Help - Search - Members - Calendar
Full Version: Miva Seek 0iFrame found
Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Sites Allegedly with problems of hacking/virus/0-iframes, autosearches etc ... > Nasties, trojans, 0iframes and downloads when surfing : Info and discussions
longshanks1971
Jun 30 2008, 10:53 AM
OK, I can't identify it from the page source code, it is showing the same miva URL in no-script and adblock, its expanded on the page as you can see from the screen shot, so why can't I see the frame in the page source? Neither Jutakys or Goobie are showing it hence me trying to find it in the page source. Any help gratefully appreciated.

Running in the following page: hxxp://www.mivaseek.com/myport.php?ref=gming

Mvent identified it as running in; hxxp://www.bonniemails.com/images/bannerO1.gif

The screen shot of the frame expanded is;






The source data below;

<HTML>
<HEAD>
<TITLE>bonniemails.com - Paid To Promote!</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="ptpstyle.css" rel="stylesheet" type="text/css">
<style type="text/css">
<!--
body {
margin-top: 0px;
margin-bottom: 0px;
margin-left: 0px;
margin-right: 0px;
}
.style1 {font-weight: bold}
-->
</style></head>

<body><table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td colspan="2"><div align="center" class="style1">
</tr>
<tr>
<td><div align="right"><iframe src='http://www.bonniemails.com/images/bannerO1.gif' width='468' height='80' frameborder='0' scrolling='no'></iframe></td>
<td><!-- BEGIN STANDARD TAG - 468 x 60 - bonniemails.com: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=468 HEIGHT=60 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=468x60&section=321268"></IFRAME>
<!-- END TAG -->
</div></td>
</tr>
</table>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<td width="0" align="center" valign="top">
<!-- Put SkyScreeper code -->

<!-- End code -->
</td>
<td height="650" align="center" valign="top"><iframe src="http://www.jacobmails.com/index.php?refid=admin" name="a" width="100%" marginwidth="1" height="100%" marginheight="1" align="middle" scrolling="yes"></iframe></td>
</tr>
<tr>
<td align="center" valign="middle"><!-- Alexa perhaps --></td>
<td><div align="center"><!-- BEGIN STANDARD TAG - 468 x 60 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=468 HEIGHT=60 SRC="http://servedby.morningfalls.com/st?ad_type=iframe&ad_size=468x60&section=340131"></IFRAME>
<!-- END TAG -->
<!-- BEGIN STANDARD TAG - 468 x 60 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=468 HEIGHT=60 SRC="http://ad.globalinteractive.com/st?ad_type=iframe&ad_size=468x60&section=328644"></IFRAME>
<!-- END TAG -->
</td>
<!-- Banner code here -->
<!-- End banner code -->
</div></td>
<td>&nbsp;</td>
</tr>
</table>
<!-- Other popin and popup codes here -->
<!-- End popin/popup codes -->
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr><td width="120" align="center" valign="top"><!-- BEGIN STANDARD TAG - 120 x 600 - bonniemails: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=120 HEIGHT=600 SRC="http://ad.spot200.com/st?ad_type=iframe&ad_size=120x600&section=337034"></IFRAME>
<!-- END TAG -->
<td width="160" align="center" valign="top"><!-- BEGIN STANDARD TAG - 160 x 600 - bonniemails.com: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=160 HEIGHT=600 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=160x600&section=321268"></IFRAME>
<!-- END TAG --></td>
<!-- Put SkyScreeper code -->
<!-- End code -->
</td><td height="600" align="center" valign="top"><!-- BEGIN STANDARD TAG - 300 x 250 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=300 HEIGHT=250 SRC="http://ad.globalinteractive.com/st?ad_type=iframe&ad_size=300x250&section=328644"></IFRAME>
<!-- END TAG --><!-- BEGIN STANDARD TAG - 300 x 250 - bonniemails.com: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=300 HEIGHT=250 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=300x250&section=321268"></IFRAME>
<!-- END TAG --></td>
<td width="120" align="center" valign="top"><!-- BEGIN STANDARD TAG - 160 x 600 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=160 HEIGHT=600 SRC="http://ad.globalinteractive.com/st?ad_type=iframe&ad_size=160x600&section=328644"></IFRAME>
<!-- END TAG -->
<td width="120" align="center" valign="top"><!-- BEGIN STANDARD TAG - 120 x 600 - bonniemails.com: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=120 HEIGHT=600 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=120x600&section=321268"></IFRAME>
<!-- END TAG -->
<td width="120" align="center" valign="top"><!-- BEGIN STANDARD TAG - 120 x 600 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=120 HEIGHT=600 SRC="http://ad.globalinteractive.com/st?ad_type=iframe&ad_size=120x600&section=328644"></IFRAME>
<!-- END TAG --></td>
</tr>
<table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>
<div align="center"><!-- BEGIN STANDARD TAG - 728 x 90 - bonniemails.com: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=728 HEIGHT=90 SRC="http://adserving.cpxinteractive.com/st?ad_type=iframe&ad_size=728x90&section=321268"></IFRAME>
<!-- END TAG -->
<div align="center"><!-- BEGIN STANDARD TAG - 728 x 90 - bonniemails: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=728 HEIGHT=90 SRC="http://ad.spot200.com/st?ad_type=iframe&ad_size=728x90&section=337034"></IFRAME>
<!-- END TAG -->
<div align="center"><!-- BEGIN STANDARD TAG - 728 x 90 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=728 HEIGHT=90 SRC="http://ad.globalinteractive.com/st?ad_type=iframe&ad_size=728x90&section=328644"></IFRAME>
<!-- END TAG -->
</tr>

</body>
</html>Thanks,

Craig
wagdoll
Jun 30 2008, 11:33 AM
This is quite clever, not seen this before.

You couldn't see it in the code because it's coded as a 2nd level. Mvent is correct is in the place you've said hxxp://www.bonniemails.com/images/bannerO1.gif and if you put that into a new window you only see the banner.

But, if you click on the banner and do view frame source, you get this:

CODE
<iframe src='http://www.mivaseek.com/myport.php?ref=gming' width='0' height='0' frameborder='0' scrolling='no'></iframe>

<img border='0' src='http://www.bonniemails.com/images/banner01.gif' width='468' height='60'>
</head>
<body bgcolor="#FECF8B" >


There's the iframe ab.gif

Surfjunky has posted on WIW forum about several massively unsustainable sites with 0 iframes and the refid gming. I would say bonniemails needs going on the list of iframe cheaters ah.gif
longshanks1971
Jun 30 2008, 02:26 PM
So thats bonnie mails thats responsible even though it's 2nd level? Have they done it that way to try and avoid them being held responsible, like if it was found on level 1?

Just want to make sure I understand it before I report it.

Take care,

Craig
wagdoll
Jul 1 2008, 12:12 AM
I believe they've coded it like this in the hope that people wouldn't be able to find it as easily and attribute it to them. But it's clearly being controlled by the owner of bonniemails. The name bonnie is on the whois for this site and those unsustainable ones and they all have the refid gming on the site in the 0 iframe. Also the 0 iframe is located on the bonniemails domain, and the owner has responsibility for putting a 0 iframe on there with their refid.
longshanks1971
Jul 1 2008, 02:48 AM
Thanks very much, I just wanted to make sure I understood it. Complaint has been submitted.

Thanks again and take care,

Craig
ccofer
Mar 23 2009, 06:49 PM
I know this is an older thread but I just wanted to ask if anyone had problems with this recently , because I just clicked on a bonniemails banner on mentalemails and my virus protection went crazy. az.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.