202 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
Whither IBM Part 2: Is Domino being silently killed? | The Domino Elf – Hogne B. Pettersen's Social Biz Blog
Mon, Nov 14th 2016 5
wissel.net :: Vert.x and Domino
Sun, Apr 3rd 2016 8
wissel.net :: Vert.x and Domino
Fri, Feb 19th 2016 4
LDC Via: how does it work?
Tue, Jan 5th 2016 4
LDC Via: how does it work?
Tue, Jan 5th 2016 8
Bits or pieces?: Open source as weapon
Sun, Dec 6th 2015 3
Bits or pieces?: Open source as weapon
Sun, Dec 6th 2015 4
Top 10
NetMotion XE vs Cisco AnyConnect
Sat, May 24th 2014 15
[Webinar] IBM Mail Next and Notes Domino Roadmap - YouTube
Tue, Sep 16th 2014 13
Microsoft's "Secret" Mail Migration Tool
Sun, Nov 16th 2014 12
The 16 Best Meeting Scheduler Apps and Tools
Mon, Dec 8th 2014 12
IBM Connections Cloud wiki : Troubleshooting Administration : Cheat Sheet: Firewall Settings for IBM Connections Cloud S1
Fri, Feb 6th 2015 12
NVIDIA® Jetson™ TX1 Supercomputer-on-Module Drives Next Wave of Autonomous Machines | Parallel Forall
Fri, Nov 13th 2015 12
Unlocking your Sony Xperia Z* boot loader C6503 ~ Ray blogs about - Linux
Wed, Jul 30th 2014 11
Lialis Lotus Notes Versus Sharepoint | A Functional Comparison |
Fri, Oct 3rd 2014 8
wissel.net :: Vert.x and Domino
Sun, Apr 3rd 2016 8
LDC Via: how does it work?
Tue, Jan 5th 2016 8


Sorry! helperblogger redirecting to mypageresults - Fixed. ~ Ray said what???
Twitter Google+ Facebook LinkedIn Addthis Email Gmail Flipboard Reddit Tumblr WhatsApp StumbleUpon Yammer Evernote Delicious
   

Sorry! helperblogger redirecting to mypageresults - Fixed. ~ Ray said what???:



'via Blog this



Interesting semi-hacking stuff:



















I added some code from helperblogger to my Blogs last year to show recent posts. When I looked at my blog today it redirected me to -->

http://mypageresults.com/?dn=code.helperblogger.com&fp=QBQ8CivDdJqA6EYjct%2B%2BxBezE8hTO9KWfLMHwZb6C9g%2FQzObao0CWx3Ex73UyJK9TdiQm04m6WdkYjP7QHEwqw%3D%3D&prvtof=y6Fx7YPPzisjVlJYz4Eb%2BElqwiPNpsYfJThAyXK%2B5%2FBT8wib7c7RLd69mPVMkW5Dn%2F5%2BsJzdxISMDEBzqkEf28znzwwEnjVRcloCZgg%2F37qp3cBqW%2F%2BW2qH3qhg%2BfpyI&poru=9TqkgviPRu1jgnnIAZCC3Qt1zOi0TnZ1NzCy4KCMDxNX4lfmzL39HKiBzEvV%2B2zRK0r7E6819ctgl04ZhgBujPNDa0wnA1oVBqHmcZjNZYw3YSPjJiH7wO0JqHpmqPL7&cifr=1&flrdr=yes&nxte=js

WHAT THE HELL!!

I only run Linux and virus's is not what I expect.

I started by checking Chromium and found nothing but my blog(s) still redirected me. The other pages were ok so it must have been something on my blogs. Weirdly Firefox did not do this.

I then added a host entry to redirect mypageresults.com to 127.0.0.1 to stop the redirection and investigate.

I took a quick look at the Chrome : //About settings and found nothing bad.

I then checked chrome://view-http-cache/ to see when this started.

I found some strange stuff in the cache -->
https://fbcdn-profile-a.akamaihd.net/hprofile-ak-ash2/t5/s40x40/1116296_100002482006063_1069675774_q.jpg

Hope I do not know this apparent wanker. Mind you, it is a facebook cache so could be anyone including me ;-)

I searched the source on on of the pages and found some code from helperblogger. When I checked helperblogger the site was no more. Oh Oh!















I then removed all the code below from all my blogs and continued my searching.

It seems that a request for:

http://www.helperblogger.com/recent-posts-spy.js

returns:

http://pagesinxt.com/?dn=www.helperblogger.com&flrdr=yes&nxte=js

Pagesinxt.com?

and then returns:

http://mypageresults.com/?dn=www.helperblogger.com&flrdr=yes&nxte=js

Bastards! Here is my wish for the owner of helperblogger and mypageresults. I hope and wish your fingers turn to fish hooks and your ass start itching, badly.


From what I can tell pageinxt is owned by mypageresults. These are some of the websites on this Ip Address.

33 are live websites using this IP (208.91.196.4) NOW -
  searchremagnified.com (#200,555)     searchreinvented.com (#119,367)     searchdiscovered.com (#256,382)    searchignited.com (#3,099,745)     searchmagnitude.com (#1,535,686)     kolmic.com (#425,329)     ztomy.com(#935,313)     pagequeryresults.com (#3,538,536)     searchinvented.com (#1,783,213)     webqueryresults.com(#1,966,302)  
... ... ... Found: 33 websites on this ip ... ... more »
        see also: All websites in this IP Range »

3 live websites used this IP (208.91.196.4) Before -
  • danteen.net (#2,526,992)         used IP on 13 September 2013
  • instantfwd.com (#30,188)         used IP on 18 March 2013
  • kissmyass.com (#2,056,659)         used IP on 25 October 2012
... and 16 Live websites using this ns - ns1004.ztomy.com :
  instantfwd.com (#93,858)     pagequeryresults.com (#3,538,536)     webqueryresults.com (#1,966,302)    sitequeryresults.com (#3,405,390)     keywordqueryresults.com (#1,495,503)     cinema.in (#2,070,661)    searchqueryresults.com (#3,573,302)     searchtermresults.com (#120,250)     quickfwd.com (#3,551,860)    searchmeaningful.com (#74,696)  



I found some answers on google now as well.

https://productforums.google.com/forum/#!topic/blogger/31LWhN0Llmc



Here is the offending code that has been removed. Sorry! Think Tony Haywood!




<h2 class='title'>Recent</h2>

<style media='screen' type='text/css'> <!-- /* ========== Scrolling Recent Posts Widget By helperblogger.com ======== */ #helperblogger-widget { overflow: hidden; margin-top: 5px; padding: 0px 0px; height: 385px; } #helperblogger-widget ul { width: 295px; overflow: hidden; list-style-type: none; padding: 0px 0px; margin: 0px 0px; } #helperblogger-widget li { width: 282px; padding: 5px 5px; margin: 0px 0px 5px 0px; list-style-type: none; float: none; height: 80px; overflow: hidden; background: #fff url(https://lh6.googleusercontent.com/-A6a829gqfDQ/T-3xppy6MlI/AAAAAAAACFE/RrOao4P11Uk/s1600/helperblogger.com-post.jpg) repeat-x; border: 1px solid #ddd; } #helperblogger-widget li a { text-decoration: none; color: #4B545B; font-size: 15px; height: 18px; overflow: hidden; margin: 0px 0px; padding: 0px 0px 2px 0px; } #helperblogger-widget img { float: left; margin-top: 10px; margin-right: 15px; background: #EFEFEF; border: 0; } #helperblogger-widget img { -webkit-transition: all 0.5s ease; -moz-transition: all 0.5s ease; transition: all 0.5s ease; padding: 4px; background: #eee; background: -webkit-gradient(linear, left top, left bottom, from(#eee), color-stop(0.5, #ddd), color-stop(0.5, #c0c0c0), to(#aaa)); background: -moz-linear-gradient(top, #eee, #ddd 50%, #c0c0c0 50%, #aaa); -webkit-border-radius: 4px; -moz-border-radius: 4px; border-radius: 4px; -webkit-box-shadow: 0 0 3px rgba(0,0,0,.7); -moz-box-shadow: 0 0 3px rgba(0,0,0,.7); box-shadow: 0 0 3px rgba(0,0,0,.7); } #helperblogger-widget img:hover { -moz-transform: scale(1.2) rotate(-350deg); -webkit-transform: scale(1.2) rotate(-350deg); -o-transform: scale(1.2) rotate(-350deg); -ms-transform: scale(1.2) rotate(-350deg); transform: scale(1.2) rotate(-350deg); -webkit-box-shadow: 0 0 20px rgba(255,0,0,.4), inset 0 0 20px rgba(255,255,255,1); -moz-box-shadow: 0 0 20px rgba(255,0,0,.4), inset 0 0 20px rgba(255,255,255,1); box-shadow: 0 0 20px rgba(255,0,0,.4), inset 0 0 20px rgba(255,255,255,1); } .spydate { overflow: hidden; font-size: 10px; color: #0284C2; padding: 2px 0px; margin: 1px 0px 0px 0px; height: 15px; font-family: Tahoma,Arial,verdana, sans-serif; } .spycomment { overflow: hidden; font-family: Tahoma,Arial,verdana, sans-serif; font-size: 10px; color: #262B2F; padding: 0px 0px; margin: 0px 0px; } /* ========== Scrolling Recent Posts Widget By helperblogger.com ======== */ --> </style>
<script language='JavaScript'> imgr = new Array(); imgr[0] = "https://lh6.googleusercontent.com/-kPPx1sCN4Pg/T-3xq72pLeI/AAAAAAAACFM/IdO7GsyUvGM/s1600/no-thumbnail.png"; imgr[1] = "https://lh6.googleusercontent.com/-kPPx1sCN4Pg/T-3xq72pLeI/AAAAAAAACFM/IdO7GsyUvGM/s1600/no-thumbnail.png"; imgr[2] = "https://lh6.googleusercontent.com/-kPPx1sCN4Pg/T-3xq72pLeI/AAAAAAAACFM/IdO7GsyUvGM/s1600/no-thumbnail.png"; imgr[3] = "https://lh6.googleusercontent.com/-kPPx1sCN4Pg/T-3xq72pLeI/AAAAAAAACFM/IdO7GsyUvGM/s1600/no-thumbnail.png"; imgr[4] = "https://lh6.googleusercontent.com/-kPPx1sCN4Pg/T-3xq72pLeI/AAAAAAAACFM/IdO7GsyUvGM/s1600/no-thumbnail.png"; showRandomImg = true; boxwidth = 255; cellspacing = 6; borderColor = "#232c35"; bgTD = "#000000"; thumbwidth = 50; thumbheight = 50; fntsize = 15; acolor = "#666"; aBold = true; icon = " "; text = "comments"; showPostDate = true; summaryPost = 40; summaryFontsize = 10; summaryColor = "#666"; icon2 = " "; numposts = 10; home_page = "http://secpen.blogspot.com/"; limitspy=4; intervalspy=4000; </script>
<div id='helperblogger-widget'>
<script src='http://code.helperblogger.com/recent-posts-spy.js' type='text/javascript'></script>
</div>
</div>



The code from mypageresults.

view-source:http://mypageresults.com/?dn=code.helperblogger.com&flrdr=yes&nxte=js


http://setonmbi.blogspot.com/2014/02/sorry-helperblogger-redirecting-to.html
Feb 25, 2014
8 hits



<!--
top.location="http://mypageresults.com/?dn=code.helperblogger.com&fp=uJesUZ8nFBmEbKtu6e0EpipkoIYA%2BTMbBtIDVbcYUXNjBeABUHTc39Hc3aE%2F2vB5v77mAa%2FN0%2FA2zKDJG4HH2g%3D%3D&prvtof=tziIyUlJ4AJ7r%2FPvW2QcaYNq2KNxX3Zs8olmWyo5B9k%3D&poru=%2BGUrtqySCVry4UbYXNgt7HuDl5I7RC7Iy89jtvUc9NHhF3bcnNbRdbnS7Ihd2n0VEMtHc0k2HQx91N5Fp5fPGKm0ZieMTipdGSXkUqY8yc2%2BcoKfGbS5uja0OCmj8b%2Fi&cifr=1&flrdr=yes&nxte=js";
Recent Blog Posts




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition