See this IDS alert on a urlquery scan result for a site involved in Yahoo spam content:
http://urlquery.net/report.php?id=117837
What is this rule alerting to?
Both co.cc and t.k are very scam sensitive, co.cc is blocked and .tk is not?
Well, dot.tk and .co.cc domains are two of the most abused services. (APWG Global Phishing Survey 2H2010)
Info tenhosting forum Chris S,
polonus
Update,
Likely recent detection: https://urlquery.net/report/c375b466-86d9-472f-acc2-0e19ab1b4aba
This website is insecure.
66% of the trackers on this site could be protecting you from NSA snooping. Tell odchudzanie.com to fix it.
Identifiers | All Trackers
Insecure Identifiers
Unique IDs about your web browsing habits have been insecurely sent to third parties.
-www.google.com nid
4f27576ec2715a2650614905bcabea9d wXw.odchudzanie.com phpsessid
→ http://toolbar.netcraft.com/site_report?url=http://www.odchudzanie.com
detedted vuln.: http://retire.insecurity.today/#!/scan/17bd5450377478c65f3614bb8517e0eddfdf00d7f7ef35715757ba011c1790df
Config. leak - MySQL (3306) 3306 Port open. Server response: S 5.6.31-77.0-logÇazUwz}%;=ÿ÷Å]@f`2soT5Mb(mysql_native password…
→ htx p://61661.v.tld.pl/ reverse dns says "Witamy na naszym serwerze!
Strona jeszcze nie jest gotowa… zapraszamy w przyszłości.". 7 red out of 10 web risk grade: http://toolbar.netcraft.com/site_report?url=http://61661.v.tld.pl
polonus