Insider 16215

David B. wrote:


I go by what I see. The original 'code' was associated with the Tekrider
website - access to which has effectively been closed down by the site
owner. Perhaps YOU should ask him why an honest man would do that.


This is what that web site looked like back in 2010.

https://web.archive.org/web/20100811...rowsers.co.cc/

Obviously, the original domain owner let the domain expire.

*******

L:\whois windows-web-browsers.co.cc

Whois v1.20 - Domain information lookup
Copyright (C) 2005-2017 Mark Russinovich
Sysinternals - www.sysinternals.com

Connecting to CC.whois-servers.net...
No whois information found.

So the domain isn't squatted, and instead it likely
isn't for sale.

Attempts to reach windows-web-browsers.co.cc go to co.cc
and the domain registrar, who returns an appropriate
response (which isn't malware).

Paul

On 21/05/2019 09:36, Paul wrote:
David B. wrote:


I go by what I see. The original 'code' was associated with the
Tekrider website - access to which has effectively been closed down by
the site owner. Perhaps YOU should ask him why an honest man would do
that.


This is what that web site looked like back in 2010.

https://web.archive.org/web/20100811...rowsers.co.cc/


Obviously, the original domain owner let the domain expire.

I trust your judgement on such matters!

Thank you, Paul. :-)

*******

L:\whois windows-web-browsers.co.cc

Whois v1.20 - Domain information lookup
Copyright (C) 2005-2017 Mark Russinovich
Sysinternals - www.sysinternals.com

Connecting to CC.whois-servers.net...
No whois information found.

So the domain isn't squatted, and instead it likely
isn't for sale.

Attempts to reach windows-web-browsers.co.cc go to co.cc
and the domain registrar, who returns an appropriate
response (which isn't malware).

Â*Â* Paul

You may wish to peruse this short thread which I started almost two
years ago:-

https://groups.google.com/forum/#!to...re/RQ1_WJnnWII

I expect, like me, you are always suspicious of folk offering you a
'free lunch'!

*This URL is available. Get this name before someone else does*

That's what I was told when I visited he-

http://windows-web-browsers.cc.cc/

I can even register "tekrider.cc.cc" for free - it's available! :-)

I am, though, currently thinking about the Terms of Service of this
Korean company. It may not be a wise move.

https://cc.cc/terms_of_service/terms_of_service.php

Mind you .... I found out about it from a review of the source code on
the web site of BTS (www.tekrider.net) so it's probably OK.

What do you think?

--
"Do something wonderful, people may imitate it."

On 21/05/2019 09:25, John Doe whinnied

Chronic nym-shifting psychopath troll...

So ..... what did YOU think of the video, 'John'?

https://www.youtube.com/watch?time_c...&v=U6f-eAzCxP8

--
David B.
Devon, UK

Paul wrote:
This is what that web site looked like back in 2010.

https://web.archive.org/web/20100811...rowsers.co.cc/

Ah, goodjob. That is also consistent w/ BTS tekrider's opinion.

He has an old 2006 better browsers section at his 'Internet Tips for
Windows Users' page http://tekrider.net/general/wintip01.php

So my guess is long ago he removed the 'if IE' alert reference by simply
x/ing the http.

BD wants to attack BTS via dissecting his old webpages, however his
direct access has been restricted.

--
Mike Easter

On 21/05/2019 15:42, Mike Easter wrote:
BD wants to attack BTS via dissecting his old webpages, however his
direct access has been restricted.

I want to know where THIS came from:-

!-- [if IE]
sc​ript type="text/javascript"
src=hxxp://windows-web-browsers.co.cc/alert/"
/ sc​ript
!-- [endif]--
div IE sc​ript here /div

Interestingly, on the link which YOU just posted, there is no reference
whatsoever to my 'special' page. *Why is that*?

--
David B.
Devon, UK

On 21/05/2019 16:33, Mike Easter wrote:
David B. wrote:
I want to know where THIS came from:-

!-- [if IE]
sc​ript type="text/javascript"
src=hxxp://windows-web-browsers.co.cc/alert/"
/ sc​ript
!-- [endif]--
div IE sc​ript here /div

IIRC, I copied that directly from Redleg/Aw-snap (but cannot now locate
a screenshot :-( )

I explained my theory on that related to BTS old 2006 stated opinion of
IE, but only BTS would be the one to 'explain' and clearly he is NOT
going to do that for you.Â* And I don't blame him.Â* You are adversaries.
He isn't going to /help/ you be an adversary.

You so often 'hit the nail on the head', Mike!

The question remains though - *WHY* are we adversaries?
It's certainly not of *MY* choosing. Bts is the one who is
'uncomfortable' with my questions and he's made it blatantly obvious
that he's trying to hide SOMETHING!

I did keep a copy of that initial finding by Sucuri - I didn't simply
'dream it up'!

https://i.imgur.com/yMfGx0v.png

--
David B.
Devon, UK

On Tue, 21 May 2019 08:30:08 +0100, "David B."
wrote:

On 21/05/2019 07:07, David B. wrote:
I go by what I see. The original 'code' was associated with the Tekrider
website - access to which has effectively been closed down by the site
owner. Perhaps YOU should ask him why an honest man would do that.

It's open to me.
See ?

http://tekrider.net/pages/david-brooks-stalker.php

Working 100%. You can always use web archive if you want to
look at a real STALKER. What a sorry sight !!!! Are those man tits ?

https://web.archive.org/web/20190503010049/https://tekrider.net/pages/david-brooks-stalker.php

I quote:-

CUT_STALKING_TARGET, whilst we are chatting about scripts, have you any notion of why
this would be on a web site (without the knowledge of the site owner)?

!-- [if IE]
sc?ript type="text/javascript"
src=hxxp://windows-web-browsers.co.cc/alert/"
/ sc?ript
!-- [endif]--
div IE sc?ript here /div

Your 'best guess' will do!

Did you find it in the source code of the page ? If not, it
wasn't there.

Remember that? That 'code' was found not only by Sucuri but by Redleg
(Aw-Snap) too!

CUT_PHISHING

Btw, Sucuri seems to think there *IS* a website ....

https://CUT_PHISHING


Why don't you do what ANY *good guy* does when he discovers a
FALSE POSITIVE ?
Report it. They'll put it on their whitelist when they
discover they made a mistake. And probably thank you.

Newcomers, read here before "helping" the stalker:

http://tekrider.net/pages/david-brooks-stalker.php

OT up. You crossposted to an OS related group.
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

On Tue, 21 May 2019 11:01:20 +0100, "David B."
wrote:

On 21/05/2019 09:36, Paul wrote:
David B. wrote:


I go by what I see. The original 'code' was associated with the
Tekrider website - access to which has effectively been closed down by
the site owner. Perhaps YOU should ask him why an honest man would do
that.


This is what that web site looked like back in 2010.

https://web.archive.org/web/20100811...rowsers.co.cc/


Obviously, the original domain owner let the domain expire.

I trust your judgement on such matters!

Translation: I know you're capable of understanding these
things, so can you help me STALK innocent people ?

Thank you, Paul. :-)

Ah, the infamous smiley !!!!

*******

L:\whois windows-web-browsers.co.cc

Whois v1.20 - Domain information lookup
Copyright (C) 2005-2017 Mark Russinovich
Sysinternals - www.sysinternals.com

Connecting to CC.whois-servers.net...
No whois information found.

So the domain isn't squatted, and instead it likely
isn't for sale.

Attempts to reach windows-web-browsers.co.cc go to co.cc
and the domain registrar, who returns an appropriate
response (which isn't malware).

** Paul

You may wish to peruse this short thread which I started almost two
years ago:-

And sure enough, a link to the STALKING_TARGET he wants you
to "help" him with.

Visit this page. It was put up at the request (actually he
said "Do it *NOW*!" ) of the STALKER:

http://tekrider.net/pages/david-brooks-stalker.php

Be very careful with any invitations to "social" media or
requests for "personal information".
[]'s
--
Don't be evil - Google 2004
We have a new policy - Google 2012

On Tue, 21 May 2019 16:59:56 +0100, "David B."
wrote:

IIRC, I copied that directly from Redleg/Aw-snap (but cannot now locate
a screenshot

Copy it from the PAGE SOURCE. Third parties are unreliable.

Here's the page. Read the source code and post the relevant
parts:

http://tekrider.net/pages/david-brooks-stalker.php

Be very careful with any invitations to "social" media or
requests for "personal information".
[]'s


--
Don't be evil - Google 2004
We have a new policy - Google 2012