06-25-2009
|
#1 (permalink) |
|
Guest
Posts: n/a
|
Twitter bot spamming spy harvesting website
xyz305, xyz308 and such are spamming tweets (promising to tell about Tor/anonymous email/Neda) which redirect from bit.ly to http://www.r.ieves.com/b1.aspx and http://www.r.ieves.com/a1.aspx
Presumably, these are websites harvesting information about Iranian users. WHOIS information for ieves.com : [Querying whois.internic.net] [Redirected to whois.tucows.com] [Querying whois.tucows.com] [whois.tucows.com] Registrant: William Freeman 2 Savoy Crt Kingaroy, QLD 4610 AU Domain name: IEVES.COM Administrative Contact: Freeman, William joenobody@lizzy.com.au 2 Savoy Crt Kingaroy, QLD 4610 AU +61.41623438 Technical Contact: Freeman, William joenobody@lizzy.com.au 2 Savoy Crt Kingaroy, Queensland 4610 AU +61.0741623438 Registration Service Provider: Easy CGI, support@easycgi.com 866-327-9244 EasyCGI This company may be contacted for domain login/passwords, DNS/Nameserver changes, and general domain support questions. Registrar of Record: TUCOWS, INC. Record last updated on 13-May-2009. Record expires on 03-Sep-2009. Record created on 03-Sep-2006. Registrar Domain Name Help Center: Tucows Domain Name Help Center Domain servers in listed order: NS2.JJPUTX.COM NS1.JJPUTX.COM Domain status: clientTransferProhibited clientUpdateProhibited |
    
|
|
06-25-2009
|
#2 (permalink) |
|
Guest
Posts: n/a
|
warning (qpr313, qpr314)
qpr313 (qpr313) on Twitter
qpr314 (qpr314) on Twitter qpr315 (qpr315) on Twitter qpr316 (qpr316) on Twitter seems to be government agents tracking ip's, be careful |
|
|
|
06-25-2009
|
#3 (permalink) | |
|
Moderator
Join Date: Jun 2009
Posts: 293
|
Quote:
Last edited by Jaymax; 06-25-2009 at 01:43 PM. |
|
|
|
|
06-25-2009
|
#4 (permalink) | |
|
Guest
Posts: n/a
|
It's indirect link!
Quote:
Tor (anonymity network) - www.information.is-the-coolest.com Tor (anonymity network) - www.information.is-the-coolest.com Why would they do that other than to collect IP addresses? Regards, Ali |
|
|
|
|
06-25-2009
|
#7 (permalink) | |
|
Moderator
Join Date: Jun 2009
Posts: 293
|
Quote:
eg: Scientology - www.information.is-the-coolest.com The site is just pulling down any Wikipedia content and putting Google ads next to it - most likely just a money making scam. |
|
|
|
|
|
06-25-2009
|
#8 (permalink) |
|
Guest
Posts: n/a
|
It hits "ieves.com" first before is-the-coolest.com
It goes to www.r.ieves.com/a1.aspx before going to the Welcome To www.information.is-the-coolest.com site.
|
|
|
|
06-25-2009
|
#9 (permalink) |
|
Senior Member
Join Date: Jun 2009
Location: Raleigh, NC
Posts: 196
|
New Bots qpr321
qpr321: #IranElection Tehran Mousavi Iran #neda Neda - How to bypass Internet blocking ... - http://r.ieves.com/a1.aspx
|
|
|
|
 |
| Tags |
| agents, basij, bot, governmentcontrolled, harvesting, qpr313, qpr314, spamming, spy, twitter, warning, website |
«
Previous Thread
|
Next Thread
»
| Thread Tools | |
| Display Modes | |
Linear Mode
|
|
All times are GMT. The time now is 05:20 PM.
