 |
|
 |
|
|
 |
Tired of kiddie porn spammers? |
 |
 |
|
|
10-20-04 07:47 AM
Greetings,
I am checking out a kiddie porn site hosted by yahoo with DNS from
servers in Virginia. This has all the making of an FBI kiddie porn
spam run and I am tired of kiddie porn spam from law enforcement.
If I can trace this to the FBI I will post it publically and make damn
sure a multitude of news media outlets get the details.
Here is the spam,
May i ask you, why you visiting old sites all time ?
=) Let's see our hot and freshest stuff! ;-) ;-) I want to present
you
the Boys-Meetpoint of fresh and hot young gents!!! :-x The smallest
wild Boys ! http://www.shockingmpegs.biz/newerection/ of real
preteen-boys dream date with You NOW! Meet Your joy - see ya at
http://www.shockingmpegs.biz/newerection/?lolita_pics want remove?
http://hardestvideo.biz/unsub.php?s...il_addy_removed [...]
From the site:
We perform you absolutely NEW project with underage participants.
After a long time of negotiating with you, our potential customers, we
studied all your requirements and wishes and we would like to present
it for your judgement. It will be composed of a range of EDITIONS that
will be added periodically. All sample sets can be viewed at preview
pages. We make an accent on the QUALLITY and VARIETY of content.
Our photographer has built up a reputation among webmasters of this
niche. He maintained a central passion - photographing beautiful young
models. Curious and eager to know their bodies our girls are a bit shy
but passion and desire are born at your eyes. Some innocence in their
poses and sights is transformed into some deep and strange wishes that
should be taken care by someone. So we offer you to help them become
adult...
DNS for the kiddie porn spam is as follows:
10/19/04 21:06:23 dns shockingmpegs.biz
Canonical name: shockingmpegs.biz
Addresses:
66.218.79.155
66.218.79.147
66.218.79.148
66.218.79.149
After scanning the site:
Registrant Name: Ralph Slatton
Registrant Organization: Ralph Slatton
Registrant Address1: 314 N Willow
Registrant City: Erwin
Registrant State/Province: TN
Registrant Postal Code: 37650
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.4237433771
Registrant Email: rumbookx@yahoo.com
Another of the sites listed on the kiddie porn site:
10/19/04 21:29:59 dns extreme-incest-niche.com
Canonical name: extreme-incest-niche.com
Addresses:
66.218.79.158
66.218.79.159
66.218.79.164
66.218.79.165
66.218.79.166
66.218.79.157
Domain Name.......... extreme-incest-niche.com
Creation Date........ 2004-07-15
Registration Date.... 2004-07-15
Expiry Date.......... 2005-07-15
Organisation Name.... Ryan Vickers
Organisation Address. Cavanaugh ave. 9
Organisation Address.
Organisation Address. Atlanta
Organisation Address. 30316
Organisation Address. GA
Organisation Address. UNITED STATES
Another illegalcpbox.biz -- Dead
Registrant Name: Michael Berzinsky
Registrant Organization: Michael Berzinsky
Registrant Address1: 426 Garrett Street
Registrant City: Kent
Registrant State/Province: OH
Registrant Postal Code: 44240
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.3306788422
wildorgies.biz
Registrant Name: Frank Antoun
Registrant Organization: Frank Antoun
Registrant Address1: 1020 everett ct
Registrant City: Harrison
Registrant State/Province: OH
Registrant Postal Code: 45030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.5133675356
lollyedition.com
10/19/04 21:35:58 dns lollyedition.com
Canonical name: lollyedition.com
Addresses:
213.159.113.5
10/19/04 21:41:16 Fetching http://www.lollyedition.com/
Fetching http://www.lollyedition.com/ ...
GET / HTTP/1.1
Host: www.lollyedition.com
Connection: close
User-Agent: Sam Spade 1.14
HTTP/1.1 200 OK
Date: Wed, 20 Oct 2004 04:43:59 GMT
Server: Apache/1.3.31 (Unix) PHP/4.3.6
Last-Modified: Wed, 14 Jul 2004 11:04:32 GMT
ETag: "49ea94-9e-40f51340"
Accept-Ranges: bytes
Content-Length: 158
Connection: close
Content-Type: text/html
X-Pad: avoid browser bug
<html>
<body>
<center>
Due technical reasons the server is temporary offline. It'll be online
in 8 hours. At about 18:00 GMT today.
</center>
</body>
</html>
GMT???
This stinks of the FBI and their stings. If as I suspect they are
spamming kiddie porn the news media should investigate. The only
domain registered outside of US soil is the last one and they seem to
be at the head of the ship.
I could be mistaken but I think not with the time stamp and the child
porn they are showing and sending emails to people about.
HEADER:
Return-Path: <adiabatic@net-yan.com>
Received: from a.mx.sonic.net (eth0.a.mx.sonic.net [208.201.249.230])
by eth0.b.lds.sonic.net (8.12.11/8.12.9) with ESMTP id
i9K3PK42005189
for <REMOVED>; Tue, 19 Oct 2004 20:25:20 -0700
Received: from aar.alcatel-alsthom.fr ([211.215.220.66])
by a.mx.sonic.net (8.12.11/8.12.11) with SMTP id i9K3PEjK022969
for <REMOVED>; Tue, 19 Oct 2004 20:25:18 -0700
Received: from net-yan.com (smtp01.net-yan.com [210.0.255.210])
by plain.rackshack.net (Postfix) with ESMTP id 393D28A3CE
for <REMOVED>; Tue, 19 Oct 2004 22:17:17 -0500
Message-ID: <6.0.0.22.1.20041019221717.409dd103@net-yan.com>
X-Sender: digestion@smtp01.net-yan.com
X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
Reply-To: cry_baby@personal.ro
Date: Tue, 19 Oct 2004 22:17:17 -0500
To: Admin <REMOVED>
From: "Spadeful G. Masterstroke" <adiabatic@net-yan.com>
Subject: Fresh tons of super videos&photos! ...
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=====================_38505156_"
X-RAV-AntiVirus: This message has been scanned for viruses on
plain.rackshack.net
X-Sonic-SB-Tests: kr ID_Perm
[ Post a follow-up to this message ]
|
|
|
 |
|
 |
|
 |
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 07:47 AM
Mark Ferguson wrote:
> This has all the making of an FBI kiddie porn spam run and I am
> tired of kiddie porn spam from law enforcement.
You are tired of kiddie porn spam, but not of surfing kiddie porn.
Right, Mark? Why are you so interested in kids, pervert? Do you
molest kids, fuc*kshi*t?
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 07:47 AM
Mark Ferguson wrote:
> Greetings,
>
> I am checking out a kiddie porn site hosted by yahoo with DNS from
> servers in Virginia. This has all the making of an FBI kiddie porn
> spam run and I am tired of kiddie porn spam from law enforcement.
Personal opinion: It would be entrapment for the FBI to actually
advertise kiddie porn.
Continuing to operate an existing site is one thing, but advertising is
another ballgame altogether.
--
#define QUESTION ((bb) || !(bb))
-- Shakespeare
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 07:47 AM
Mark Ferguson wrote:
> Greetings,
>
> I am checking out a kiddie porn site hosted by yahoo with DNS from
> servers in Virginia. This has all the making of an FBI kiddie porn
> spam run and I am tired of kiddie porn spam from law enforcement.
>
???!?
Ummm... Mark is this really you?
There are more locations in Virginia other than few miles around and
including Quantico.
> If I can trace this to the FBI I will post it publically and make damn
> sure a multitude of news media outlets get the details.
>
Please make darn sure before posting.
> Here is the spam,
>
> May i ask you, why you visiting old sites all time ?
> =) Let's see our hot and freshest stuff! ;-) ;-) I want to present
> you
> the Boys-Meetpoint of fresh and hot young gents!!! :-x The smallest
> wild Boys ! http://www.shockingmpegs.biz/newerection/ of real
> preteen-boys dream date with You NOW! Meet Your joy - see ya at
> http://www.shockingmpegs.biz/newerection/?lolita_pics want remove?
> http://hardestvideo.biz/unsub.php?s...il_addy_removed [...]
>
> From the site:
>
> We perform you absolutely NEW project with underage participants.
> After a long time of negotiating with you, our potential customers, we
> studied all your requirements and wishes and we would like to present
> it for your judgement. It will be composed of a range of EDITIONS that
> will be added periodically. All sample sets can be viewed at preview
> pages. We make an accent on the QUALLITY and VARIETY of content.
>
> Our photographer has built up a reputation among webmasters of this
> niche. He maintained a central passion - photographing beautiful young
> models. Curious and eager to know their bodies our girls are a bit shy
> but passion and desire are born at your eyes. Some innocence in their
> poses and sights is transformed into some deep and strange wishes that
> should be taken care by someone. So we offer you to help them become
> adult...
>
>
> DNS for the kiddie porn spam is as follows:
>
> 10/19/04 21:06:23 dns shockingmpegs.biz
> Canonical name: shockingmpegs.biz
> Addresses:
> 66.218.79.155
> 66.218.79.147
> 66.218.79.148
> 66.218.79.149
>
Yahoo space... HQ'ed in CA.US, not VA.US.
> After scanning the site:
>
> Registrant Name: Ralph Slatton
> Registrant Organization: Ralph Slatton
> Registrant Address1: 314 N Willow
> Registrant City: Erwin
> Registrant State/Province: TN
> Registrant Postal Code: 37650
> Registrant Country: United States
> Registrant Country Code: US
> Registrant Phone Number: +1.4237433771
> Registrant Email: rumbookx@yahoo.com
>
4237433771 =~ TN.US, not VA.US.
> Another of the sites listed on the kiddie porn site:
>
> 10/19/04 21:29:59 dns extreme-incest-niche.com
> Canonical name: extreme-incest-niche.com
> Addresses:
> 66.218.79.158
> 66.218.79.159
> 66.218.79.164
> 66.218.79.165
> 66.218.79.166
> 66.218.79.157
>
66.218.79.158 == Yahoo.com != VA.US.
> Domain Name.......... extreme-incest-niche.com
> Creation Date........ 2004-07-15
> Registration Date.... 2004-07-15
> Expiry Date.......... 2005-07-15
> Organisation Name.... Ryan Vickers
> Organisation Address. Cavanaugh ave. 9
> Organisation Address.
> Organisation Address. Atlanta
> Organisation Address. 30316
> Organisation Address. GA
> Organisation Address. UNITED STATES
>
Maybe GA.US... Maybe not.
> Another illegalcpbox.biz -- Dead
>
> Registrant Name: Michael Berzinsky
> Registrant Organization: Michael Berzinsky
> Registrant Address1: 426 Garrett Street
> Registrant City: Kent
> Registrant State/Province: OH
> Registrant Postal Code: 44240
> Registrant Country: United States
> Registrant Country Code: US
> Registrant Phone Number: +1.3306788422
>
3306788422 =~ OH.US != VA.US.
> wildorgies.biz
>
> Registrant Name: Frank Antoun
> Registrant Organization: Frank Antoun
> Registrant Address1: 1020 everett ct
> Registrant City: Harrison
> Registrant State/Province: OH
> Registrant Postal Code: 45030
> Registrant Country: United States
> Registrant Country Code: US
> Registrant Phone Number: +1.5133675356
>
5133675356 =~ OH.US != VA.US.
>
> lollyedition.com
>
> 10/19/04 21:35:58 dns lollyedition.com
> Canonical name: lollyedition.com
> Addresses:
> 213.159.113.5
>
213.159.113.5 =~ RU != VA.US.
> 10/19/04 21:41:16 Fetching http://www.lollyedition.com/
> Fetching http://www.lollyedition.com/ ...
> GET / HTTP/1.1
>
> Host: www.lollyedition.com
>
> Connection: close
> User-Agent: Sam Spade 1.14
>
> HTTP/1.1 200 OK
> Date: Wed, 20 Oct 2004 04:43:59 GMT
> Server: Apache/1.3.31 (Unix) PHP/4.3.6
> Last-Modified: Wed, 14 Jul 2004 11:04:32 GMT
> ETag: "49ea94-9e-40f51340"
> Accept-Ranges: bytes
> Content-Length: 158
> Connection: close
> Content-Type: text/html
> X-Pad: avoid browser bug
>
>
> <html>
> <body>
> <center>
> Due technical reasons the server is temporary offline. It'll be online
> in 8 hours. At about 18:00 GMT today.
> </center>
> </body>
> </html>
>
> GMT???
Yes, GMT... Lots-o-Servers use GMT... Some services REQUIRE time to be
in GMT.
>
> This stinks of the FBI and their stings. If as I suspect they are
> spamming kiddie porn the news media should investigate. The only
> domain registered outside of US soil is the last one and they seem to
> be at the head of the ship.
>
???!?
Where, how... Better yet why? A case resulting from such a "sting"
would get tossed out, being entrapment and all.
> I could be mistaken but I think not with the time stamp and the child
> porn they are showing and sending emails to people about.
>
What does the time stamp have to do with anything?... And what time
stamp? The HTTP one above, the SMTP or MUA ones below?... None of them
are even on the eastern US coast. What I do see is GMT, CDT and PDT.
> HEADER:
>
> Return-Path: <adiabatic@net-yan.com>
> Received: from a.mx.sonic.net (eth0.a.mx.sonic.net [208.201.249.230])
> by eth0.b.lds.sonic.net (8.12.11/8.12.9) with ESMTP id
> i9K3PK42005189
> for <REMOVED>; Tue, 19 Oct 2004 20:25:20 -0700
> Received: from aar.alcatel-alsthom.fr ([211.215.220.66])
> by a.mx.sonic.net (8.12.11/8.12.11) with SMTP id i9K3PEjK022969
> for <REMOVED>; Tue, 19 Oct 2004 20:25:18 -0700
> Received: from net-yan.com (smtp01.net-yan.com [210.0.255.210])
> by plain.rackshack.net (Postfix) with ESMTP id 393D28A3CE
> for <REMOVED>; Tue, 19 Oct 2004 22:17:17 -0500
> Message-ID: <6.0.0.22.1.20041019221717.409dd103@net-yan.com>
> X-Sender: digestion@smtp01.net-yan.com
> X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22
> Reply-To: cry_baby@personal.ro
> Date: Tue, 19 Oct 2004 22:17:17 -0500
> To: Admin <REMOVED>
> From: "Spadeful G. Masterstroke" <adiabatic@net-yan.com>
> Subject: Fresh tons of super videos&photos! ...
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="=====================_38505156_"
> X-RAV-AntiVirus: This message has been scanned for viruses on
> plain.rackshack.net
> X-Sonic-SB-Tests: kr ID_Perm
>
To be fair;
66.218.79.158 does traceroute via aleron.net from here, and aleron.net
does appear to be based in VA.US... But so does sooooo much more than
just the FBI.
Geez... I've seen more actuate LARTs from Jamie!
SgtChains
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 12:47 PM
I think most kiddie porn email spam / spam postings are joe jobs.
I remember that kp spam "from" a guy in Jackson Heights, Queens, NYC
who was actually a spammer of AOL add-ons.
And once I got a kiddie sex tour spam from someone who, Google seemed
to imply, was a pirate in a different country. (Of course, there are
open proxies et alia but when someone shouts his identity and hides
the origin of the email it is likely a forgery.) I think the forger
was another pirate trying to hurt his biz.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 12:48 PM
Mark Ferguson wrote:
>Greetings,
>
>I am checking out a kiddie porn site hosted by yahoo with DNS from
>servers in Virginia. This has all the making of an FBI kiddie porn
>spam run and I am tired of kiddie porn spam from law enforcement.
>
>If I can trace this to the FBI I will post it publically and make damn
>sure a multitude of news media outlets get the details.
>
>
Don't forget, that patriot act lets them do anything to apprehend anyone
they want.
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 12:48 PM
On Wed, 20 Oct 2004 05:40:45 GMT, Moris <pritanda@REMLINK.yahoo.co.uk>
wrote:
>Mark Ferguson wrote:
>
>
>You are tired of kiddie porn spam, but not of surfing kiddie porn.
>Right, Mark? Why are you so interested in kids, pervert? Do you
>molest kids, fuc*kshi*t?
Moris, realizing he is fortunate he does not live close by.
--
Mark Ferguson
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 12:48 PM
On Wed, 20 Oct 2004 03:07:36 -0500, "Larry M. Smith"
<SgtChains-Usenet@FahQ2.com> wrote:
>Mark Ferguson wrote:
>
>???!?
>
>Ummm... Mark is this really you?
>
>There are more locations in Virginia other than few miles around and
>including Quantico.
The list of sites belong to a single company claiming to be based in
Russia. All the domains are registered in the US with actual street
addresses. That was a short list because it was late. I will most
likely be crawling those site when I get the time to do so.
I will also see if the numbers are real through mapquest and checking
the telephone numbers.
Some of the photos were obviously fakes but the site is allowed to be
up with US registration and street addresses and hosted by yahoo.
This was not a joe job for those considering that. I did not check
the dates of registration but some of them were registered through
Australia
I would not say the FBI on a whim. It looks to be official
sanctioning of multiple kiddie porn site where it even states those
involved are under age.
--
Mark Ferguson
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 12:48 PM
In article <xTmdd.86331$ay5.70946@fe1.news.blueyonder.co.uk>,
Moris <pritanda@REMLINK.yahoo.co.uk> wrote:
> Mark Ferguson wrote:
>
>
> You are tired of kiddie porn spam, but not of surfing kiddie porn.
> Right, Mark? Why are you so interested in kids, pervert? Do you
> molest kids, fuc*kshi*t?
Nice one gomerel! You have proven to the world just how much Mark is
making you shake with rage! You must *really* be angry ;-)
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
|
|
|
Re: Tired of kiddie porn spammers? |
|
|
|
|
10-20-04 10:48 PM
Mark Ferguson wrote:
> I would not say the FBI on a whim. It looks to be official
> sanctioning of multiple kiddie porn site where it even states those
> involved are under age.
>
> --
> Mark Ferguson
Wow. That's quite the claim. I think you're fairly upright for being on
NANAE but I have to ask ... did you just put down your copy of Nineteen
Eighty Four to post that?
As another poster said, a decent lawyer if such a thing could be proven
could get it tossed as entrapment. Shirley the government learned that
after trying to encourage John DeLorean to start selling cocaine.
--
Sir Hailstone - Bastard Operator From Hell
Live from Indianapolis, Indiana
known to a select few as just "Mike"
[ Post a follow-up to this message ]
|
|
|
|
|
|
|
|
Sponsored Links |
|
|
|
|
 |
All times are GMT. The time now is 04:40 PM. |
 |
|
|
 |
|
 |
|
|
 |
|
Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is OFF
vB code is ON
Smilies are ON
[IMG] code is OFF
|
|
|
|
|
 |
|
 |
|
