Can you believe this spammer?

[mole]

Just got this spam.

Hello, let me introduce my website www.carderplanet.net. My site is one
of the best known in the world. On my site you can buy stolen credit
cards of American, European, Australian, and Asian people. Also, for
money we can search social security numbers, give stolen/hacked Paypal
accounts, ebay accounts, bank accounts, and many other items. Also we
have links to people who sell various drugs. Also our services include
custom-made fake passports, novelty ID's, and cloned credit cards.
There are also many pages of how to use these items to make the most
profits for you. Credit reports for any USA citizen can be bought,
along with dumps (magnetic stripe infoz from CC's) and hacking tools.
These are the best in the world and we offer the best prices for our
buyers!

 

[TexasFilly]

Thanks for the post. I will be looking into their operations & report these folks to the card payment banking authorities.

Again, thanks for the post mole.

 

[mole]

You from the FBI, filly?

Here's the spam tracking information

--- Original Message Headers ---
Received: from anon [67.17.180.228] by munged
(SMTPD32-7.12) id AC8EE500C0; Mon, 03 Feb 2003 10:36:46 -0500
From: Script4cc<[email protected]>
Subject: The best site about credit card Fraud - www.carderplanet.net
Reply-To: [email protected]
X-Priority: 1
X-MSMail-Priority: High
Organization: carderplanet
X-Mailer: The Bat! (v1.52f) Business
Mime-Version: 1.0
Content-Type: text/plain; charset="Windows-1250"
Date: Mon, 3 Feb 2003 10:36:46 -0500
Message-Id: <200302031036754.SM01084@anon>
X-RCPT-TO: <munged>
Status: U
X-UIDL: 340383528


Here's the Spamcop technical trace.

Parsing header:

Received: from anon [67.17.180.228] by ____ (SMTPD32-7.12) id AC8EE500C0; Mon, 03 Feb 2003 10:36:46 -0500
Possible spammer: 67.17.180.228
Taking name from IP...
host 67.17.180.228 (getting name) no name
Received line accepted


Tracking message source: 67.17.180.228:
Routing details for 67.17.180.228
[refresh/show] Cached whois for 67.17.180.228 : [email protected]
Using abuse net on [email protected]
abuse net gblx.net = [email protected]
Using best contacts [email protected]
Yum, this spam is fresh!
67.17.180.228 not listed in formmail.relays.monkeys.com
67.17.180.228 not listed in proxies.relays.monkeys.com
67.17.180.228 not listed in relays.ordb.org.
67.17.180.228 not listed in query.bondedsender.org


Resolving link obfuscation
http://www.carderplanet.net
host 66.252.11.5 (getting name) no name


Found link: http://www.carderplanet.net
[report history]


Tracking ip 66.252.11.5
Routing details for 66.252.11.5
[refresh/show] Cached whois for 66.252.11.5 : [email protected] [email protected]
Using abuse net on [email protected]
abuse net foonet.net = [email protected], [email protected]
Using best contacts [email protected] [email protected]


Please make sure this email IS spam:
From: Script4cc<[email protected]> (The best site about credit card Fraud - www.carderplanet.net)
--- End Original Message Headers ---
--- Original Message ---
View full message



Report Spam to:


Re:67.17.180.228 (Administrator of network where email originates)
To: [email protected] (Notes)

Re:http://www.carderplanet.net (Administrator of network hosting website referenced in spam)
To: [email protected] (Notes)
To: [email protected] (Notes)

 

[TexasFilly]

I deal with the FBI frequently, due too our International Merchant services.. and this is valid worthy info which the banking industry needs.
Thankyou

 

[TexasFilly]

What "language" is that site designed in? I can't read it. Any translators here?

 

[TexasFilly]

For the record, here's the owner "who is" raw data:

Organization:
My Family Inc
Ivan Zahuryev
1704-77st., apt. 4b
brooklyn, NY 11214
US
Phone: (718) 236-6791
Email: [email protected]

Registrar Name....: Register.com
Registrar Whois...: whois.register.com
Registrar Homepage: http://www.register.com

Domain Name: CARDERPLANET.NET

Created on..............: Sun, Jul 07, 2002
Expires on..............: Wed, Jul 07, 2004
Record last updated on..: Fri, Jan 24, 2003

Administrative Contact:
My Family Inc
Ivan Zahuryev
1704-77st., apt. 4b
brooklyn, NY 11214
US
Phone: (718) 236-6791
Email: [email protected]

Technical Contact:
My Family Inc
Ivan Zahuryev
1704-77st., apt. 4b
brooklyn, NY 11214
US
Phone: (718) 236-6791
Email: [email protected]

Zone Contact:
My Family Inc
Ivan Zahuryev
1704-77st., apt. 4b
brooklyn, NY 11214
US
Phone: (718) 236-6791
Email: [email protected]

Domain servers in listed order:

NS7.ZONEEDIT.COM 207.228.252.107
NS14.ZONEEDIT.COM 209.126.159.80

?? can anyone translate that site for me?

 

[com]

Ivan Zahuryev - yeah, the russian boys in brooklyn are known for this stuff. Trust me, i'm russian-born, i know. Dont let this give you a bad impression of russians though. There are always idiots in every part of the world.

 

[Jack Gordon]

So how does one pay for their services... with a credit card???????

Ummm... ok. Let me just get the number out....

 

[com]

Originally posted by TexasFilly
can anyone translate that site for me?

Here you go, front page:

Hello, you are now at www.carderplanet.com

This site is dedicated to exploring security holes in both online businesses and the banking industry in general. The information contained here should be beneficial to the above mentioned industries as we locate and help analyze existing security flaws. We opened on may 31st 2001 and managed to take our place in the leading community recognized websites dealing with security issues. Our group is divided into members, each dealing with a specific area of security. We welcome you to visit our forums,

blah blah blah, nothing interesting...

Fineprint is saying: Warning: all material contained on this website is intended for ediucational purposes only, etc.

All in all, looks like the standard lame attmept to cover a hacker's hideout.

As you go through the menu, one section contains a flashing gif which is saying "carder members steal everything".


WOW... holy crap, the forums are serious shit! There are ads placed by forum members selling people's SSNs, credit card numbers, even eBay account info with usernames and passwords! They sell passports, documents, visas, birth certs, diplomas, etc. Jesus...

Motherf@#kers! If anyone here has real links in the justice dept or the FBI, i think they have to take a good look at this website. I can translate everything if you need me... Looks serious.

 

[TexasFilly]

Originally posted by Point8T



Fineprint is saying: Warning: all material contained on this website is intended for ediucational purposes only, etc.


WOW... holy crap, the forums are serious shit! There are ads placed by forum members selling people's SSNs, credit card numbers, even eBay account info with usernames and passwords! They sell passports, documents, visas, birth certs, diplomas, etc. Jesus...

Motherf@#kers! If anyone here has real links in the justice dept or the FBI, i think they have to take a good look at this website. I can translate everything if you need me... Looks serious.

Thankyou Point8T
I will be in touch by email.

Sincerely

 

[domainAddict]

Theyll do shit.

 

[com]

Could be... the servers might be outside the U.S. the domain registrant is here though, and trust me, with such a website, he will get a call, at least. He could say he is leasing the domain and get off that way, but he will be asked to terminated the lease and disconnect the domain.

 

[RON2]

Seriously,the links to this site should be removed from this forum. There's no reason that DNForum should be a resource to find potential credit card, password and software theives.

 

[TexasFilly]

Originally posted by Point8T
Could be... the servers might be outside the U.S. the domain registrant is here though, and trust me, with such a website, he will get a call, at least. He could say he is leasing the domain and get off that way, but he will be asked to terminated the lease and disconnect the domain.

NewYork server location:

Registrant:
ZoneEdit, Inc.
111 Broadway
11th Floor
New York, NY 10006
US

Domain Name: ZONEEDIT.COM

Administrative Contact:
Aronesty, Erik [email protected]
111 Broadway
11th Floor
New York, NY 10006
US
212-271-1934
Fax: 212-271-1934

Technical Contact:
Aronesty, Erik [email protected]
111 Broadway
11th Floor
New York, NY 10006
US
212-271-1934
Fax: 212-271-1934



Registrar of Record: TUCOWS, INC.
Record last updated on 14-Jan-2003.
Record expires on 17-May-2004.
Record Created on 17-May-2000.

Domain servers in listed order:
NS1.ZONEEDIT.COM 207.228.252.101
NS2.ZONEEDIT.COM 65.125.228.66
NS3.ZONEEDIT.COM 209.61.140.1
NS4.ZONEEDIT.COM 216.98.150.236

 

[Ed30]

I think RJ is right - although it's good to point out what's going on I don't think this info should be hanging around here for too much longer.

 

[BGray]

WTF?

The nerve of some people.
One of the most idiotic things I've ever seen!

 

[.com.net.org]

Quick action has been taken, I got this message :

"This site is under investigation for spam complaints."