Thread: babes-pictures.net and sugarbabespics.com - hitbots

Suspected hitbots from:

babes-pictures.net
sugarbabespics.com

These sites signed up for trades at one of my smaller TGPs.

They both exhibited suspicious traffic behaviour:
- continually (7 days plus) send 250 hits in daily even though I send only about 20 back
- prod is about 180% which is ok but effective skim is 95-99% which is almost impossible with my trade settings. All other trades have effective skim of 65-70%
- incoming countries shows 77% USA - should typically be 25-30%
- clicking countries shows 88% USA - should be 25-30%
- clicking languages show 20% spanish - should be 1-2%


This made me investigate more deeply into my server logs:
- visitors from these sites only request the main tgp page and the tradepulse check image .../tp/img.php
- they request no other files - ie NO thumbs, no page graphics and no favicon
- they then click exactly two thumb links


Signups were by:
email: maverics@yahoo.ca
ICQ: 449233643
Nick: MaveRics

Both domains are new and registered as:
Registrant:
Gatar
Tufoh 2/5
Belen
Acre,7645334
BR
Tel. +355.3534456

Creation Date: 25-Mar-2011
Expiration Date: 25-Mar-2012

Of particular interest is that these bots seem to be specifically engineered to trick TradePulse - possibly other tradescripts too

bump to the top, found them in some of my sites.

Well, I don't have any trades or any other relationship with yesthumbs so I can't comment on traffic quality (which is what I spotted about babes-pictures and sugar babes pics).

I guess, yes, I'd be suspicious, but then I'm suspicious of every new trade until/unless I know the webmaster from previous experience or I see sensible and realistic traffic flowing. If the traffic is suspicious then the trade is gone - but to accuse a trader of cheating is pretty serious so I'd want some hard evidence beyond just the site looks like another cheater...

What I see here is:
- sites look similar but I wouldn't say they were the same - but then they are both TGPs
- they do have some trades in common
- yesthumbs seems to be by a different (and named) webmaster has different email, icq, different hosting and whois data that matches the trade details
- yesthumbs uses smartthumbs and TradeExpert where babes-pics and sugar babes use streamrotator and tradepulse (not that eithe rone is good or bad, but they are different)
- googling for maverics and his ICQ gives a good few cheater reports - googling for tomcathay (the yesthumbs w/m) doesn't show any bad reports

For now I'd give yesthumbs the thumbs up

Originally Posted by Adolfo33

what about yesthumbs.com? it's got the same layout and everything