theplanet.com

Peaches · 03-03-2004

These creeps are sending out emails saying:

Your credit card will be billed at $22.95 weekly and free 3 pack of child
porn CD is shipping to your billing address. To cancel your membership
and CD pack please email full credit card details to
abuse@theplanet.com Ready to enjoy all types of underage
porn? We have the best selection for every taste! Click the secret link
below and have fun... www.shadowfamily.com

Obviously in an attempt to get credit card numbers. Both urls and a traceroute point to theplanet.com with no host *I* can figure how who to send this crap to. And theplanet.com looks like a legit website (didn't click on the other one) But you guys are a lot more technically adept than I am....as is any 12 year old...Any hints on how to get them shut down or figure out why what looks to be a legitimate site is being used as a return addy and host for this?

Dravyk · 03-04-2004

I'm guessing the email has a form attached?

Save the email in HTML format, forward to FTC and FBI, let them click and track.

Peaches · 03-04-2004

Quote:

Originally posted by Dravyk@Mar 4 2004, 02:13 AM
I'm guessing the email has a form attached?

Save the email in HTML format, forward to FTC and FBI, let them click and track.

No form attached.

I've gotten 3 but only saved one - I usually delete all my trash every day but the third time it was making me curious

Soul_Rebel · 03-04-2004

shadowfamily.com according to google cache was a site related to carders

theplanet.com is a large hosting co. that used to host a large amount of spammers in the past. Probably someone is getting a lame revenge.

I haven't seen the email headers, but i'm very sure it relies on proxies. Close to impossible to trace who really sends it. It has been happening for some time now if you check the usenet

i would say just delete it

Peaches · 03-04-2004

Quote:

Originally posted by Soul_Rebel@Mar 4 2004, 12:03 PM
shadowfamily.com according to google cache was a site related to carders

theplanet.com is a large hosting co. that used to host a large amount of spammers in the past. Probably someone is getting a lame revenge.

I haven't seen the email headers, but i'm very sure it relies on proxies. Close to impossible to trace who really sends it. It has been happening for some time now if you check the usenet

i would say just delete it

Yeah, I was thinking about the revenge aspect of it.

Oh well, just wanted to do my duty but I'll just delete it like the rest of them - thanks everyone!

Dravyk · 03-04-2004

This is carder stuff not spam, Soul Rebel; unless they get info it has no function, so ... If there's not boxes and a button embedded in the email itself, there still must be a link. If it's a normal URL, it can be traced to a server.

chodadog · 03-04-2004

Probably just a spammer trying to create some heat for theplanet.com

They're the same guys that are with MatrixServers.com, yeah? Or at the very least, i think matrix resell for them. Unbelievable prices. A guy let me check out his server with SSH. It really is all premium bandwidth, upstream and downstream. Couldn't find any cogent on any trace routes.

Dice · 03-04-2004

Looks like a joe job, theplanet.com is a legit host.

03-03-2004	#1
Peaches Members Want to see your own Advertising Here! Join Date: Oct 2002 Location: Hills of N. GA Posts: 10,823	These creeps are sending out emails saying: Your credit card will be billed at $22.95 weekly and free 3 pack of child porn CD is shipping to your billing address. To cancel your membership and CD pack please email full credit card details to abuse@theplanet.com Ready to enjoy all types of underage porn? We have the best selection for every taste! Click the secret link below and have fun... www.shadowfamily.com Obviously in an attempt to get credit card numbers. Both urls and a traceroute point to theplanet.com with no host I can figure how who to send this crap to. And theplanet.com looks like a legit website (didn't click on the other one) But you guys are a lot more technically adept than I am....as is any 12 year old...Any hints on how to get them shut down or figure out why what looks to be a legitimate site is being used as a return addy and host for this? __________________ Peaches@onlinebeach.com ICQ# 36734533

03-04-2004	#2
Dravyk Easy Like Sunday Morning Want to see your own Advertising Here! Join Date: Oct 2002 Location: Behind a couch, somewhere in Philly Posts: 7,628	I'm guessing the email has a form attached? Save the email in HTML format, forward to FTC and FBI, let them click and track. __________________ All Of 'Em Mainstream Webmasters New: WebmasterConventions.com

03-04-2004	#6
Dravyk Easy Like Sunday Morning Want to see your own Advertising Here! Join Date: Oct 2002 Location: Behind a couch, somewhere in Philly Posts: 7,628	This is carder stuff not spam, Soul Rebel; unless they get info it has no function, so ... If there's not boxes and a button embedded in the email itself, there still must be a link. If it's a normal URL, it can be traced to a server. __________________ All Of 'Em Mainstream Webmasters New: WebmasterConventions.com

03-04-2004	#4
Soul_Rebel Members Join Date: Dec 2002 Posts: 82	shadowfamily.com according to google cache was a site related to carders theplanet.com is a large hosting co. that used to host a large amount of spammers in the past. Probably someone is getting a lame revenge. I haven't seen the email headers, but i'm very sure it relies on proxies. Close to impossible to trace who really sends it. It has been happening for some time now if you check the usenet i would say just delete it

03-04-2004	#7
chodadog Members Join Date: Dec 2003 Posts: 372	Probably just a spammer trying to create some heat for theplanet.com They're the same guys that are with MatrixServers.com, yeah? Or at the very least, i think matrix resell for them. Unbelievable prices. A guy let me check out his server with SSH. It really is all premium bandwidth, upstream and downstream. Couldn't find any cogent on any trace routes.

03-04-2004	#8
Dice Members I'm new! Join Date: Nov 2003 Posts: 3	Looks like a joe job, theplanet.com is a legit host.