| Author |
Message |
xwild
Joined: 01 Nov 2006
Posts: 576
Rank: 35
|
 Posted: 17 Jul 2007 04:09 Post subject: New Cheaters found |
 |
|
exoticpornstar.info = to many proxys 50%
Also reported www.joker.com and it sites in the network
trojans and spyware found in all the sites found.
Your Amigo Xwild!.. |
|
| Back to top |
|
Verbal
Joined: 30 May 2007
Posts: 22
|
| Posted: 18 Jul 2007 22:36 Post subject: |
|
|
Hi xwild,
Are most sites registered through joker.com scammers or something?
I ask b/c I just approved two trades that use joker.com because when I checked them here on protect-x they both said "good trade" or "clean trade" so I added them.
videosfarmer.com
wildthumbnails.com
They weren't found in the system base or any blacklists - do you think these are legit?
Thanks very much,
Verbal |
|
| Back to top |
|
rhino
Joined: 23 Dec 2006
Posts: 70
Rank: 12
|
|
| Back to top |
|
max
Joined: 18 Oct 2006
Posts: 538
Rank: 38
|
|
| Back to top |
|
Lion
Joined: 30 Apr 2007
Posts: 4
|
|
| Back to top |
|
xwild
Joined: 01 Nov 2006
Posts: 576
Rank: 35
|
| Posted: 19 Jul 2007 14:58 Post subject: |
|
|
New Cheater Found
your number 1 trade crazyteenies.com is redirecting to trojan sites.
please remove them.
thank you! |
|
| Back to top |
|
rhino
Joined: 23 Dec 2006
Posts: 70
Rank: 12
|
| Posted: 19 Jul 2007 18:54 Post subject: |
|
|
| rhino wrote: | wildthumbnails.com was added to cheaterhell.com on July 14 (for hitbots).
Let's say that a site with a commercial copy of ST5 (no link back to smart-scripts), free ATL3 script installed in the ATX default script path, domain registered through joker.com, and using A.NS.JOKER.COM, B.NS.JOKER.COM, and C.NS.JOKER.COM should be watched very closely.
Just my opinion... YMMV.
Rhino |
Seems it's more then just my opinion as it's now been confirmed by multiple sources. These sites, all fitting the "profile" as outlined above are hitbot cheaters and/or redirect to adultlisting.info... and continue to force bot traffic long after any trade has been killed.
reallycurves.com
hornymaniac.com
wildthumbnails.com
twinksinvids.com
Also add to the profile that they may use fake nic info on the trade signup page to appear as part of a large/recognized/legitimate trade network. That one got me as I got complacent and didn't check as closely when I saw a nic I recognized.
I haven't been able to confirm videosfarmer.com (not yet anyway), but would suggest it's just a matter of time as it EXACTLY fits the profile.
One additional note... ALL OF THESE SITES DISPLAY AS GOOD OR CLEAN WHEN CHECKED WITH THE PROTECT-X BULK TRADE CHECK TOOL. 
All I can say is WTF next?
Rhino |
|
| Back to top |
|
Protect-X Support
Joined: 30 Oct 2006
Posts: 934
Rank: 35
|
| Posted: 20 Jul 2007 13:02 Post subject: |
|
|
| rhino wrote: | | ALL OF THESE SITES DISPLAY AS GOOD OR CLEAN WHEN CHECKED WITH THE PROTECT-X BULK TRADE CHECK TOOL |
as i mentioned many times before, our system checks traffic that traders send to OUR MEMBERS, and status of each site based on traffic quality ONLY. So if they listed as "Good", "Clean" - they send good quality traffic in Protect-X system (maybe fear to send hitbots to be detected). Besides:
- 4 of 7 sites are listed in Users Blacklist
- one site have Bad Trade status and one - Check Trade status currently
Soon we plan to make our site check algorithm more complex and add redirect, iframe, link quality, trojans and spyware detection to the options we already have in Protect-X system. All advices would be appreciated.
_________________
Free A-B-C-D Hard Links Exchange Automatic System:
http://www.protect-x.com/index.php?go=shardlinks
Visit other Protect-X sections:
Find/Add NEW SPONSORS:
http://www.protect-x.com/index.php?go=findsponsors |
|
| Back to top |
|
rhino
Joined: 23 Dec 2006
Posts: 70
Rank: 12
|
| Posted: 20 Jul 2007 18:19 Post subject: |
|
|
| Protect-X Support wrote: |
as i mentioned many times before, our system checks traffic that traders send to OUR MEMBERS, and status of each site based on traffic quality ONLY. So if they listed as "Good", "Clean" - they send good quality traffic in Protect-X system (maybe fear to send hitbots to be detected). Besides:
- 4 of 7 sites are listed in Users Blacklist
- one site have Bad Trade status and one - Check Trade status currently
Soon we plan to make our site check algorithm more complex and add redirect, iframe, link quality, trojans and spyware detection to the options we already have in Protect-X system. All advices would be appreciated. |
I expect you're exactly right and it's something to do with who they send the traffic to, and what % of bot traffic they send to each trade. Its just annoying to see sites that display on a Protect X bulk search as good trades with "not found" in your base or in System BL and are listed in the User BL. FWIW, the trade script on the attacked sites didn't catch it either...
I am curious as to how a site can display as clean or good with Not Found in your base, System BL, and User BL? Wouldn't those show as Unverified?
FWIW, I've added the Class C ranges for the joker.com sites to my iptables. Good luck with adding the additional site checking & verification on your end.
Rhino |
|
| Back to top |
|
Protect-X Support
Joined: 30 Oct 2006
Posts: 934
Rank: 35
|
| Posted: 21 Jul 2007 11:00 Post subject: |
|
|
| rhino wrote: | | I am curious as to how a site can display as clean or good with Not Found in your base, System BL, and User BL? Wouldn't those show as Unverified? |
Simple explanation: that site send traffic to protect-x members, we detect this hits and give site an appropriate status. To be verified it is not necessary to be a member of Protect-X as well as unverified site can be a member of Protect-X (due to lack of traffic sent to Protect-X members).
_________________
Free A-B-C-D Hard Links Exchange Automatic System:
http://www.protect-x.com/index.php?go=shardlinks
Visit other Protect-X sections:
Find/Add NEW SPONSORS:
http://www.protect-x.com/index.php?go=findsponsors |
|
| Back to top |
|
|
|
|
|
|
|
|
|
