4chan spam - thefappeningdump.com

SUBMITTED BY: Guest

DATE: Oct. 7, 2014, 8:37 a.m.

FORMAT: Text only

SIZE: 3.5 kB

Raw Download

HITS: 2748

Report
  1. This document was written with the intent to make spam expensive for a particular spammer. This one posts the URL to thefappeningdump.com. Our spammer appears to be making money from ad revenue, pop-ups, and referrals. That will be explained later. Please use this information to report any and all instances of this campaign that you see.
  3. Domain registrar: abuse@name.com
  4. Registrant Name: Protected Domain Services
  5. Registrant Organization: Protected Domain Services
  6. Registrant Street: 191 University Blvd. , Unit 384
  7. Registrant City: Denver
  8. Registrant State/Province: CO
  9. Registrant Postal Code: 80206-4613
  10. Registrant Country: US
  11. Registrant Phone: +1.7206339075
  12. WHOIS privacy protection abuse address: compliance@protecteddomainservices.com
  13. Domain host: Cloudflare (abuse@cloudflare.com, 104.28.{18,19}.72)
  14. Name Server: fred.ns.cloudflare.com
  15. Name Server: leia.ns.cloudflare.com
  17. Ads served for JuicyAds (http://www.juicyads.com/report.php, sample link: http://ck.juicyads.com/getjuicy.php?jad=999386&juser=60062&data=ea25f684e99639a16396a1bed95c08fa&std2=x213s2x20333y2f4a494&pubid=29390&zoneid=333247&jsparked=b9e0487b04b6f35e5e5b74bdd143b3b61cbb4a69&jurl=p5y5l4i4130424n4p456s206h4k5l554x5l454i4f4g4g4a406k4u5p2b4i4v554) appear as banner links (which seem to feature Chaturbate, support@chaturbate.com, http://chaturbate.com/affiliates/in/Lc8u/fxTnv/?track=track).
  19. Chaturbate affiliate link seems to redirect to random models.
  21. The following bit of code is associated with PopAds.net (https://www.popads.net/report-abuse.html). Not sure what part of this is useful to them. Notice the references to Chaturbate.
  23. <!-- PopAds.net Popunder Code for thefappeningdump.com -->
  24. <script type="text/javascript">
  25. var _pop = _pop || [];
  26. _pop.push(['siteId', 420724]);
  27. _pop.push(['minBid', 0]);
  28. _pop.push(['popundersPerIP', 0]);
  29. _pop.push(['delayBetween', 0]);
  30. _pop.push(['default', false]);
  31. _pop.push(['defaultPerDay', 0]);
  32. _pop.push(['topmostLayer', false]);
  33. (function() {
  34. var pa = document.createElement('script'); pa.type = 'text/javascript'; pa.async = true;
  35. var s = document.getElementsByTagName('script')[0];
  36. pa.src = '//c1.popads.net/pop.js';
  37. pa.onerror = function() {
  38. var sa = document.createElement('script'); sa.type = 'text/javascript'; sa.async = true;
  39. sa.src = '//c2.popads.net/pop.js';
  40. s.parentNode.insertBefore(sa, s);
  41. };
  42. s.parentNode.insertBefore(pa, s);
  43. })();
  44. </script>
  45. <!-- PopAds.net Popunder Code End -->
  46. <!-- Begin JuicyAds PopUnder Code -->
  47. <script type="text/javascript">juicy_code='44e4x233p256r2p2v29433a4';</script>
  48. <script type="text/javascript" src="http://ads.juicyads.com/jsclients/jac.js" charset="utf-8"></script>
  49. <!-- End JuicyAds PopUnder Code -->
  50. </head>
  52. <body id=thePicturePage>
  53. <center><h1><a href="http://thefappeningdump.com">The Fappening Dump</a></h1></center></br></b>
  54. <center><!--JuicyAds v2.0-->
  55. <iframe border=0 frameborder=0 marginheight=0 marginwidth=0 width=736 height=98 scrolling=no allowtransparency=true src=http://adserver.juicyads.com/adshow.php?adzone=333247></iframe>
  57. <script id='popupJS' src='http://chaturbate.com/creative/im/1.js?c=0&filename=cb_im_str8_240x210_01.gif&height=210&width=240&wm=fxTnv&tour=Lc8u&track=track'></script>
  58. <!--JuicyAds END-->