Bitcoin Forum

DOT.TK SPYWARE ALERT
I visited dot.tk on my company computer and it detected spyware.  Not sure if real or not but be careful!  :)

Can you be more specific? That's a legitimate registrar.

probably a competitor such as subdomain.com or co.nf, co.nr etc. i just visited dot tk and nothing from chrome, Avast Internet Security or Malware Bytes Pro. Its very possible however that a hacker injected malicious code into the form by some groundbreaking sql injection, but if thats the case it was obviously caught and contained by dot. tk

This

It's a legit registrar, but it's subdomains are frequently abused for spyware. WOT and the likes have cordoned off the whole .tk domain as an elevated risk of a threat, which seems more lazy than fair.

in his defense although dot tk has cleaned up their act, in the past they were notorious for allowing scam customers. there are still many dot tk paid domains that point directly to spyware and banner farms. they dont terminate paid accounts for abuse of TOS. that being said the claims of dot.tk(their oficial registrar site) being infected with malware i didn't get nothing when i went their in chrome. normally chrome will alert followed by Avast Int Security a few seconds later. usually a scam with Malware Bytes Pro reveals details about the mode of delivery. i've found that 99 percent of the time it is cross site scripting, meaning a page has been compromised by spyware

I don't know. I used dot.tk domain services and I have never had any malware problems. It's like saying that a domain registrar is full of malware because he registered a .com domain that has a infected website associated with it.

.tk is a bit different than other TLDs in that the one registrar has a lock on the market, and gives out domains without strong traceability. Try getting a .ca anonymously, then tell me which TLD a script kiddie would try first.

All this is true, but the OP specifically said dot.tk, and I'd be rather surprised to see the registrar itself distributing malware.

Yeah, that's highly unlikely.

Yep, that's my point. The OP's company computer was probably running something that works indiscriminately, as I've seen done. That said, WOT does now make the distinction, and dot.tk itself checks out as "Trustworthy."

The other possibility is that you are running malware that is hosts-redirecting your attempt to access dot.tk, redirecting to a spoof server that does have malware on it... do you get 77.243.130.175 when you ping dot.tk?

The second is what I'd think it is -- if the issue is with visiting dot.tk itself.

They used to be a lot worse than they are now; while still used by a lot of scammers/hackers, they're not nearly as bad.

I don't think so. It seems to me that it has the same, low scam rate

It's possible that the ratio is the same and that it's the fact that there's so many more people using TK's now that it doesn't "feel" the same. Kind of like if there's 1:100 rate of crime, you will feel that there's a lot more criminals when there's 100k people vs 1k, when really it's the same.

Well at least I'm trying to contribute by showing tyat not every .tk website is a scam/malware-overrun website.

I get ya. I actually started up a few tk's on my own after doing research on them again. And I'm not a scammer/malware abuser, :p.

As moth of my sites are experiments which don't earn enough to be able to sustain even a .com domain, I use a free .tk domain which allows me to experiment freely without worrying that it'll be suspended.

True, that's another good reason to use them, :). Also, the benefit of .com over .tk is solely about SEO. Other than that there are no differences. And that only matters because .tk is a country-based domain and .com is universal.

Aoso .tk gives more privacy. In a .com domain, you have to pay for whois protection while .tk gives it for free. That might be a negative point of the domain too.

Actually, a lot of registrars give free privacy. The problem is if you're running an actual business (or really anything where you want authority) you need to leave it public as transparency (stores, authority blogs, etc.).

As I don't really take people's money; I actually give them more, such transparency isn't needed for me. Bitcoin is about being anonymus, isn't it?

Really? I didn't know that
Any name to give?

Just looked at your site, actually. If you change to a more static payment method (instead of random) I'd be willing to feature it on the BTC Faucet Rotator (http://coinfaucets.tk).

Namecheap (http://www.namecheap.com/) is one of the bigger ones.

I wish I could. As I'm only a sort-of a techie but not a coder, I have to process every payment by hand as well as be aware of the min transaction limit in bitcoin-qt. If I knew how to code php or any similiar language, I could make accumulative payments, 24 or 8 or something hour limits without having to check addresses and of course automatic payments. But as I only know how to review and check code, I'm unable to do such.

Thanks

Awwww, :(. I know PHP (that's what the rotator is built in) but when it comes to interfacing with the client I wouldn't even know where to start.

I was thinking of setting it up not with the client rather with the blockchain.info wallet maybe. However, I only know the basics of FreePascal which I learnt in school and a bit of Python.

This makes it seem pretty easy: http://blockchain.info/api/blockchain_wallet_api

Could you build such script I mentioned: accumulative payments, 24 hour timer, auto payments? All I can offer right now is a free banner space for any ad you want and a tip (bigger or smaller) once the site gets bigger exposure. What do you think?

I'm not sure how to actually do the pinging for the auto payments. I think that's a cron job or something. I think I can handle the rest though if you want me to mock up a script (it'll be the code part, not the visual part though -- I'm a coder, not a designer, :P).

I think I have a faucet script you might be able to base of to. It uses Cronjobs and MySQL, both of which I have access to. The script itself is half bad but I bet you could make better. Also a space for the banners (well I gotta put your and my own banners somewhere) would be good. Should I post the link?

Sure, I'll take a look at it.

Here's the link to the thread: https://bitcointalk.org/index.php?topic=201973.0 (https://bitcointalk.org/index.php?topic=201973.0)

Got it. Going to look it over and I'll send you a pm, :).

Thanks. If you need any info, just PM me.

There's a PHP library (http://jsonrpcphp.org/) for that! ;)

Ugh, JSON, lol. I need to get a bit more adept at PHP before I move into that. Sadly I lack the real capability of doing OOP. I use.... structured *gasp* :p

It is an exaggeration. I have noticed the same with anonpaste.me .

I'm not really sure about the site you mentioned.  :-\