full-disclosure - [Fwd: Re: montspace -- child porn (site still up)]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4443E201.3080004@csuohio.edu>
Date: Mon Apr 17 19:45:45 2006
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: [Fwd: Re: montspace -- child porn (site still
	up)]

> And how long did it take that mole to pop back up?  Tompa.com is already
> back on the air.  Montspace.com is not back up yet, but that was just
> a sacrificial feeder domain.  If you did not check it out before it
> went down, montspace pretended to be a child-porm site, but all the
> links there went to Viagra ads on tompa.org.

Actually, it looks like they yanked it. This is the first link from the 
montspace code (I'm not about to try this in a GUI browser).

host tonpa.com
tonpa.com has address 80.77.85.104

wget -O - "http://80.77.85.104/in_traff.php&link=gal&s=30&first=1" 
--header "Host: tonpa.com" -U "Mozilla/5.0 (Windows; U; Windows NT 5.1; 
en-US; rv:1.7.12) Gecko/20050915"
--14:42:24--  http://80.77.85.104/in_traff.php&link=gal&s=30&first=1
            => `-'
Connecting to 80.77.85.104:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
14:42:24 ERROR 403: Forbidden.

/mike.