Page 1 of 1

MyUnplug.com -- The situation

Posted: Tue May 08, 2012 2:15 pm
by Nulander
This afternoon, while checking my FB profile, my attention got drawn by a website that proposed this website myunplug.com, as a online service proposed in order to let the calculation of the net worth generated by a generic FB profile.

After some researches, I have find out that the website in object has a too generic Privacy Policy, contains at least 1 ad-tracker blacklisted by hpHosts and two Web Bugs (dropped by the same ad-tracker company) and drop 5 cookies.

The website present a section containing an Horoscope FB application.

The most weird thing, is that the domain name is registered through a privacy proxy service.

Domain Name: MYUNPLUG.COM

Registrant:
PrivacyProtect.org
Domain Admin (@privacyprotect.org)
ID#10760, PO Box 16
Note - All Postal Mails Rejected, visit Privacyprotect.org
Nobby Beach
null,QLD 4218
AU
Tel. +45.36946676

Digging a little bit, I have found that the IP address related to the website, is served by AS29802.

According to robtex:

WARNING! 27% (27/100) of the sites on -No Whois Entry- (as29802) is pornographic or otherwise sensitive content!

*.worldstarhiphop.com (sensitive!)
worldstarhiphop.com (sensitive!)
*.worldstarhiphop.com (sensitive!)
www.worldstarhiphop.com (sensitive!)
classifiedsgiant.com (sensitive!)
*.classifiedsgiant.com (sensitive!)
santabanta.com
*.santabanta.com
www.santabanta.com
*.classifiedsgiant.com
iconbux.com
majorgeeks.com
www.pagelines.com
pagelines.com
ity.im (sensitive!)
worldstaruncut.com (sensitive!)
www.worldstaruncut.com (sensitive!)
*.pakwheels.com
www.ity.im (sensitive!)
www.wondershare.com
www.blogtopsites.com
pakwheels.com
blogtopsites.com
wondershare.com
internetbs.net
*.internetbs.net
www.wallpaperswide.com
wallpaperswide.com
www.aheadworks.com
www.aheadworks.com
siasat.pk
www.moviescapital.com (sensitive!)
www.siasat.pk
www.onlinenewspapers.com
www.qirina.com
onlinenewspapers.com
divineproductions.com
qirina.com (sensitive!)
www.friendskorner.com
friendskorner.com
www.onlinenewspapers.com
pinoy-ako.info
www.pinoy-ako.info
www.moviescapital.com (sensitive!)
www.tipidpc.com
tipidpc.com
www.tipidpc.com
denunciando.com (sensitive!)
denunciando.com (sensitive!)
www.denunciando.com (sensitive!)
moviescapital.com (sensitive!)
informazione.it
www.informazione.it
www.twicsy.com
www.elheraldo.co
www.twicsy.com
twicsy.com
queerclick.com (sensitive!)
www.queerclick.com (sensitive!)
bighugelabs.com
www.bighugelabs.com
www.bighugelabs.com
arielbrailovsky.com
www.naijahotjobs.com
xroxy.com
www.fonts101.com
fonts101.com
www.fonts101.com
www.mp3fundoo.com
worldstarcandy.com (sensitive!)
www.worldstarcandy.com (sensitive!)
mp3fundoo.com
*.worldstarcandy.com (sensitive!)
proxy4free.com
www.proxy4free.com
www.domaining.in (sensitive!)
geekalerts.com
www.putasmanhosas.com (sensitive!)
*.worldstarcandy.com (sensitive!)
ctrlv.in
www.ctrlv.in
fide.com
goansport.net
www.goansport.net
allaboutcircuits.com
www.fide.com
www.allaboutcircuits.com
celebs101.com (sensitive!)
www.celebs101.com (sensitive!)
www.websiteshadow.com
websiteshadow.com
webcheatsheet.com
www.webcheatsheet.com
ma7room.com
www.thedailywtf.com
meiobit.com
thedailywtf.com
filedropper.com
www.modules2buy.com
www.ma7room.com

Even if a little part of the domain-name reported are considered "sensitive", checking various hosts, I have found various scam attempts, like astroturfing marketing misleading tactics, scam attempts. etc.

96.31.64.0/19 AS29802 (not registered) (?!?!)

http://www.mywot.com/en/scorecard/classifiedsgiant.com
http://www.mywot.com/en/scorecard/santabanta.com
http://www.mywot.com/en/scorecard/iconbux.com
http://www.mywot.com/en/scorecard/wondershare.com
http://www.mywot.com/en/scorecard/denunciando.com
http://www.mywot.com/en/scorecard/ity.im
http://www.mywot.com/en/scorecard/worldstaruncut.com
http://www.mywot.com/en/scorecard/internetbs.net

RE: MyUnplug.com -- The situation

Posted: Wed May 30, 2012 5:03 am
by Jtaylor83
Rated. It spammed my Facebook wall with the Rogue app. It's the same site with this so called My Facebook Value, which is a scam.