Author Topic: Blackhole landing  (Read 8157 times)

0 Members and 1 Guest are viewing this topic.

December 18, 2011, 07:10:56 pm
Read 8157 times

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
Code: [Select]
http://vatthennimahani.in/main.php?page=2be1b1f6c472b6a3
http://urlquery.net/report.php?id=12454

http://biiaqw.net/index.php?page=3ed85468adad8778
http://urlquery.net/report.php?id=12455

http://asgdtegdbcbnd7.in/main.php?page=a3331fc52a4eb9e6
http://urlquery.net/report.php?id=12456

http://cruzshort2.in/main.php?page=145d50e6bbda8532
http://urlquery.net/report.php?id=12457
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';

January 27, 2012, 07:05:18 am
Reply #1

Xylitol

  • Special Members
  • Jr. Member

  • Offline
  • *

  • 24
attack via mail
Code: [Select]
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 62.113.86.198) header.from=yana@zaocrown.ru; dkim=none header.d=zaocrown.ru; x-hmca=none
X-Message-Status: n:0:n
X-SID-PRA: Peterchen <yana@zaocrown.ru>
X-DKIM-Result: None
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: 11chDOWqoTkwsv9Zisdxewl5IIYWILDPeSlhgV0fO7IPJwx1ETSUWPiemfJ8h9qOi16HX4L0ct0YRtiOxwMWldToS7sLCKJRpeQ+k//NZM+OVCG02N6uflpNRZQoipA4
Received: from aha.ru ([62.113.86.198]) by COL0-MC3-F25.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Thu, 26 Jan 2012 03:56:33 -0800
Received: from [202.148.23.107] (account yana@zaocrown.ru HELO zaocrown.ru)
  by backend9.aha.ru (CommuniGate Pro SMTP 4.3.11)
  with ESMTPSA id 791124899; Thu, 26 Jan 2012 15:56:30 +0400
Message-ID: <D233FD24.8E11870D@zaocrown.ru>
Date: Thu, 26 Jan 2012 22:34:23 +1100
From: "Peterchen" <yana@zaocrown.ru>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.18) Gecko/20081125 Thunderbird/2.0.0.18
X-Accept-Language: en-us
MIME-Version: 1.0
To: <peterchen@live.cn>,
<pechlabouygue@live.co.uk>,
<philliphopley199020@live.co.uk>,
<pieter.pretorius@live.co.za>,
<pcanw@live.com>,
<pdmccullough@live.com>,
<pedrosharp@live.com>,
<peggyrebolle@live.com>,
<penny_bb@live.com>,
<pentri@live.com>,
<perfectionist52@live.com>,
<petar407@live.com>,
<peteruniqclas@live.com>,
<pfritz44@live.com>,
<phantranminhhung@live.com>,
<phatkhat@live.com>,
<philgust@live.com>,
<philkayoro@live.com>,
<philliplendon@live.com>,
<phoenix@live.com>,
<phoenix@live.com>,
<phrance@live.com>,
<phsecrets@live.com>,
<phy.soklen@live.com>,
<phyllotaxis@live.com>,
<pianokid54@live.com>,
<pickledjesus@live.com>,
<pinaki1037@live.com>,
<pinkelephants18@live.com>,
<pintilie_web_acces@live.com>,
<pirates007@live.com>,
<pirate_sephiroth@live.com>,
<penuliarbryan@live.com.ph>,
<pink-candy-skull@live.dk>,
<phoenixbytes@live.fr>,
<pindo@live.nl>,
<pelle@live.se>,
<pippia2@liveontheinter.net>,
<peter.hagan@liverpoolmuseums.org.uk>,
<pedro@lmbike.com.br>,
<phil.benson@lock-cottage.com>,
<peter.burton@lonsdalemetal.co.uk>,
<pentaweb@loopar.osa.pl>,
<peqjp1392@luis.vvsspeed.com>,
<petteri.kilpela@luukku.com>,
<pinkyladdu@lycos.com>,
<peter@lysvret.se>,
<pdicieri@mac.com>,
<peterf@mac.com>,
<piers_prs@mac.com>,
<peter@macquarieimports.com.au>,
<phoebe.tunbridge-steeds@magnoxsouthsites.com>,
<pdp_02@mail.bg>,
<petenixon@mail.com>,
<peterheins@mail.com>,
<peterjb@mail.com>,
<peteyfb@mail.com>,
<pinsoft@mail.com>,
<phowayoke@mail.md>,
<pegasus@mail.net.sa>,
<peakintaree@mail.ru>,
<penah98@mail.ru>,
<perlof96@mail.ru>,
<petya_peredelkin@mail.ru>,
<phillippe@mail.ru>,
<phantchi@mail.yahoo.com>,
<phill@mail2world.com>,
<phill@mail2world.com>,
<pedrolo@mailinator.com>,
<phidel@mailinator.com>,
<phozess@mailmad.com>,
<pettsen@mailme.dk>,
<pfgvyogtwo@mailref.net>,
<pete@mallam.org.uk>,
<pedro.nunes.cardoso@marinha.pt>,
<pierre@martineau.com>
Subject: Please update your info at BBB
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Return-Path: yana@zaocrown.ru
X-OriginalArrivalTime: 26 Jan 2012 11:56:33.0940 (UTC) FILETIME=[8CB1DD40:01CCDC21]

<body>
<table width="600" border="0" align="center" cellpadding="0"
cellspacing="0">
  <tr>
    <td width="380" height="70" style="font-size:14px;"
background="http://www.bbb.org/images/splash-bg.gif"></td>
    <td width="181" style="font-size:14px;"></td>
  </tr>
  <tr>
    <td colspan="2" style="font-size:14px;"><br>Hello,<br><br>

Many thanks for supporting your Better Business Bureau (BBB). <br><br>

Giving our service to BBB Accredited Businesses, we do our utmost to ensure
that the information we provide to potential consumers is as accurate as
possible. In order for us to provide the correct information to the public,
we ask that you review the data that we have recorded for your company.
<br><br>

Please use our ONLINE FORM to provide us with this your most recent data.
The URL below will take you directly to this form on our website: <br><br>

<a href="http://novanomed.com/tBedWciC/index.html">http://app.alaskaoregonw
esternwashington.bbb.org/sbq</a>  <br>
(UserID: 830376550031 Password: DzuALuK17)  <br><br>

Thank you in advance for your assistance, and we hope to hear from you
soon. <br><br>

Respectfully, <br><br>

Better Business Bureau <br>
Accreditation Services</td>
  </tr>
  <tr>
    <td colspan="2" align="center"><p><a href="javascript://"
style="font-size:12px;">Privacy Policy</a> | <a href="javascript://"
style="font-size:12px;">Terms of Use</a> | <a href="javascript://"
style="font-size:12px;">Trademarks</a> | <a href="javascript://"
style="font-size:12px;">Find a BBB</a> | <a href="javascript://"
style="font-size:12px;">BBB Directory</a><br>
    <span style="font-size:12px;color: #666;">&copy; 2011 Council of Better
Business Bureaus</span></td>
  </tr>
</table>
</body>

Code: [Select]
http://novanomed.com/tBedWciC/index.html
http://clostescape.com/search.php?page=ac2393a35636dfa1
http://clostescape.com/content/hhcp.php?c=118
http://clostescape.com/files/79
http://clostescape.com/files/82
http://clostescape.com/files/86
http://clostescape.com/files/87
http://clostescape.com/files/104
http://clostescape.com/files/105
http://clostescape.com/files/106
http://clostescape.com/files/107
http://clostescape.com/files/108
http://clostescape.com/files/109
http://clostescape.com/files/110
http://clostescape.com/files/111
http://clostescape.com/files/112
http://clostescape.com/files/113
http://clostescape.com/files/114
http://clostescape.com/files/115
http://clostescape.com/files/116
http://clostescape.com/files/117
http://clostescape.com/files/118
http://clostescape.com/files/119
http://clostescape.com/files/120
http://urlquery.net/report.php?id=18026
SELECT * FROM `users` WHERE `login` = 'admin '#--' and `password`='d6d36367ad2384f71489707e6fff0879921b50f9';