[Hidden-tech] Web URL hijack

David Ruderman david.ruderman at gmail.com
Tue Nov 6 15:44:47 EST 2007


Jim,

Actually those two 'bogus' domain names are registered to you. Perhaps you
set this up long ago. Like Chris below, the work for me.

I suspect you may have some adware running on your machine and your browser
may be compromised. You should run something like 'ad-aware' on your machine
and make sure it's behaving well.

Those two URLs behave like redirects which can be done in your DNS entry.

Running 'whois' on those domains you mentioned return info similar to this:
	
Domain name: national-wireless.com

Registrant Contact:
   NA
   Ussailis Engineering (lleifert at conquestconsulting.com)
   NA
   Fax: 
   221 Pine Street
   Suite 1G3
   Florence, MA 01062
   US

Meanwhile rf-wireless.com is registered here:

Registrant Contact:
   CONQUEST CONSLTING LLC
   Lance Leifert (LLEIFERT at CONQUESTCONSULTING.COM)
   +1.5555555555
   Fax: +1.5555555555
   P.o. Box 416
   Avon, CT 06001
   US
 
I hope that helps.

-dave

David Ruderman

david.ruderman at gmail.com 
http://play.blogspot.com (Blog)


-----Original Message-----
From: hidden-discuss-bounces at lists.hidden-tech.net
[mailto:hidden-discuss-bounces at lists.hidden-tech.net] On Behalf Of Chris
Duncan, GISmatters
Sent: Tuesday, November 06, 2007 2:01 PM
To: ussailis at shaysnet.com
Cc: hidden-discuss at lists.hidden-tech.net
Subject: Re: [Hidden-tech] Web URL hijack

   ** The author of this post was a Good Dobee.
   ** You too can help the group
   ** Fill out the survey/skills inventory in the member's area.
   ** If you did, we all thank you.


They all 3 are identical for me when I click on the URLs you provided in
your email...  the contents are identical - only the addresses in the
browser address bar reflect the different URLs. Corresponding links on the 3
sites take me to corresponding matching pages... in short, I don't see any
hijacking going on - just 3 identical web sites at 3 similar URLs... So
perhaps your browser or your web service has been altered/"hijacked" in some
way?

Chris


ussailis at shaysnet.com wrote:
>    ** The author of this post was a Good Dobee.
>    ** You too can help the group
>    ** Fill out the survey/skills inventory in the member's area.
>    ** If you did, we all thank you.
> 
> 
> Something new to me, and perhaps something for us to watch out for...
> 
> My URL has been hijacked. There is a new site up on it
> (www.nationalwireless and www.national-wireless.com). The new site is
> strictly advertising. It pretends to be a search engine, but it only
> searchs among a limited number of advertisers.
> 
> As I understand it the "pointing" to the URL has been changed. It appears
> that www.NuSeek.com is also involved. I have found several other emails
> complaining about this.
> 
> For us that are very busy, we should take (find?) the time to check our
> websites. I have no idea how long this has been going on, nor how many
> clients I may have lost.
> 
> If any are interested, www.rf-wireless.com is a representation of my real
> site. The other two 'pointed' to this one.
> 
> Jim Ussailis
> ussailis at shaysnet.com
> ussailis at verizon.net
> 
> --------------------------------------------------------------------
> myhosting.com - Premium MicrosoftR WindowsR and Linux web and application
> hosting - http://link.myhosting.com/myhosting
> 
> 
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
> 
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members   
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members
> 

-- 
NOTE NEW STREET ADDRESS AS OF 1-DEC-2006
--

Chris Duncan, Ph.D.
President
GISmatters

duncan at GISmatters.com
http://www.gismatters.com/

1 Tuckerman Ln
Amherst, MA 01002

Tel: 413-549-2052
Fax: 508-637-2557

_______________________________________________
Hidden-discuss mailing list - home page: http://www.hidden-tech.net
Hidden-discuss at lists.hidden-tech.net

You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members   
page on the Hidden Tech Web site.
http://www.hidden-tech.net/members




Google

More information about the Hidden-discuss mailing list