Dialer and viruses in stolen galleries
 

I just checked my stats from paid spots on thehun and worldsex and found out that somebody had copied my gallery but left my refcode in the ads. That was suspicious so I checked out the galleries and found out that he doesn´t link to the movieclips but to a dialer and trojan software. Does anybody know who owns the domain?

http://pleasure-porn.net/ronne/1419836110/1/?id=1114

DO NOT click the movie thumbs because they will start an *.exe which tries to install a trojan and a dialer!

Registration Service Provided By: ESTDOMAINS INC
Contact: +1.3027224217
Website: http://www.estdomains.com

Domain Name: PLEASURE-PORN.NET

Registrant:
Daniel Astuto ()
9 Lianne Dr
Rochester
NY,14626-5109
US
Tel. +1.72095141

Expiration Date: 2007-10-10
Creation Date: 2006-10-10
Last Update Date: 2006-10-10

Name Servers:
****ns1.adultloan.net
****ns2.adultloan.net

IP Address: 64.28.178.196

IP hosts 8 domains:

adultloan.net
adultsea.net
comp-porn.com
engineporn.com
lineporn.net
pleasure-porn.net
seek-porn.net
shopporn.net

thank´s Simon, but the whois is fake. I looked it up of course and he´s hosting at cernel.net, but I never heard of them before. So using my refcode in the links maybe the sponsor will associate me with this trojan crap. I already dropped them an e-mail but I hoped to shot the sites myself... maybe too naive...

That's what I get for cutting and pasting without reading it again. Originally I had a note on the bottom saying the whois looks fake and estdomains isn't a good sign, and that I was sticking the other domains there in case any of them rang a bell for someone.

Btw, this info is on the Cernel site:
23404 W. Lyons Ave #223
Santa Clarita, CA
91321, USA
Phone: +1-661-347-0577

Also uses tradefinda.net as nameserver - no website there