Here in China you can't open websites that blocked by the government. Website like Twitter, Facebook, Youtube, and many more that related to social network was blocked. There's so many foreigner here try very hard to unblock the great wall internet censorship. For foreigner that already use Facebook or other social media before they came to China it's like a nightmare because they can't access it from here.
It's almost 1 week the free VPN Hotspot Shield cannot be used to open Facebook, some foreigner in my place they try so many things and tools to unblock Facebook from the censorship, but it has no luck. Yesterday I hear about the new service called Chinoxy.com, a web based proxy that works great when you want to access Facebook.
According to it's website :
Chinoxy.com is an anonymous Facebook proxy made by a group of experienced developers for people who have facebook.com blocked for any reason. It is really fast due to the top notch hardware and optimized software we use.
One of my friend has already tried it and he say "it works great", but when I look back to the website I'm just a little bit curious.
Let's see the explanation below :
2. When you open chinoxy.com, the website will ask you to open the new tab with URL f.chinoxy.com and this address will be changed dynamically into f1.chinoxy.com or f2.chinoxy.com or the others.
3. In f1.chinoxy.com or f3.chinoxy.com this page will show you a facebook login page(see picture below).
4. If you view the source code, when the username and password submitted it didn't go directly to facebook but to another subdomain of chinoxy.com(see picture below).
Something that make me feel really uncomfortable was the https subdomain http://https.www.f1.chinoxy.com/login.php?login_attempt=1 for what they use it?? "social engineering"???
5. When whois-ing the owner of domain it only shows this(see picture below).
6. When googling about this company, it didn't show relevant information or enough information.
7.And the last, when I'm open that webpage I still have active Facebook session cookie and the website still ask for login page ID + password :0 ??
2. When you input your E-Mail and password, this website can store your e-mail and password before they authenticate it to facebook.
3. If you already use this service, it's better to change all your equal password ASAP.
Hope it's useful 🙂