This document was written with the intent to make spam expensive for a particular spammer. Our spammer appears to be making money from referrals. That will be explained later. Please use this information to report any and all instances of this campaign that you see. The appropriate contact is Chaturbate support (support@chaturbate.com) concerning http://chaturbate.com/affiliates/in/bfpW/d3MEj/?track=default. See below.
-------------------------------------
Example:
This girl fucked with my friends emotions, and I happen to have nudes and videos, come here if u want to watch them
http://p-a-stebi-n.com/wvB5iGKY
-------------------------------------
pastebin.com/wvB5iGKY refers to apu.sh/8ml, which redirects to chaturbate.us.tf:
~ $ curl -LI apu.sh/8ml
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Length: 535
Content-Type: text/html; charset=utf-8
Location: http://chaturbate.us.tf
Server: Microsoft-IIS/7.5
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
Date: Thu, 09 Oct 2014 03:29:18 GMT
HTTP/1.1 200 OK
Server: BladeStorm
Date: Thu, 09 Oct 2014 03:29:19 GMT
Content-Type: text/html
Connection: keep-alive
-------------------------------------
chaturbate.us.tf redirects to random Chaturbate models. Notice affiliate link http://chaturbate.com/affiliates/in/bfpW/d3MEj/?track=default below:
~ $ curl -s http://chaturbate.us.tf
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><!-- UNONIC (www.unonic.com) -->
<head><title>Live! teen Sex!</title>
<meta http-equiv=content-type content="text/html; charset=UTF-8">
<meta name="Description" content="chaturbate - learn more about chaturbate. Here you will find all the info ...">
<meta name="Keywords" content="">
<META name="LANGUAGE" content="">
<meta http-equiv="content-language" content="">
<meta name="ROBOTS" content="index,follow">
<meta name="DISTRIBUTION" content="global">
<link href="/zzz/css.css" rel="stylesheet" type="text/css">
<script language="JavaScript" type="text/javascript">
<!-- // SQ
document.write("<"+"script language=\"JavaScript\" type=\"text/javascript\" src=\"http://statistiq.com/85787978/?sessq=Y2hhdHVyYmF0ZS51cy50Zu+/ve+/vQ==&o=Y3VybC83LjM1LjA=&J=@7&c="+screen.colorDepth+"&t="+window.screen.width+"x"+window.screen.height+"\"></"+"SCRIPT>");
// -->
</script>
<script type="text/javascript" src="/zzz/gas.js"></script>
</head>
<body>
<table cellspacing="0" cellpadding="0" id="main">
<tr><td><iframe src="http://chaturbate.com/affiliates/in/bfpW/d3MEj/?track=default" name="fid1" id="fid1" width="100%" height="100%" marginwidth="0" marginheight="0" frameborder="0"></iframe></td></tr></table>
<div align="center" id="bottom">
<h1><a href="chaturbate.us.tf">Live! teen Sex!</a></h1><br><br>
<h2><a href="http://chaturbate.com/affiliates/in/bfpW/d3MEj/?track=default">chaturbate - learn more about chaturbate. Here you will find information about chaturbate...</a></h2><br><br>
<a href="http://www.unonic.com/">Kostenlose Domains f�r alle! Registrieren Sie kostenlos Ihre eigene Domain! - Free Domains</a><br><br>
</div>
<script type='text/javascript' src='http://adboost.serverpower.net/js.php'></script>
</body>
<!-- V6.14FC -->
</html>
