Tuesday, September 4, 2012

Chrome Unknown connection to visicom-89.nationalnet.com

Just checked My chrome conenction, there someone are expected, someone are not. I saw 3 weird connection to Visicom-8x.nationalnet.com
image

then I ping the get the ip of those DNS, it’s 66.115.130.139, or 138
image

when you try access this page directly, you will see error.
image

weird, then I captured the Network traffic , oh got, saw the http traffic,
image

Follow it, it’s a http HEAD request
image

What the hell is the sherqsjgod host here?
after disable the extensions one by one ,it’s caused by the Web developer tools,
image

stupid plug-in! here is the official link,
https://chrome.google.com/webstore/detail/bfbameneiokkgbdmiekhjnmfkcnldhhm


Just disable it, the weird traffic will be gone.

No comments:

 
Locations of visitors to this page