Child Porn Spam - GoFuckYourself.com

PornBroker · 02-09-2003, 04:10 AM

Any solutions to this one?

Some spammer from the Ukraine started sending out child porn mailers today with one of my domains as the sender. ie:From: admin@xxxx, pornoman@xxxx, attention@xxxx

So now, I am getting thousands and thousands of rejects redirected back to my mail box every hour.

I sent an email to abuse@ my hosting company.

Anyone got any bright ideas?

LiveDose · 02-09-2003, 04:11 AM

someone hates you really really bad.

Socks · 02-09-2003, 04:11 AM

Oh wow man that sucks.. If you run a paysite I'd send a message to all your members and explain that it's not you, as a good gesture

Mr.Fiction · 02-09-2003, 04:12 AM

That fucking sucks. We've had spammers use our domains, but never for illegal stuff. Get ready to deal with some bullshit!

PornBroker · 02-09-2003, 04:57 AM

Quote:

Originally posted by LiveDose
someone hates you really really bad.

I think they have just harvested the email address.

The cp mailer clearly links to a site with an admin address in Kiev, UA with the following servers:

NS1.ALFAHOST.NET 81.9.8.70
NS2.ALFAHOST.NET 81.9.8.71

PornBroker · 02-09-2003, 06:14 AM

bump.

LiveDose · 02-09-2003, 06:24 AM

You might want to put a small disclaimer on your index with a link to a page explaining the situation briefly. This has happened to us about 3 times. Once with malice and twice not sure. A number of people will check out your site and then see the disclaimer. Some people won't believe you're innocent now matter what but this will at least show that you are trying to deal with the situation from your end.

This is a real problem on the net. Good luck.

PornBroker · 02-09-2003, 07:59 AM

Quote:

Originally posted by LiveDose
You might want to put a small disclaimer on your index

good idea

Wilbo · 02-09-2003, 08:03 AM

This happened to me also and there have been a few threads about this in the last few months. I complained to the spammers upstream and processor, they both ignored me.

XXX_Jman · 02-09-2003, 05:08 PM

good luck.

AaronM · 02-09-2003, 05:10 PM

Quote:

Originally posted by PornBroker
Any solutions to this one?

Some spammer from the Ukraine started sending out child porn mailers today with one of my domains as the sender. ie:From: admin@xxxx, pornoman@xxxx, attention@xxxx

So now, I am getting thousands and thousands of rejects redirected back to my mail box every hour.

I sent an email to abuse@ my hosting company.

Anyone got any bright ideas?

Track them down and kill them.

That is shitty man. Sorry to hear this.

kj4700 · 02-09-2003, 06:42 PM

Contact ASACP as soon as you can to let them know what is going on and give them the full header of the email so maybe can can track something down.

This happened to ARS just last week. I received some CP with ARS as the sender. I contacted ASACP and gave then the full header and they replied to let me know that they all ready received information and the emails were not coning from ARS but from Russia.

Just to protect yourself from any law enforcement coming to your door be sure to contact ASACP to let them know your concerns...

Hope everything will work out.

kj4700

NetRodent · 02-09-2003, 07:40 PM

We had this happen to us on Friday. A russian cp site processing through a german billing company used our domain as the sender. Bastards!

PornBroker · 02-09-2003, 08:18 PM

Quote:

Originally posted by NetRodent
We had this happen to us on Friday. A russian cp site processing through a german billing company used our domain as the sender. Bastards!

yeh, the billing company is:

Delta Billing Services AG
Wiesenhuttenplatz 72
Frankfurt, 60329
DE

Domain Name: DELTABILLING.NET

PornBroker · 02-09-2003, 08:19 PM

Quote:

Originally posted by kj4700
Contact ASACP as soon as you can to let them know what is going on and give them the full header of the email so maybe can can track something down.

This happened to ARS just last week. I received some CP with ARS as the sender. I contacted ASACP and gave then the full header and they replied to let me know that they all ready received information and the emails were not coning from ARS but from Russia.

Just to protect yourself from any law enforcement coming to your door be sure to contact ASACP to let them know your concerns...

Hope everything will work out.

kj4700

Yes, I have done this.
thanks.

PornBroker · 02-09-2003, 08:22 PM

Quote:

Originally posted by AaronM
Track them down and kill them.

good idea.
I hope there was no important email amoungst the 50,000 I just deleted from my inbox.

UncleJimmy · 02-12-2003, 09:33 AM

Heya PornBroker, I feel your pain.

I just got a TON of suspicious email bounces returning to my postmaster address for this one domain that I have that recently got put on some fucking asshole's CP emailing list

I've reported the original CP email spams I was getting to ASACP, but this new activity is freaking me out.

There appears to be no CP in the attempted emails using my various "support@, info@" etc emails, but there is some crazy encoding for the subject and message body so I can't tell what's in there really.

I guess I'll call my host, email them, and type up some memo for record to keep on file about this suspicious activity.

Would anyone recommend anything else????

Call a lawyer? Call the FBI?

Seems to be a rash of this shit going around and targetting adult webmaster emails. Does anyone else find this suspicious?

In the past 4-5 years I've never seen this until the past few months...

UncleJimmy · 02-12-2003, 11:05 AM

bump....

Anyone else in here experience these types of problems?

Jezebel Content · 02-12-2003, 11:20 AM

Fucking bastards.. It's probably some right-wing religious zealot trying to make an impact on the "evil" porn industry by making you look bad.

Brian

Cheshire · 02-12-2003, 11:23 AM

You're not the first this has happend to.

Immediately do a search on the IP that is sending out this spam and contact the company that owns it to shut it down.

UncleJimmy · 02-12-2003, 11:24 AM

This is one of my theories as well.

But I doubt they would EVER send the nasty shit that I recieved a few weeks back.

What is tripping me out, is that they are using the same domain that they sent the shit to, but I'm getting bounced emails for variations of that domain like

info@ support@, etc....

but the message and subject are encoded today and I don't see any CP in there, but it still makes me VERRRRY suspicious...

Just emailed my host, just wondering if I should email/write anyone else about this...

UncleJimmy · 02-12-2003, 11:34 AM

Quote:

Originally posted by Cheshire
You're not the first this has happend to.

Immediately do a search on the IP that is sending out this spam and contact the company that owns it to shut it down.

Thanks Cheshire,

I already reported the original emials I 'recieved' that clearly had CP in it to the authorities, but now I'm getting suspicious emails returned to ME as if my domain was attempting to send them out, so far it's mostly 'test' emails I can see, except for the few that are encoded....

02-09-2003, 04:10 AM	#1
PornBroker Confirmed User Join Date: Sep 2002 Posts: 686	Child Porn Spam Any solutions to this one? Some spammer from the Ukraine started sending out child porn mailers today with one of my domains as the sender. ie:From: admin@xxxx, pornoman@xxxx, attention@xxxx So now, I am getting thousands and thousands of rejects redirected back to my mail box every hour. I sent an email to abuse@ my hosting company. Anyone got any bright ideas? __________________ please allow me to introduce myself, I'm a man of wealth and taste...I've been around for a long long year stolen many man's soul and faith...I was around when jesus christ had his moment of doubt and pain...made damn sure that pilate washed his hands and sealed his fate...pleased to meet you hope you guess my name...but's what's puzzling you is the nature of my game...

02-09-2003, 04:11 AM	#2
LiveDose Show Yer Tits! Industry Role: Join Date: Feb 2002 Location: Somewhere Out there... Posts: 25,792	someone hates you really really bad. __________________ Scammer Alert: acer19 acer [email protected] [email protected] Money stolen using PayPal

02-09-2003, 06:14 AM	#6
PornBroker Confirmed User Join Date: Sep 2002 Posts: 686	bump. __________________ please allow me to introduce myself, I'm a man of wealth and taste...I've been around for a long long year stolen many man's soul and faith...I was around when jesus christ had his moment of doubt and pain...made damn sure that pilate washed his hands and sealed his fate...pleased to meet you hope you guess my name...but's what's puzzling you is the nature of my game...

02-09-2003, 06:24 AM	#7
LiveDose Show Yer Tits! Industry Role: Join Date: Feb 2002 Location: Somewhere Out there... Posts: 25,792	You might want to put a small disclaimer on your index with a link to a page explaining the situation briefly. This has happened to us about 3 times. Once with malice and twice not sure. A number of people will check out your site and then see the disclaimer. Some people won't believe you're innocent now matter what but this will at least show that you are trying to deal with the situation from your end. This is a real problem on the net. Good luck. __________________ Scammer Alert: acer19 acer [email protected] [email protected] Money stolen using PayPal

02-09-2003, 05:08 PM	#10
XXX_Jman Confirmed User Join Date: Oct 2002 Location: Up my own ass Posts: 213	good luck. __________________ XXX_Jman "To win without fighting is best"

02-09-2003, 04:11 AM	#3
Socks Confirmed User Industry Role: Join Date: May 2002 Location: Toronto Posts: 8,475	Oh wow man that sucks.. If you run a paysite I'd send a message to all your members and explain that it's not you, as a good gesture

02-09-2003, 04:12 AM	#4
Mr.Fiction Confirmed User Join Date: Feb 2002 Location: Free Speech Land Posts: 9,484	That fucking sucks. We've had spammers use our domains, but never for illegal stuff. Get ready to deal with some bullshit!

02-09-2003, 08:03 AM	#9
Wilbo Confirmed User Join Date: Mar 2001 Location: Baltimore Posts: 2,082	This happened to me also and there have been a few threads about this in the last few months. I complained to the spammers upstream and processor, they both ignored me.

02-09-2003, 06:42 PM	#12
kj4700 So Fucking Banned Join Date: Feb 2003 Location: Eastern USA Posts: 13	Contact ASACP as soon as you can to let them know what is going on and give them the full header of the email so maybe can can track something down. This happened to ARS just last week. I received some CP with ARS as the sender. I contacted ASACP and gave then the full header and they replied to let me know that they all ready received information and the emails were not coning from ARS but from Russia. Just to protect yourself from any law enforcement coming to your door be sure to contact ASACP to let them know your concerns... Hope everything will work out. kj4700

02-09-2003, 07:40 PM	#13
NetRodent Confirmed User Join Date: Jan 2002 Location: In the walls of your house. Posts: 3,985	We had this happen to us on Friday. A russian cp site processing through a german billing company used our domain as the sender. Bastards! __________________ "Every normal man must be tempted, at times, to spit on his hands, hoist the black flag, and begin slitting throats." --H.L. Mencken

02-12-2003, 09:33 AM	#17
UncleJimmy Confirmed User Join Date: Sep 2002 Location: ariZONA Posts: 855	Heya PornBroker, I feel your pain. I just got a TON of suspicious email bounces returning to my postmaster address for this one domain that I have that recently got put on some fucking asshole's CP emailing list I've reported the original CP email spams I was getting to ASACP, but this new activity is freaking me out. There appears to be no CP in the attempted emails using my various "support@, info@" etc emails, but there is some crazy encoding for the subject and message body so I can't tell what's in there really. I guess I'll call my host, email them, and type up some memo for record to keep on file about this suspicious activity. Would anyone recommend anything else???? Call a lawyer? Call the FBI? Seems to be a rash of this shit going around and targetting adult webmaster emails. Does anyone else find this suspicious? In the past 4-5 years I've never seen this until the past few months... __________________ <a href="http://www.redpartners.com/?r=100278"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><img src="http://britney-spears.blewme.com/wm.gif" width="120" height="60" border="0"></font></a><font size="2" face="Verdana, Arial, Helvetica, sans-serif"> Promote the web's hottest adult personals website, <a href="http://www.redpartners.com/?r=100278" target="_blank">Red Personals</a>.</font>

02-12-2003, 11:05 AM	#18
UncleJimmy Confirmed User Join Date: Sep 2002 Location: ariZONA Posts: 855	bump.... Anyone else in here experience these types of problems? __________________ <a href="http://www.redpartners.com/?r=100278"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><img src="http://britney-spears.blewme.com/wm.gif" width="120" height="60" border="0"></font></a><font size="2" face="Verdana, Arial, Helvetica, sans-serif"> Promote the web's hottest adult personals website, <a href="http://www.redpartners.com/?r=100278" target="_blank">Red Personals</a>.</font>

02-12-2003, 11:20 AM	#19
Jezebel Content Registered User Join Date: Jan 2003 Posts: 15	Fucking bastards.. It's probably some right-wing religious zealot trying to make an impact on the "evil" porn industry by making you look bad. Brian

02-12-2003, 11:23 AM	#20
Cheshire Confirmed User Join Date: Jul 2001 Location: Rosen-Villin Posts: 5,738	You're not the first this has happend to. Immediately do a search on the IP that is sending out this spam and contact the company that owns it to shut it down. __________________ just a little bit naughty

02-12-2003, 11:24 AM	#21
UncleJimmy Confirmed User Join Date: Sep 2002 Location: ariZONA Posts: 855	This is one of my theories as well. But I doubt they would EVER send the nasty shit that I recieved a few weeks back. What is tripping me out, is that they are using the same domain that they sent the shit to, but I'm getting bounced emails for variations of that domain like info@ support@, etc.... but the message and subject are encoded today and I don't see any CP in there, but it still makes me VERRRRY suspicious... Just emailed my host, just wondering if I should email/write anyone else about this... __________________ <a href="http://www.redpartners.com/?r=100278"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><img src="http://britney-spears.blewme.com/wm.gif" width="120" height="60" border="0"></font></a><font size="2" face="Verdana, Arial, Helvetica, sans-serif"> Promote the web's hottest adult personals website, <a href="http://www.redpartners.com/?r=100278" target="_blank">Red Personals</a>.</font>