PDA

View Full Version : Pagejacking a-plenty.


DarthGumby
03-06-2002, 04:19 PM
Last week I was bored and typed my screenname into Google, just to see what would come up. I was surprised to find my name and part of my signature file in snippets for sites that seem to redirect to eBay.

You can see what I'm talking about here:

http://www.google.com/search?hl=en&newwindow=1&q=+site:www.greatest-dolls.com+DarthGumby

Using Google groups search, I found that posts from rec.arts.sf.starwars.misc were combined with posts from alt.marketplace.collectables and other groups. The list goes on seemingly forever, and isn't limited to the pagejacked-to-eBay sites, there are some porn sites involved in this too.

Clicking on www.greatest-dolls.com and hitting stop before being redirected, I was able to capture the redirection source code.

<HTML>
<HEAD>
<SCRIPT LANGUAGE="JavaScript">
<!-- Begin
function doDelay() {
setTimeout('doRedir()', 1000);
**
function doRedir() {
window.navigate('http://www.qksrv.net/click-1003823-2202641');
**
// End -->
</script>
</HEAD>
<BODY OnLoad="doRedir()">
<img src="http://www.qksrv.net/image-1003823-3885654" width="1" height="1" border="0">
<img src="http://www.qksrv.net/image-1003823-2202641" width="1" height="1" border="0">
<img src="http://www.qksrv.net/image-1003823-5319895" width="1" height="1" border="0">
<img src="http://www.qksrv.net/image-1003823-5438597" width="1" height="1" border="0">
</BODY>
</HTML>


So obviously someone is making money off these links. Using the AltaVista translator I was able to view what the original page was, and it was a normal doll collecting site, with none of the text shown in the description on Google.

I did a whois on the site (and several of the other sites involved) and came up with this information:

Registrant:
Megan Schuler

Registrar: Go Daddy Software (http://registrar.godaddy.com)
Domain Name: GREATEST-DOLLS.COM

Domain servers in listed order:
NS1.INETVIEWRES.NET
NS2.INETVIEWRES.NET


Running the rest of the sites through whois I found that every single site uses the domain servers NS1.INETVIEWRES.NET and NS2.INETVIEWRES.NET.

My name was not the only one used from the newsgroups, several friends have also had their screennames used for this junk and I'd like to find out how to put a stop to it. At least if someone can tell me who to complain to, that would be great. I complained to eBay but they say they can't help.

Thanks, DG

kzsudj
03-13-2002, 07:05 PM
Complain to both eBay and CJ.

DarthGumby
03-13-2002, 10:33 PM
Originally posted by kzsudj
Complain to both eBay and CJ.

I did, eBay pretty much said there's nothing they can do unless it involved a member.

I haven't heard back from cj.com, I wrote to fraud@cj.com, was that the correct address?

-DG

Click Here!