Help - Search - Members - Calendar
Full Version: Stelaartois.ru found [In List]
Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Sites Allegedly with problems of hacking/virus/0-iframes, autosearches etc ... > Sites hit by virusses or hacked
Susy
From a Cassandras Clicks PTP page (and leading to Toyboxonline)

page source:
<HTML>
<HEAD>

<TITLE>Cassandras Clicks - Paid To Promote!</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="ptpstyle.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
body {
margin-top: 0px;
margin-bottom: 0px;
margin-left: 0px;
margin-right: 0px;
}
.style1 {font-weight: bold}
-->
</style></head>

<body background="http://lin8.tripod.com/brnconfettibg.gif"><table width="100%" border="0" cellpadding="2" cellspacing="2">
<tr>
<b><td colspan="2"><div align="center" class="style1"><font size="2" color="800000"> <div align="center">Cassandras ClicksUser mgbland79705 has not been credited for your visit. </div>

</div></td>
</tr>
<tr>
<td width="433"><a href="http://www.cassandrasclicks.com/pages/index.php?refid=mgbland79705" target="_blank">
<img src="http://lin8.tripod.com/ccptpc.gif" width="468" height="60" border="0"></a></td>
<td><div align="right"><table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href=http://www.cassandrasclicks.com/scripts/runner.php?BA=3324&hash=6d4afc19fbf244986829f9af6e82b72d&url=http%3A%2F%2Fwww.freebee-mail.com%2Fpages%2Findex.php%3Frefid%3Ddraft29 target=_blank><img src=http://www.cassandrasclicks.com/scripts/runner.php?REDIRECT=http%3A%2F%2Fimg122.imageshack.us%2Fimg122%2F7797%2Ffreebee5xy.gif&hash=5c82a350f0c62d3657569e77503d8666 alt="Freebee-Mail" border=0></a></td></tr></table>

</div></td>
</tr>
</table>
<center>

<a href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=123805.10000008&type=4&subid=0"><IMG alt="Postercheckout.com" border="0" src="http://www.postercheckout.com/banners/pco_120x90_07092005.gif"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=123805.10000008&type=4&subid=0">

<!--Obeus.com Ads Begin-->
&lt;script type="text/javascript" src="http://obeus.com/initframe/1777/"></script><noscript><a href="http://obeus.com">Obeus.com</a> - <a href="http://obeus.com/pay-per-click-advertising/">Pay Per Click Advertising</a>, <a href="http://obeus.com/affiliate-program/">Pay Per Click Affiliate Program</a>, <a href="http://obeus.com/traffic-counter/">Free Traffic Counters</a>. More inforamation about <a href="http://obeus.com/site_info/2447/">Cassandras Clicks</a></noscript>
<!--Obeus.com Ads End-->

&nbsp;&nbsp;
<a href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=117710.10000058&type=4&subid=0"><IMG alt="Toys R Us" border="0" src="http://www.toysrus.com/graphics/promo/TRU/tru_120x60.jpg"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=117710.10000058&type=4&subid=0">



<table width="100%" border="0" cellpadding="2" cellspacing="2">
<tr>
<td width="120" align="center" valign="middle" bgcolor="#C3D1C3"><div align="center">
</div></td>
<td width="732" align="center" valign="middle" bgcolor="#C3D1C3">
<div align="center" class="puntitle"><span class="style1">
<a href="http://www.cassandrasclicks.com/pages/advertise.php" target="_blank">
<font size="2" color="#000000"><b>Advertise Here </b></font> </a> • <a href="http://www.cassandrasclicks.com/pages/index.php?refid=mgbland79705" target="_blank">

<font size="2" color="#000000"><b>Join</b> Cassandras Clicks </font> </a>• <a href="http://www.thetoyboxonline.com/pages/index.php?refid=77" target="_blank">
<font size="2" color="#000000"><b>Open Site in New Window </b></font></a>• <a href="http://www.cassandrasclicks.com/pages/ptpabuse.php?aid=219" target="_blank"><font size="2" color="#000000">Report Abuse</font></a></span> </div></td>
<td width="120" align="center" valign="middle" bgcolor="#C3D1C3">&nbsp;</td>
</tr>

<tr>

<td width="120" align="center" valign="top">
<a href="http://www.adbrite.com/mb/?spid=22307&afb=120x60-1-white">
<img src="http://files.adbrite.com/mb/images/120x60-1-white.gif" border="0"></a>

<!-- Put SkyScreeper code -->

<!-- Begin: AdBrite -->
<style type="text/css">
.adHeadline {font: bold 10pt Arial; text-decoration: underline; color: blue;}
.adText {font: normal 10pt Arial; text-decoration: none; color: black;}
</style>
&lt;script type="text/javascript" src="http://4.adbrite.com/mb/text_group.php?sid=153694&br=1&dk=736d616c6c20627573696e6573735f355f315f776562"></script>
<p />
<div><a class="adHeadline" target="_top" href="http://www.adbrite.com/mb/commerce/purchase_form.php?opid=153694&afsid=1">Your Ad Here</a></div>
<!-- End: AdBrite -->

<a href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=117710.10000058&type=4&subid=0"><IMG alt="Toys R Us" border="0" src="http://www.toysrus.com/graphics/promo/TRU/tru_120x60.jpg"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=117710.10000058&type=4&subid=0">

<a href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=123427.10001403&type=4&subid=0"><IMG alt="Wal-Mart.com USA, LLC" border="0" src="http://i.walmart.com/i/b/06/camp/Clearance/clearence_120X60_affil.gif"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=123427.10001403&type=4&subid=0">

</td>

<td height="600" align="right" valign="top"><iframe src="http://www.thetoyboxonline.com/pages/index.php?refid=77" name="a" width="99%" marginwidth="1" height="100%" marginheight="1" align="middle" scrolling="yes"></iframe></td>

<td width="120" align="center" valign="top"><table border=0 cellpadding=0 cellspacing=0><tr><td><a target=_blank href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=94521.10000054&type=4&subid=0"><IMG alt="Atom Entertainment (formerly AtomShockwave)" border="0" src="http://www.shockwave.com/2006/affiliates/gb_free_anim_120x600.gif"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=94521.10000054&type=4&subid=0"></td></tr></table><br>

<iframe src="http://rcm.amazon.com/e/cm?t=cassandrasc0a-20&o=1&p=20&l=ur1&category=toys&banner=13AGT4ZGFFMWXMWX2102&f=ifr" width="120" height="90" scrolling="no" border="0" marginwidth="0" style="border:none;" frameborder="0"></iframe>
<br><br>
<a href="http://click.linksynergy.com/fs-bin/click?id=stMPZB1nF1s&offerid=92932.10000001&type=4&subid=0"><IMG alt="Ty's Toy Box, LLC" border="0" src="http://pics1.edeal.com/images/p2/wl/Tystoybox/ebay/Banner Ads/Ty's Toy Box/TTB-Banner-120x60.jpg"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=stMPZB1nF1s&bids=92932.10000001&type=4&subid=0">


</td>
</tr>


<tr>
<td align="center" valign="middle"><!-- Alexa perhaps --></td>
<td><div align="center">


<!-- Banner code here -->




&lt;script type="text/javascript">
var sa_client = 'de2a53436bab88ee99cd17409bad171a';
var sa_pline = '0';
var sa_maxads = '4';
var sa_bgcolor = 'FFFFFF';
var sa_superbordercolor = 'AAAAFF';
var sa_linkcolor = '0000A0';
var sa_desccolor = '000000';
var sa_urlcolor = '008000';
var sa_b = '0';
var sa_format = 'banner_728x90_4';
var sa_width = '728';
var sa_height = '90';
var sa_location = '0';
</script>
&lt;script type="text/javascript" src="http://sa.entireweb.com/sense.js"></script>


&lt;script type="text/javascript"><!--
amazon_ad_tag = "cassandrasc0a-20"; amazon_ad_width = "728"; amazon_ad_height = "90";//--></script>

&lt;script type="text/javascript" src="http://www.assoc-amazon.com/s/ads.js"></script>


<!-- End banner code -->


<br><br><br>
</div></td>
<td>&nbsp;</td>
</tr>
</table>
<!-- Other popin and popup codes here -->

</body>

</html>


The Stelaartois.ru goes to:

http://www.thetoyboxonline.com/pages/index.php?refid=77

The bad link:
http://www.stelaartois.ru/index2.php
first it loads some java applet and when refreshed it says "f 0ff" LOL (EXCEPT IT'S SPELLED OUT) ae.gif

at the bottom of the source code: <iframe name='counter' src='http://www.stelaartois.ru/index2.php' height='16' width='16' frameborder='0' scrolling='no'></iframe><iframe name='counter' src='http://www.stelaartois.ru/index2.php' height='16' width='16' frameborder='0' scrolling='no'></iframe>

It's the only iframe on the site, and it says counter....normally counters are little more polite, so it's very likely in footer.php file


Have sent "REPORT THIS PAGE" info to Cassandra's and will alert Toyboxonline.

http://usera.imagecave.com/TxTornado/toyshot.jpg
wagdoll
This is a current readout for thetoyboxonline

CODE
(Level: 0) Url checked:
http://thetoyboxonline.com
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
http://www.stelaartois.ru/index2.php
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
http://www.stelaartois.ru/index2.php
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
http://www.stelaartois.ru/index2.php
Zeroiframes detected on this site: 0
No ad codes identified


Susy are you running noscript? I am concerned that any part of that stelaartois ran for you, did you do any virus scans after seeing that page? You could also add stelaartois.ru* to adblock if you use it and/or your hosts file and restricted sites for anyone using IE
Susy
It was showing up in the list of sites NoScript blocked, yes. It didn't do anything to the computer thankfully. Sini helped me identify the above.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.