View Single Post
Old 09-08-2008, 15:17   #13551
pseudonym
Inactive
 
Join Date: Apr 2008
Posts: 76
pseudonym is on a distinguished roadpseudonym is on a distinguished road
Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

Quote:
Originally Posted by Dephormation View Post
I've been asked for an English explanation of that post, happy to oblige.

My interpretation is this;

The poster seems to have received spam concerning various 'controversial' topics.

When he followed links in the spam, he was taken to a site called 4everdns.com.

On the pages of 4everdns.com he found Javascript from sysip.net embedded in the pages. The script was grabbing IP addresses from visitors.

When he followed the name server details for sysip.net, he found 121 Media were responsible.

121 Media is the previous trading name of Phorm.

So to conclude...

Either
- the 'controversial' spam messages/host sites may have been linked to 121 Media
or
- there was possibly a trial of PageSense running in April 2006

Pete
archive.orgs cache of netboy0002.l202.4everdns.com/ shows a "60 second mortgage quote page".


http://web.archive.org/web/200605072....4everdns.com/


Perhaps the poster recieved various spam promoting services hosted on 4everdns.com, googled for 4everdns.com and found a post in the planet forums spamming the above link that also contained a sysip.net javascript - ie the spammer the poster refers to was a "participant" in one of the pagesence trials.

EDIT: Hmm, re-reading that post I realised he mentions seeing sysip.net in the page source, so the poster was probably the victim of a pagesence trial.
pseudonym is offline