Analyzing TOR-exitnodes for anomalies
    Claude LaFrenière 
    climenole at gmail.com
       
    Thu Oct  5 15:29:22 UTC 2006
    
    
  
Hi  *Alexander W. Janssen*   :
Got it !
I was going to this web site: http://www.iamaphex.net
(This is the web site for Torcap, a program to socksify application in Windows O.S.)
with the exit node exit node: whistlermother
Info: http://node2.xenobite.eu/torstat.php
1195  	whistlersmother  	204.13.236.244  	US  	[X]  	9001  	0  	
Running Yes /	Guard  Yes / Authority  No / Fast  Yes /	Exit  Yes /	Stable  Yes / Valid  Yes / V2Dir No
http://serifos.eecs.harvard.edu/cgi-bin/exit.pl?textonly=1
US *whistlersmother     204.13.236.244
Exit policies: 22   53   80  110    -  143  443 5190 6667
I got this:
http://www.iamaphex.net/frame.aspx?u=http%3a%2f%2flanding.domainsponsor.com%3fa_id%3d1637%26domainname%3diamaphex.net%26adultfilter%3doff%26popunder%3doff&r=SUSPECTED+UNDESIRABLE+BOT
I found no information on that "flanding.domainsponsor.com" ...
With the exit node l3cht3rn3t3 I got this:
Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrqWbKjxa
The link in the botton of the page is an email address: 
info at whois-help.info  
With this automatic email object :"Inquiring about the domain 'iamaphex.net', with status: CustomVIP"
With the exit node waabbeel I got this:
Picture (remain avalaible for 504 hours)
http://cjoint.com/?kfrydRFG6Q
and the link on the page is for a web sites hosting:
https://www.1blu.de/start.php
With the exit node s3j3gm I got the same site...
and so on...
May be the problem comes from Web sites host server and their "sponsors"...
Looks like a "security filter" ...  :-\
So the problem seems to be related to web hosting not the exit nodes...
:)
-- 
Claude LaFrenière   
    
    
More information about the tor-talk
mailing list