[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Analyzing TOR-exitnodes for anomalies
Hi *Alexander W. Janssen* :
Got it !
I was going to this web site: http://www.iamaphex.net
(This is the web site for Torcap, a program to socksify application in Windows O.S.)
with the exit node exit node: whistlermother
Info: http://node2.xenobite.eu/torstat.php
1195 whistlersmother 204.13.236.244 US [X] 9001 0
Running Yes / Guard Yes / Authority No / Fast Yes / Exit Yes / Stable Yes / Valid Yes / V2Dir No
http://serifos.eecs.harvard.edu/cgi-bin/exit.pl?textonly=1
US *whistlersmother 204.13.236.244
Exit policies: 22 53 80 110 - 143 443 5190 6667
I got this:
http://www.iamaphex.net/frame.aspx?u=http%3a%2f%2flanding.domainsponsor.com%3fa_id%3d1637%26domainname%3diamaphex.net%26adultfilter%3doff%26popunder%3doff&r=SUSPECTED+UNDESIRABLE+BOT
I found no information on that "flanding.domainsponsor.com" ...
With the exit node l3cht3rn3t3 I got this:
Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrqWbKjxa
The link in the botton of the page is an email address:
info@xxxxxxxxxxxxxxx
With this automatic email object :"Inquiring about the domain 'iamaphex.net', with status: CustomVIP"
With the exit node waabbeel I got this:
Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrydRFG6Q
and the link on the page is for a web sites hosting:
https://www.1blu.de/start.php
With the exit node s3j3gm I got the same site...
and so on...
May be the problem comes from Web sites host server and their "sponsors"...
Looks like a "security filter" ... :-\
So the problem seems to be related to web hosting not the exit nodes...
:)
--
Claude LaFrenière