u00a009-Mar-2013)<\/li>\n<li>studybehind.co.uk (Registered on: 30-Dec-2012)<\/li>\n<li>succeedthe.co.uk (Registered on: 03-Mar-2013)<\/li>\n<li>talkterm.com (creation date: 15-mar-2013)<\/li>\n<li>teachthree.com (creation date: 13-mar-2013)<\/li>\n<li>telloffice.com (creation date: 06-mar-2013)<\/li>\n<li>usealways.co.uk\u00a0 (Registered on: 03-Mar-2013)<\/li>\n<li>userepeat.co.uk (Registered on: 30-Dec-2012)<\/li>\n<li>yourher.co.uk (Registered on: 07-Mar-2013)<\/li>\n<li>returning-home.info (expired)<\/li>\n<li>iseaadapt.com (expired)<\/li>\n<li>actrevise.com (expired)<\/li>\n<li>adaptpoint.com (expired)<\/li>\n<\/ul>\n<p>The domain x-celerated.com was registered through DreamHost:<\/p>\n<blockquote><p>Registrant Contact:<br \/>\nx-celerated.com Private Registrant x-celerated.com@proxy.dreamhost.com<br \/>\nA Happy DreamHost Customer<br \/>\n417 Associated Rd #324<br \/>\nBrea, CA 92821<br \/>\nUS<br \/>\n+1.7147064182<\/p><\/blockquote>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"x-celerated\" src=\"http:\/\/37prime.com\/news\/wp-content\/uploads\/2013\/03\/x-celerated.png\" width=\"570\" height=\"321\" \/><\/p>\n<p>We informed DreamHost of our findings on x-celerated.com, and we received a reply:<\/p>\n<blockquote><p>Unfortunately, we provide neither hosting services, nor email services, for any of these domains. The same is true for x-celerated.com, for which we are only the<br \/>\nregistrar.<\/p><\/blockquote>\n<p>We looked into the address of Xcelerate&#8217;s Tom Slater. It is a mailbox service by <a href=\"https:\/\/www.earthclassmail.com\/Chicago-Address\" target=\"_blank\">Earth Class Mail in Chicago<\/a>.<\/p>\n<blockquote><p>A Virtual Presence In Chicago<br \/>\nStreet and PO Box addresses available:<\/p>\n<p>Street Address<br \/>\n1608 S Ashland Ave.<br \/>\nChicago, Illinois 60608-2013<br \/>\nJust $14.95 per month in addition to Monthly subscription fees<br \/>\nWill-call pickup not available<\/p>\n<p>PO Box<br \/>\nPO Box 803338<br \/>\nChicago, IL 60680-3338<br \/>\nIncluded in your monthly subscription fee<\/p><\/blockquote>\n<p>We cross referenced the phone number 773-328-8013 and the addresses from Earth Class Mail. We found a domain using Earth Class Mail service and the phone number 773-328-8013.<\/p>\n<blockquote><p>Administrative Contact:<br \/>\nTruTech<br \/>\nMike Young (admin@techtru.com)<br \/>\n+1.7733288013<br \/>\nFax: +1.7733288013<br \/>\nPO Box 803338<br \/>\nChicago, IL 60680<br \/>\nUS<\/p><\/blockquote>\n<p>The domain techtru.com was registered through enom.com \/ namecheap.com on August 27, 2012.<\/p>\n<p>We called the number 773-328-8013 and we got the automated voicemail:<\/p>\n<blockquote><p>You&#8217;ve been forwarded to the voicemail for *text to speech voice* &#8220;xcelerate&#8221;.<\/p><\/blockquote>\n<p>It seems that Xcelerate is a shell company for the spammer to hide behind.<\/p>\n<p>Spoofing the sender&#8217;s email address can be done. In this case Xcelerate \/ x-celerated.com is highly likely to be involved. Consider the following patterns:<\/p>\n<ul>\n<li>The Domain Names are registered through enom.com \/ namecheap.com<\/li>\n<li>Each Domain Name is composed of two English dictionary words that seemed to be randomly chosen<\/li>\n<li>Registration info of the Domain Names are the same<\/li>\n<li>The Domain Names are recently registered \/ created<\/li>\n<li>The voicemail for 773-328-8013 mentions &#8220;Xcelerate&#8221;<\/li>\n<\/ul>\n<p>If you would like to fight these spammer, use services like <a href=\"http:\/\/spamcop.net\/\" target=\"_blank\">SpamCop.net<\/a> and report them. SpamCop.net provides free service; we encourage you to subscribe to their service for a nominal fee. After all, they are providing a great service.<\/p>\n<p>&#8212;&#8212;-<\/p>\n<p>Disclaimer:<br \/>\nWe use SpamCop.net service.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>UPDATE 4: This spammer also related to wreese2013@hotmail.com. The first spam reported to us is coming from ldirect.us domain Definitely related to thegrapekiwi@gmail.com. The phone number given as administrative contact 1.5037469135 seems to be used a lot for spam domain names. UPDATE 3: This spammer is also related to thegrapekiwi@gmail.com which is in the Register &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/37prime.com\/news\/2013\/03\/20\/spammer-alert-x-celerated-com\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Spammer Alert: x-celerated.com&#8221;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[946,4],"tags":[1396,2511,2619,2648,2769,2770,936,3039],"class_list":["post-9840","post","type-post","status-publish","format-standard","hentry","category-announcements","category-news","tag-headlines","tag-resources","tag-scam","tag-security","tag-spam","tag-spamcop","tag-tech","tag-troubleshooting"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pcNtU-2yI","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/9840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/comments?post=9840"}],"version-history":[{"count":0,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/posts\/9840\/revisions"}],"wp:attachment":[{"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/media?parent=9840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/categories?post=9840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/37prime.com\/news\/wp-json\/wp\/v2\/tags?post=9840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}