Author Topic:  (Read 4449 times)

0 Members and 1 Guest are viewing this topic.

August 24, 2009, 09:45:40 pm
Read 4449 times


  • Sr. Member

  • Offline
  • ****

  • 179
User's URLs Posted To here. List of links/sites come back:

Also seeing inside of the responses coming back.

Hijacked links clicked on randomly get redirected to these sites and ultimately to their destination:

Weird sites that come back as part of URL's to

If you try to go to any of these domains, you are redirected to (heh). All of these domains resolve to

There are probably a lot more of these types of sites.

Lastly, there is some SSL connections going out to over HTTPS using a fake ssl certificate. I am looking into this a bit more tomorrow, but if you see any connections back to this IP, you are infected.