This document was written with the intent to make spam expensive for a particular spammer. This one posts the URL to thefappeningdump.com. Our spammer appears to be making money from ad revenue, pop-ups, and referrals. That will be explained later. Please use this information to report any and all instances of this campaign that you see. Domain registrar: abuse@name.com Registrant Name: Protected Domain Services Registrant Organization: Protected Domain Services Registrant Street: 191 University Blvd. , Unit 384 Registrant City: Denver Registrant State/Province: CO Registrant Postal Code: 80206-4613 Registrant Country: US Registrant Phone: +1.7206339075 WHOIS privacy protection abuse address: compliance@protecteddomainservices.com Domain host: Cloudflare (abuse@cloudflare.com, 104.28.{18,19}.72) Name Server: fred.ns.cloudflare.com Name Server: leia.ns.cloudflare.com Ads served for JuicyAds (http://www.juicyads.com/report.php, sample link: http://ck.juicyads.com/getjuicy.php?jad=999386&juser=60062&data=ea25f684e99639a16396a1bed95c08fa&std2=x213s2x20333y2f4a494&pubid=29390&zoneid=333247&jsparked=b9e0487b04b6f35e5e5b74bdd143b3b61cbb4a69&jurl=p5y5l4i4130424n4p456s206h4k5l554x5l454i4f4g4g4a406k4u5p2b4i4v554) appear as banner links (which seem to feature Chaturbate, support@chaturbate.com, http://chaturbate.com/affiliates/in/Lc8u/fxTnv/?track=track). Chaturbate affiliate link seems to redirect to random models. The following bit of code is associated with PopAds.net (https://www.popads.net/report-abuse.html). Not sure what part of this is useful to them. Notice the references to Chaturbate.

The Fappening Dump