An odd occurance
Results 1 to 10 of 10

Thread: An odd occurance

  1. #1

    An odd occurance

    I was surfing earlier today, and thought i'd try to pin down the website for an indy record label called "kill rock stars." Well, i was trying variations on that name as a web address when i ran into:

    http://www.krs.com/

    While waiting for the page to load, the status bar changed from the IP to "redirecting" and again to "fbi.gov" ... a friend had the same results when he attempted to load the page.

    It is also noted that once the page DOES load, it's either a fake 404 page or a "We couldn't find the pae you're looking for" page. What gives with this, and could this be a possible indication of a false-front fbi site that is terribly hidden?
    Hic ego barbarus, sum quillo non intelligor illis.
    Because they do not understand me, I am a barbarian.

  2. #2
    Banned
    Join Date
    Aug 2002
    Posts
    33
    Tried it out. Also got fbi.gov. Very weird. Wonder what krs represents? Maybe type krs at google and see what you get.

  3. #3
    Senior Member cwk9's Avatar
    Join Date
    Feb 2002
    Posts
    1,211
    Here is what sam spade kicks out

    HTTP/1.1 302 Object moved
    Server: Microsoft-IIS/5.0
    Date: Sun, 11 Aug 2002 03:20:51 GMT
    Connection: close
    Location: http://fbi.gov
    Content-Length: 135
    Content-Type: text/html
    Cache-control: private

    <head><title>Object moved</title></head>
    <body><h1>Object Moved</h1>This object may be found here.</body>

    Last line of trace route:
    16 216.148.213.150 14.277 ms DNS error [AS4265] AT&T CERFnet Redwood City
    Its not software piracy. Iím just making multiple off site backups.

  4. #4
    Gray Haired Old Fart aeallison's Avatar
    Join Date
    Jul 2002
    Location
    Buffalo, Missouri USA
    Posts
    888
    Most likely that someone had the domain krs.com that is, or was, guilty of a haneous crime, and the fbi is logging all attempts at trying to access it in an attempt to track down other perpetrators, better stay at a friends house tonight and watch yours for any signs of counter terrorist activities...
    I have a question; are you the bug, or the windshield?

  5. #5
    Member
    Join Date
    Apr 2002
    Posts
    55
    very odd... i also tried the link- got fbi.gov. went to the fbi homepage then and searched for "KRS". got the error message. tried again, and got "0 results". ??? something smells odd..
    \"One wonders what would happen in a society in which there were no rules to break. Doubtless everyone would quickly die of boredom.\" -Susan Hawatch

  6. #6
    this does sound like some attempt at tracing activity to the site. however, wouldn't our nation's most notoriously sneaky group of black-clad good-doers have a sneakier way of doing it than THIS?
    Hic ego barbarus, sum quillo non intelligor illis.
    Because they do not understand me, I am a barbarian.

  7. #7
    Gray Haired Old Fart aeallison's Avatar
    Join Date
    Jul 2002
    Location
    Buffalo, Missouri USA
    Posts
    888
    wouldn't our nation's most notoriously sneaky group of black-clad good-doers
    Just think about that a little bit...LOL

    It only takes a second to get an IP address, and I think they will use that as data to be crunched, patterns found, geograpical possibilities mapped with that data to pinpoint a particular IP pool somewhere.

    Then....who knows
    I have a question; are you the bug, or the windshield?

  8. #8
    Banned
    Join Date
    Aug 2002
    Posts
    33
    Sam Spade is great software. Always tracing down spammers.

  9. #9
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    Give em a call and ask...

    Server used for this query: [ whois.1stdomain.net ]

    1stDomain Whois Server

    Registered to:
    KRS Electronics Corp (KRSCOM-HOLDER)
    321 Burlingame Dr
    Burlingame, ca 94010
    AR

    Domain Name: KRS.COM
    Registered through: 1stDomain.net

    Administrative Contact, Technical Contact, Zone Contact, Billing Contact:
    N/A Hostmaster (NAHO1107F) mamhostus@YAHOO.COM
    Mamhost
    321 Burlingame Dr
    Burlingame, ca 94010
    AR
    752-6234

    Domain created: 1997-06-11.
    Domain last updated: 2001-08-31.
    Domain expires: 2004-06-10.

    Name servers for this domain:

    NS1.MYDOMAIN.COM 216.148.213.141 (HO1833F)
    NS2.MYDOMAIN.COM 216.148.221.142 (HO1834F)
    NS3.MYDOMAIN.COM 216.148.213.143 (HO1835F)
    NS4.MYDOMAIN.COM 216.148.221.144 (HO1836F)
    Ammo
    Credit travels up, blame travels down -- The Boss

  10. #10
    Junior Member
    Join Date
    Aug 2002
    Posts
    24
    Personally when i want to find out where someone is i use a file called visual route.. i got it from www.mastersquad.com but they were shut down... i dunno why but if you ever need visual route just send me a message you can track anyone anywhere. and its much faster than most of the progz out there. ill try a search with visual route to see what comes up for www.krs.com and then maybe i can find out where it is coming from.. if you cant tell what the hell i am saying it is ok... im still a newb also. lol

    ok, i scanned the site.. its coming from san diego... hmm possibly a crime area... anyway ... i got this i.p. number with the site if you want it 216.148.213.150 make sure you tell me what you find
    [pong][gloworange]Tool Rules[/gloworange][/pong]

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides