www.citizenstrade.org???? [RESOLVED]

Charger · Post by **Charger** » Tue May 01, 2007 8:37 pm

I seem to get a connection on my router's log to this web site whenever I connect to =GC= homepage. It's an interesting site, but why is it happening?

Post by **Ash2Dust** » Tue May 01, 2007 11:52 pm

I just checked now via Netstat command and I'm not connected to the site you reference. No cookies either.

Post by **sushi** » Wed May 02, 2007 6:41 am

I am not aware that we would be associated to that webpage in any way.

May I suggest that you run some anti adware program of your choice (after makeing a savecopy of your system and also run your antivirus software.

Endstille · Post by **Endstille** » Wed May 02, 2007 7:32 am

Check the "hosts" file under X:\Windows\system32\drivers\etc\ for an entry of www.global-conflict.org and delete it.

Charger · Post by **Charger** » Wed May 02, 2007 4:43 pm

Endstille, I checked the host file and it is clean already.
More info:
I do not see anything in the incoming or outgoing logs, just the system log of the router.

00:04:03 TCP from 192.168.1.150:1086 to www.global-conflict.org(82.165.133.49):80
00:04:10 TCP from 192.168.1.150:1092 to www.frag4fun.com(62.75.219.138):80
00:04:11 TCP from 192.168.1.150:1091 to www.bfworld.net(208.97.156.252):80
00:04:11 TCP from 192.168.1.150:1090 to www.citizenstrade.org(205.134.232.71):80

The above is what is logged immediately to the router's system logfile when I click on =GC= . I am now going to update the router firmware and see if it helps. This is rather bizarre.

Charger · Post by **Charger** » Wed May 02, 2007 5:27 pm

Update:
I updated the router firmware. No change
I tried a different browser --- Opera. No change
Also I noticed alot of incoming UDP for ports 1026-1029, but my messenger service is disabled.

Post by **Goggles** » Wed May 02, 2007 6:44 pm

Charger wrote:Endstille, I checked the host file and it is clean already.
More info:
I do not see anything in the incoming or outgoing logs, just the system log of the router.

00:04:03 TCP from 192.168.1.150:1086 to www.global-conflict.org(82.165.133.49):80
00:04:10 TCP from 192.168.1.150:1092 to www.frag4fun.com(62.75.219.138):80
00:04:11 TCP from 192.168.1.150:1091 to www.bfworld.net(208.97.156.252):80
00:04:11 TCP from 192.168.1.150:1090 to www.citizenstrade.org(205.134.232.71):80

The above is what is logged immediately to the router's system logfile when I click on =GC= . I am now going to update the router firmware and see if it helps. This is rather bizarre.

This post gives away the answer

There is a picture on our frontpage which is linked externally to http://www.citizenstrade.org/images/Rio ... euters.jpg. So when you surf onto the GC homepage, your browser is sending a request to www.citizenstrade.org to get a copy of the image for you

Post by **madcow** » Wed May 02, 2007 7:05 pm

I solved that one for you since Goggles posted that Charger. I'm sure the citizenstrade people didn't like us linking directly to one of their images so I uploaded it to our website and now it is linked from the GC webspace. That should stop your connections to www.citizenstrade.com

Post by **Ash2Dust** » Wed May 02, 2007 11:01 pm

The web page is slow enough for me that I can click on through before the picture starts to load.

Post by **matsif** » Thu May 03, 2007 5:33 am

Ash2Dust wrote:The web page is slow enough for me that I can click on through before the picture starts to load.

me too

Post by **Mat-Moo** » Thu May 03, 2007 9:03 am

Bandwidth stealing, naughty naughty!

Post by **madcow** » Thu May 03, 2007 11:12 am

Ash2Dust wrote:The web page is slow enough for me that I can click on through before the picture starts to load.

It's cached for me.

Post by **Goggles** » Thu May 03, 2007 11:25 am

I submitted a story for the news/frontpage yesterday and it told me there were 500+ pending submissions. I wonder if that has anything to do with the slowness (spambots submitting news?)

Post by **madcow** » Thu May 03, 2007 12:09 pm

Goggles wrote:I submitted a story for the news/frontpage yesterday and it told me there were 500+ pending submissions. I wonder if that has anything to do with the slowness (spambots submitting news?)

They are indeed spambot submissions but it would take hours to delete them all. Also, if you're going to submit news you should say so and then I can put it up for you (I can't tell normally if news is submitted).

Edit: I found the delete all button

Post by **Goggles** » Thu May 03, 2007 4:49 pm

madcow wrote:
Goggles wrote:I submitted a story for the news/frontpage yesterday and it told me there were 500+ pending submissions. I wonder if that has anything to do with the slowness (spambots submitting news?)
They are indeed spambot submissions but it would take hours to delete them all. Also, if you're going to submit news you should say so and then I can put it up for you (I can't tell normally if news is submitted).

Edit: I found the delete all button

Previous times I wanted to submit news, I was told to do it through the front page