interesting

i think most of you know about my website in my profile. anyway it is a cookie stealer that logs date time cookie and referer. any way i usually see the referer from here or one of the sites i post on but lately i have been seeing this

http://swf.userplane.com/CommunicationSuite/ch.swf?&strServer=flashcom-chat.myspace.userplane.com&strDomainID=chatRoom29.myspace.com&strSess

as the referer.

i was wondering if anybody knew what this is. when i try to go to the site it says IE cannot display the page

Looks like someone (you?) posted the link in a chat room.

Hmmm. Well it claims to be a myspace chat room. However I dont even know if myspace does chats, plus it is fake because myspace is its own domain not swf.userplane.com

http://swf.userplane.com/CommunicationSuite/ch.swf?&strServer=flashcom-chat.myspace.userplane.com&strDomainID=chatRoom29.myspace.com&strSess```

So you are saying that the referral changed.

```markuphttp://chat.myspace.userplane.com/```
This is also unknown. It is all a bunch of random hoo haa, but I cant understand why it just randomly happened. Or how someone would attain such a odd url.

Okay here we go. userplane.com

App:
Webchat 2
Add full-featured, revenue generating chat rooms.

On this server I see nothing relating to myspace chats.
Quite interesting.

i just have this part of my site to fuck with people but i have been seeing that appear for a while in the cookies.txt i think someone is using my site to fuck with other people. if so i don't mind i just wish i new about it.

So the cookies.txt is accessible for anyone? In that case it seems like a random person is using your logger for phishing and/or session hijacking.

fallingmidget wrote: if so i don't mind i just wish i new about it. That's the way more people in this world should think.

anyone can use it if they want if they don't mind scanning through all the stuff. i believe if you put it on the web then its there for all to see. if you want to see the logs it's

http://www.falling-midget.t35.com/cookies.txt

i just cleared them so there might not be any in there.