Hello Anatoliy

typing "www.s.vnn.vn.com" brings you to what looks like an e-mail service company: "http://s.vnn.vn/webmail/login.php". nut i have no clue what language that is.

Update:

WhoIs for "vn.com" cmes up with Registrant:
Pasa & Pasa
601 Van Ness Ave #E-841
San Francisco, CA 94102
US



>My web site "Using Win32 Functions in Visual FoxPro" offers paid content available through subscription.
>
>Yesterday I had a subscriber, who paid with credit card on name of Carol Kim from Cali, Indiana, USA. Email carolkim@s.vnn.vn -- is it Vietnam?
>
>Today this subscriber has been connecting, most of them practically simultaneously, from at least 14 IP addresses located in so distant areas as Urugway, Taiwan, Korea, St.Louis and Iran:
>130.158.65.240
>192.150.249.88
>200.40.181.14
>210.104.221.97
>200.164.78.26
>200.207.163.224
>200.40.181.14
>200.54.164.75
>200.74.132.190
>210.104.221.97
>211.23.17.18
>211.248.96.195
>213.233.160.4
>213.89.107.111
>24.247.180.72
>61.238.157.142
>63.164.60.12
>81.56.96.121
>
>So what can it be?
>(1) Someone who's able to forge IP addresses?
>(2) Someone who has "enslaved" set of computers around the world
>(3) A group of FoxPro developers a.k.a. hackers
>(4) Real Carol Kim :)
>
>Doesn't it look strange? Any ideas? Except informing the online payment service which I'm going to do asap.