[tor-talk] Warning: 255 fake and booby trapped onion sites

[grarpamp]

On Mon, Jun 29, 2015 at 7:40 PM, Geoff Down <geoffdown at fastmail.net> wrote:
> also. They're not actually exiting from 185.77.129.189, but from
> 46.166.137.219 .

Now 46.166.190.216.

What I want to know is why they're burning double cash
routing their OR traffic back out over a VPN in a different AS.

Unlike adverts, DNS and GFW weirdness, for exits caught in
obviously intentional login-sniffing or injecting malness
like this, consider reporting them to the abuse contacts
as well. That will remove the box, not just the popup OR key.