xverify.net?

[cr4shm0ney]

Can anyone find anything about this site or URL?

Code: [Select]

xverify.net
xverify.net/ts/pse1rndx5f677119717x5fx5ftimx5f1277466878x5fx5ft

[MysteryFCM]

Full URL it's seen to be using;

Code: [Select]

http://xverify.net/ts/pse1rndx5f586653692x5fx5ftimx5f1275420393x5fx5ftv2nspidx5fceadafngjficgecddfpedene/pse1/blank.gif?
I'm still gathering data to determine the what and who.

[cr4shm0ney]

Interesting, How did you get the full url? Let me know if you find anything on this.

Thanks,
cr4sh

[MysteryFCM]

The full URL was found courtesy of several log files, such as this one;

200.230.217.2/mysar/index.php?a=allsites&date=2010-06-09

Can you tell me where you found this site btw?

[MysteryFCM]

Just an FYI btw, the site is sitting on 3 IP's, one of which is JustHost, which is a SingleHop customer that generates alot of abuse reports. The IPs if you want them;

208.100.21.154 <-- SteadFast
67.228.221.10 <-- SoftLayer (surprise surprise)
69.175.67.130 <-- JustHost (SingleHop customer)

Checking with a third party DNS util (DomainTools), also shows a connection to 81.21.76.62, but I'm not seeing that in the A records being returned, so not sure if DT has a stale record.

Other domains xverify.net is related to include;

jdproject.net
mockupdata.com
simpleprojecttodo.com

I'm still looking into these.

/edit

Corrected typo