[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Analyzing TOR-exitnodes for anomalies



Hi  *Alexander W. Janssen*   :

Got it !

I was going to this web site: http://www.iamaphex.net
(This is the web site for Torcap, a program to socksify application in Windows O.S.)
with the exit node exit node: whistlermother

Info: http://node2.xenobite.eu/torstat.php
1195  	whistlersmother  	204.13.236.244  	US  	[X]  	9001  	0  	

Running Yes /	Guard  Yes / Authority  No / Fast  Yes /	Exit  Yes /	Stable  Yes / Valid  Yes / V2Dir No

http://serifos.eecs.harvard.edu/cgi-bin/exit.pl?textonly=1
US *whistlersmother     204.13.236.244
Exit policies: 22   53   80  110    -  143  443 5190 6667

I got this:

http://www.iamaphex.net/frame.aspx?u=http%3a%2f%2flanding.domainsponsor.com%3fa_id%3d1637%26domainname%3diamaphex.net%26adultfilter%3doff%26popunder%3doff&r=SUSPECTED+UNDESIRABLE+BOT

I found no information on that "flanding.domainsponsor.com" ...

With the exit node l3cht3rn3t3 I got this:

Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrqWbKjxa
The link in the botton of the page is an email address: 
info@xxxxxxxxxxxxxxx  
With this automatic email object :"Inquiring about the domain 'iamaphex.net', with status: CustomVIP"


With the exit node waabbeel I got this:
Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrydRFG6Q

and the link on the page is for a web sites hosting:
https://www.1blu.de/start.php

With the exit node s3j3gm I got the same site...

and so on...

May be the problem comes from Web sites host server and their "sponsors"...
Looks like a "security filter" ...  :-\

So the problem seems to be related to web hosting not the exit nodes...

:)
-- 
Claude LaFrenière