|
Little more info.. The redirection only occurs if the referer is for my site (if they were submitted to my site). Faking the language doesn't redirect, it needs a proxy which means they're using GEO IP.
The page chhits redirects to also tries to load a video codec.. it probably has something bad in it. It's located on
69.50.160.60 v-codec [dot] com [email: dep@sexpicsporn [dot] com]
72.9.224.194 chhits [dot] com [email: willy@westpix [dot] net] (email domain doesn't seem to exist)
72.9.224.198 sexvideosbank [dot] com [email: dep @ sexpicsporn.com]
The redirection sequence will also sometimes go to
72.9.224.194 lust-movies.net [email: fom @ fhgstr.com]
69.50.171.150 fhgstr.com [eamil: info @ yourfreevids.com]
209.200.42.152 yourfreevids.com [email: tinnet @ regdoor.com]
yourfreevids.com nameserver is todaysfreevideo.com
209.200.42.150 todaysfreevideo.com [eamil: tinnet @ regdoor.com]
69.50.171.150 regdoor.com [email: mag @ sexpicsporn.com]
209.200.153.152 sexpicsporn.com parked at sedo info hidden by Domains by Proxy,
NetRange: 209.200.0.0 - 209.200.63.255 -> Webair Internet Development Inc
InterCage, Inc. INTERCAGE-NETWORK-GROUP (NET-69-50-160-0-1)
69.50.160.0 - 69.50.191.255
William Lu LUWILLIAM (NET-69-50-171-0-1)
69.50.171.0 - 69.50.171.255
|