|
|
|
|
||||
|
Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
 |
|
|||||||
| Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
|
Thread Tools |
02-08-2006, 03:00 AM
|
#1 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
Who's chhits.com?? Cheater? "Traffic" broker?
I often catch galleries redirecting to chhits.com. Was wondering who it is.
Found 2 new ones tonight that only showed up once I used italian proxies. boobastic.net nastyfatbabes.com The only info on GFY about chhits.com seems to be this post. http://www.gofuckyourself.com/showth...ght=chhits.com I'd post the redirect link except it goes to various sites as well as IP "sites" that appear to be trying to install something. |
|
|
|
02-08-2006, 03:09 AM
|
#2 |
|
So Fucking Banned
Industry Role:
Join Date: Feb 2001
Location: Taipei
Posts: 25,198
|
maybe specializing in the traffic from .ch
|
|
|
|
|
02-08-2006, 03:12 AM
|
#3 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
Actually one of those domains I also tied into this thread
http://www.gofuckyourself.com/showthread.php?t=572993 I'm wondering if it's the host themselves.. all those sites seem to be tied to powerpipe.com. Back when I was starting out someone hooked me up with his "friend". It was some low cost hosting for a flat fee per month for galleries... It didn't take me long to discover that the hosting guy was redirecting my galleries. |
|
|
|
|
02-08-2006, 03:31 AM
|
#4 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
http://www.google.com/search?q=%22Wi... =off&filter=0
There was a discussion on thehun as well about chhits.com |
|
|
|
|
02-08-2006, 04:06 AM
|
#5 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
|
|
|
|
|
02-08-2006, 05:16 AM
|
#6 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
Damn.. Testing out where chhits redirects with the parameters I've got.. It goes to a "gallery" which redirects to another one. This one has an iframe which goes to an IP. That one redirects once or twice until it hits a page which does more iframes and stuff.. Based on the names of some things it looks like a bunch of exploits etc. One of the things it does is related to this:
http://securitytracker.com/alerts/2005/Aug/1014727.html on exit for the gallery page, the code that's there loads one of these sites/pages. I wouldn't look at them unless you're sure you're protected. They might have something bad. Course I don't know who these are related to, I'm just saying what chhits does based on the parameters I have. With others it could be a whole new set of domains etc. yoursatisfucktion.com xmelons.com amateurcutties.com bitterporn.com asiaxxl.com lovelycock.com feelnuts.com 30to50.com shemaleslove.com thumbparade.com ebonyparade.com maturerock.com brilliant18.com takeithere.com/index.html pornstarxxl.com nastytasty.com daebony.com wowmelons.com |
|
|
|
|
02-08-2006, 05:34 AM
|
#7 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
64.71.131.111 brilliantteens.com
64.71.131.108 thumbparade.com 64.71.131.110 daebony.com 64.71.131.110 brilliant18.com 64.71.131.111 maturerock.com 64.71.131.111 nastytasty.com 64.71.131.112 bitterporn.com 64.71.131.112 takeithere.com/index.html 64.71.131.113 pornstarxxl.com 64.71.131.114 xmelons.com 64.71.131.114 amateurcutties.com 64.71.131.114 asiaxxl.com 64.71.131.114 lovelycock.com 64.71.131.115 shemaleslove.com 66.254.105.225 wowmelons.com 66.254.105.232 30to50.com 66.254.105.235 yoursatisfucktion.com 66.254.105.237 ebonyparade.com 66.254.105.238 feelnuts.com |
|
|
|
|
02-08-2006, 06:03 AM
|
#8 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
72.9.224.194 chhits [dot] com
72.9.224.198 sexvideosbank [dot] com - DON'T GO THERE!!! Both are hosted at GNAX.NET |
|
|
|
|
02-08-2006, 06:26 PM
|
#9 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
Little more info.. The redirection only occurs if the referer is for my site (if they were submitted to my site). Faking the language doesn't redirect, it needs a proxy which means they're using GEO IP.
The page chhits redirects to also tries to load a video codec.. it probably has something bad in it. It's located on 69.50.160.60 v-codec [dot] com [email: dep@sexpicsporn [dot] com] 72.9.224.194 chhits [dot] com [email: willy@westpix [dot] net] (email domain doesn't seem to exist) 72.9.224.198 sexvideosbank [dot] com [email: dep @ sexpicsporn.com] The redirection sequence will also sometimes go to 72.9.224.194 lust-movies.net [email: fom @ fhgstr.com] 69.50.171.150 fhgstr.com [eamil: info @ yourfreevids.com] 209.200.42.152 yourfreevids.com [email: tinnet @ regdoor.com] yourfreevids.com nameserver is todaysfreevideo.com 209.200.42.150 todaysfreevideo.com [eamil: tinnet @ regdoor.com] 69.50.171.150 regdoor.com [email: mag @ sexpicsporn.com] 209.200.153.152 sexpicsporn.com parked at sedo info hidden by Domains by Proxy, NetRange: 209.200.0.0 - 209.200.63.255 -> Webair Internet Development Inc InterCage, Inc. INTERCAGE-NETWORK-GROUP (NET-69-50-160-0-1) 69.50.160.0 - 69.50.191.255 William Lu LUWILLIAM (NET-69-50-171-0-1) 69.50.171.0 - 69.50.171.255 |
|
|
|
|
02-08-2006, 06:36 PM
|
#10 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
 A google search for Willian Lu brought up this page http://www.whois.sc/spy-sheriff.com 69.50.170.82 spy-sheriff.com InterCage, Inc. INTERCAGE-NETWORK-GROUP (NET-69-50-160-0-1) 69.50.160.0 - 69.50.191.255 William Lu STANDARDSHELLS (NET-69-50-170-0-1) 69.50.170.0 - 69.50.170.255 searching for spy sherrif brought out this http://www.adwarereport.com/mt/archives/000253.html |
|
|
|
|
02-08-2006, 07:01 PM
|
#11 |
|
Too lazy to set a custom title
Industry Role:
Join Date: May 2004
Location: West Coast, Canada.
Posts: 10,217
|
Apparently the guy Emil Kacperski (owner of Intercage) is heavily associated with spyware, spammers etc.
http://www.thebishop.net/geodog/arch...e_helpers.html http://www.theregister.co.uk/2003/06...yberspace_land http://www.dslreports.com/forum/rema...22530~expand=1 http://blogs.zdnet.com/Spyware/?p=763 |
|
|
|
