Geekness – closer to the world

Geeky at the Lake of Zurich

qq829.com – A Quick Investigation

For a couple of days, I see strange referrers to this blog. Some visitors are arriving from a qq829.com/web_stat.asp?dn=URL. On that website you see nothing special. Just an image that looks like a tracking icon. If you check the source code of the page you will see, that this icon is included with a Javascript code:
http://s130.cnzz.com/stat.php?id=1958849&web_id=1958849&show=pic1

And indeed, this Javascript file tracks visitors to the qq829.com domain. The hosted domain cnzz.com seems to offer website tracking stats and other services.

As far as I can tell now, it does not look like this is a malicious service (yet). What I do not understand is, why somebody wants to track webesites of mine for some stats. I have never registered anything at cnzz.com. And the exact affiliation of qq829.com and cnzz.com is unclear at this point. As a security measure, don’t click any links and do not visit those sites. For now there seems to be no real solution to block such access.

qq829.com was registered in August 2009 and is hosted in China.

More information can be found on the Google Analytics Support forum.

4 thoughts on “qq829.com – A Quick Investigation

  1. Pingback: Corsin Camichel
  2. few days ago is like a small icon
    yesterday i check again, is all in mandarin
    something with window server 2003,

    the page all in black tho

    then it have alot of c:/

Comments are closed.