funsec mailing list archives

something is weird abou this site

From: RandallM <randallm () fidmail com>
Date: Sat, 16 Jan 2010 11:02:12 -0600

hey
I found out about this site, Amazon Mechanical Turk, while searching
for "make money" and such searches to just track down suspicious
activities.
It is described as a market place to make money. Marketing companies
pay x amount for you to "test" sites. Something is just not right but
as yet
I haven't found solid evil. But, for instance, on "job" or "Hits (as
its called)" posts this job request:

Follow These Easy Steps to be Paid:

Step #1. Visit our website from the following link - www.TinyUrl.com/MturkSignup

Step #2. Complete the simple 1 page registration.

------------

Tiny URL gives me this preview:

Preview of TinyURL.com/MturkSignup

This TinyURL redirects to: http://movieplace.info/IdentityCheck
----------

That leads (redirects) to this site (I am thinking it has something to
do with "moives" according to the url showing:
https://www.qualityhealth.com/registration?rf=41778&mlPID=CD13432


I put the first url in to samspade to do a fetch (at windows at moment):

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>301 Moved Permanently</TITLE>
</HEAD><BODY>
<H1>Moved Permanently</H1>
The document has moved <A
HREF="http://movieplace.info/IdentityCheck/";>here</A>.<P>
<HR>
<ADDRESS>Apache/1.3.33 Server at movieplace.info Port 80</ADDRESS>
</BODY></HTML>
-----------------------------------------

I am sorry, but there is just something phishy here with this. Anyone
hear or have more info on this "Amazon" site? Shouldn't I trust it
since its Amazon?? Just seems a good place to hide stuff.

--
been great, thanks
RandyM
a.k.a System
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread:

something is weird abou this site RandallM (Jan 16)
- Re: something is weird abou this site Morgan Collins (Jan 16)