VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, 2, [3], 4 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 22:43:30 07/15/04 Thu
Author: Repost
Subject: Purported child porn spam

A purported child porn spam.
This could be real, but my guess is that it is nothing but a credit card
phish. Spammer charges your credit card, you can't complain to the cops
because it was supposedly for child porn. Also spammer doesn't feel guilty
about taking your money.
.sightings isn't really working.
Anyways, this includes some analysis so is more than just a sighting.
Text of the spam follows.

Received: from 220.119.245.41 ([220.119.245.41]) by *munged*
(8.12.11/8.12.11) with SMTP id i6G1lnja030873 for <*munged*>; Thu,
15 Jul 2004 21:48:48 -0400
Date: Fri, 16 Jul 2004 02:40:39 +0000
From: Claud Dreddw
Subject: =?utf-8?B?UmU6IEhPT1JOTlkgQ0hJ?= =?utf-8?B?TEREIFBPT1JO?=

^ Encoded subject decodes to:
Re: HOORNNY CHILDD POORN

Spamvertised site:
http://%65n%69r%65d%66f%74y.%6ee%74/main.html

Decodes to:
http://eniredffty.net/main.html
[Hosted on cta.cq.cn Chinese spam sewer]

Domain Name: ENIREDFFTY.NET
Registration Service Provided By: NAME15.COM
Contact: support@ssl4all.com
Website: http://name15.com
Registrant:
Kolpen ACC
Korban Dallas (serg_mih@linuxmail.org)
Gesser str 615
Dresden
null,00000
DE
Tel. +31.025698145
Creation Date: 07-May-2004
Expiration Date: 07-May-2005
Domain servers in listed order:
ns1a.redns.biz
ns1b.redns.biz

Page is a web form asking for credit card and personal info... concludes
with:
"UNIQUE OFFER !
You can buy full month (30 days) membership for only $60 through E-Gold
[link to E-Gold] !
E-mail us for details - newmov@earthling.net
"

Form uses the script located at:
http://planocity.bizland.com/form_my/ser.php

Completion of form redirects user to:
http://www.gratisweb.com/submited/done.html
[Quite possibly a standard response to gratisweb's own forms, having nothing
to do with the spammer]

=======


Our site is back online! We waiting for you!
Hi! You recie=
ved this e-mail
because you sent your address to our maillist or you are was our =
member.
We created
the hardlolita sit rij>e and the PUR=
E CHILD
PORNO site.
In our memberzone =

we have 1000 exclusive hardcore photos with =
little, tasty children and over 3=
00
Megabytes of high quality hardc=
ore CP videos.
By joining our site, you'll no =

longer have to search for other cp sites on the net.
Y=
ou will find MORE ABSOLUTELY
FRESH content If you was our member. We care abou=
t our members. Often
updates. Friendly support. All in ONE site!
You will be totall=
y fulfilled at
our site! We have a lot of extra services inside our memberzone!!=
!


Here is our preview site:
rel=nofollow target=_blank href=3D"http://e%6ei%72e%64f%66t%79.n%65t/main.html">htt=
p://eniredffty.net/m pxcu>ain.html



Regards, HORNY CHILD P c>ORN site Team.
And remember, we care!




[ Next Thread | Previous Thread | Next Message | Previous Message ]
[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.