Author Topic: xverify.net?  (Read 3608 times)

0 Members and 1 Guest are viewing this topic.

July 07, 2010, 05:04:34 pm
Read 3608 times

cr4shm0ney

  • Jr. Member

  • Offline
  • **

  • 27
Can anyone find anything about this site or URL?

Code: [Select]
xverify.net
xverify.net/ts/pse1rndx5f677119717x5fx5ftimx5f1277466878x5fx5ft

July 07, 2010, 08:32:56 pm
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Full URL it's seen to be using;

Code: [Select]
http://xverify.net/ts/pse1rndx5f586653692x5fx5ftimx5f1275420393x5fx5ftv2nspidx5fceadafngjficgecddfpedene/pse1/blank.gif?
I'm still gathering data to determine the what and who.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 07, 2010, 08:42:39 pm
Reply #2

cr4shm0ney

  • Jr. Member

  • Offline
  • **

  • 27
Interesting, How did you get the full url? Let me know if you find anything on this.

Thanks,
cr4sh

July 07, 2010, 09:09:28 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
The full URL was found courtesy of several log files, such as this one;

200.230.217.2/mysar/index.php?a=allsites&date=2010-06-09

Can you tell me where you found this site btw?
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 07, 2010, 09:18:48 pm
Reply #4

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Just an FYI btw, the site is sitting on 3 IP's, one of which is JustHost, which is a SingleHop customer that generates alot of abuse reports. The IPs if you want them;

208.100.21.154 <-- SteadFast
67.228.221.10 <-- SoftLayer (surprise surprise)
69.175.67.130 <-- JustHost (SingleHop customer)

Checking with a third party DNS util (DomainTools), also shows a connection to 81.21.76.62, but I'm not seeing that in the A records being returned, so not sure if DT has a stale record.

Other domains xverify.net is related to include;

jdproject.net
mockupdata.com
simpleprojecttodo.com

I'm still looking into these.

/edit

Corrected typo
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net