Get Paid Forum - Get Paid Discussion > Poker PTR

Full Version: Poker PTR - Adult Site in iFrame

Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Sites Allegedly with problems of hacking/virus/0-iframes, autosearches etc ... > Sites with 0-iframes or other nasty codes

longshanks1971

Aug 2 2008, 10:18 AM

This one is a difficult one to work out, I think it's in the rotator and not permanently placed on the site as each time you refresh you get a different notification and on some no notifications and what appears to be a clean page. So I'll post what I have incase more expirienced hunters can shed any light on it.

Mvent2 gives the warning of adshuh and each time I transfer the URL to Jutakys it shows clean, but I can see sextvpal and adshuh in the scripts identified via No-script, but I can't trace it on the source code.

Source code URL: hxxp://www.pokerptr.info/pages/poneyby.php?refid=xxx

Screen shot of the site in the frame;

Complete source code;

CODE

<pre id="line1"><html>
<head>
<title>pokerptr.info- Get Paid to Read your eMails</title>
<meta name="keywords" content="pokerptr.info"
<meta name="Description"pokerptr.info content="- Get paid to read emails">
<meta name="ROBOTS" content="ALL">
<meta name="distribution" content="global">
<meta name="distribution" content="global">
<STYLE type=text/css>BODY {
 SCROLLBAR-ARROW-COLOR: #FFFFFF; SCROLLBAR-TRACK-COLOR: #000000; SCROLLBAR-BASE-COLOR: #000000; scrollbar-dark-shadow-color: #000000
}
</STYLE>
</head>
<BODY BACKGROUND="../images/design/D62-BGMain.jpg" bgcolor="#FFFFFF" text="#00000" link="#000000" vlink="#000000" alink="#000000">
<center><table BORDER=0 CELLSPACING=0 CELLPADDING=0 COLS=1 WIDTH="780" >
<div align="center">
 <table border="0" cellpadding="0" cellspacing="0" width="780">
 <tr>
</pre><pre id="line19"> <td width="780">
 <center><img src="../images/design/D62-Logo1.jpg" width="400" height="150" bordercolor="#000000" border="0">
 </td>
 </tr>
 </table>

<div align="center">
 <table border="0" cellpadding="5" cellspacing="8" width="780">
 <tr>
 <td width="780">
</pre><pre id="line29"> <center>
<a href="http://pokerptr.info/pages/confirm.php"><b>Join PokerPTR</b></a> - - <a href="http://pokerptr.info/pages/advertise.php"><b>Purchase Your Affiliate Page</b></a>

 </td>
 </tr>
 </table>

<iframe src=http://pokerptr.info/scripts/runner.php?IFRAME=1&GA=main space=0 vspace=0 width=468 height=60 marginwidth=0 marginheight=0 frameborder=0 scrolling=no>
<script language="JavaScript" src="http://pokerptr.info/scripts/runner.php?JS=1&GA=main">
</script>
</pre><pre id="line40"></iframe>
<iframe src=http://pokerptr.info/scripts/runner.php?IFRAME=1&GA=main space=0 vspace=0 width=468 height=60 marginwidth=0 marginheight=0 frameborder=0 scrolling=no>
<script language="JavaScript" src="http://pokerptr.info/scripts/runner.php?JS=1&GA=main">
</script>
</iframe>

<table BORDER=1 CELLSPACING=8 CELLPADDING=0 COLS=2 WIDTH="760" height="434" bordercolor="#000000"
background="../images/design/D62-BGFrame.jpg">
<tr VALIGN=TOP>
<td VALIGN=TOP width="150" height="0" background="#FFFFFF">
<img border="0" src="../images/design/D62-ButtonSide.jpg" width="100%" height="100%">
 <br>
</td>
<td VALIGN=TOP width="500" height="80" bgcolor="#FFFFFF"><p align="center">
<iframe src=http://pokerptr.info/scripts/runner.php?IFRAME=1&GA=banner space=0 vspace=0 width=468 height=60 marginwidth=0 marginheight=0 frameborder=0 scrolling=no>
<script language="JavaScript" src="http://pokerptr.info/scripts/runner.php?JS=1&GA=banner">
</script>
</iframe>
</td>
<td width="150" height="0" background="../images/design/D62-BGFrame.jpg">
</pre><pre id="line61"><p align="center"><img border="0" src="../images/design/D62-ButtonSide.jpg" width="100%" height="100%"></p>
</td>
</center>
<tr VALIGN=TOP>
<td VALIGN=TOP width="150" height="334" rowspan="2" background="../images/design/D62-BGSide.jpg">
 <p align="center"> <font color="#990000"><b>Affiliates Links:</B></font>
 <p align="center"><b><font size="2">
<a href="http://pokerptr.info/scripts/runner.php?BA=482&hash=5f713e26806e2c6a444b16f8f92a1a77&url=http%3A%2F%2Fvistaclicker.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">VistaClickers</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=483&hash=37c47d230f94fc01d6d244a74d5ddb1b&url=http%3A%2F%2Fwallabymail.com%2Fpages%2Fptp.php%3Frefid%3Dponeyby" target="_blank">Wallaby Mails</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=484&hash=72994c61747aeacaa273e1a721efb1f9&url=http%3A%2F%2Fcashships.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">CashShips</a><br><br>
</pre><pre id="line71"><a href="http://pokerptr.info/scripts/runner.php?BA=485&hash=7f51187ca3701c0273c3e53534f888c7&url=http%3A%2F%2Flavendernlacemails.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">LavenderNLace</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=486&hash=4e5819592654c8f6e64502432fd8795c&url=http%3A%2F%2Fwww.sharkcash.net%2Fpages%2Fptp.php%3Frefid%3Dponeyby" target="_blank">Sharkcash</a><br><br>
______________________</font><br><center>
<table border="0" cellpadding="0" cellspacing="0"><tr><td><div><script src="http://api.widgetbucks.com/script/ads.js?uid=yCvwPTSRMFVpAxnh"></script></div></td></tr></table><br>

 <br><center>

</pre><pre id="line83"><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR>
<td VALIGN=TOP background="../images/design/D62-BGCenter.jpg" width="500" height="155">

<table width="100%" border="0" cellspacing="5" cellpadding="5" align="CENTER">
<tr>

<td VALIGN=TOP>
<center><font face="Comic Sans MS">


</td>

<DIV ALIGN="LEFT">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
</pre><pre id="line102"><br><center><font size="5"><font color="990033"><b>Poneyby's Affiliate Page</b></font color></font size><br><br><br>
<center><a href="http://pokerptr.info/scripts/runner.php?BA=479&hash=0f896d9bf8a22331d04b36269ca3dd49&url=http%3A%2F%2Fanything-goes.info%2Fpages%2Fptp.php%3Frefid%3Dponeyby" target="_blank"><img src="http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fanything-goes.info%2Fimages%2Fptpbanner2.jpg&hash=ac283e560d88c265172aac55e90926da" alt="" border="0"></a><br><br>
<font face="Arial" size="2"><center><b><br>poneyby also get paid for visitors clicking on the banner above.<br><br>
-------------------------------------------------------------
<br><br>
<table width="85%" border="0" cellspacing="5" cellpadding="5" align="center">
<tr>
<td align="center"> <b>
</b> <b><font size="2">Members of pokerptr.info get paid to click on the banners below</b>
<hr align="center">
<b><font size="2">
<SCRIPT>
function creditpop(ptcid){
var url='http://pokerptr.info/scripts/runner.php?PA=' + ptcid +'';
ptccredit=window.open(url,'ptccredit','toolbar=no,location=no,scrollbars=no,resizable=no,width=640,height=80');
setTimeout( "window.location.replace( '/pages/poneyby.php?blur=1&startpos=0' );", 2000 );
}
function reloadpage(waittime){
setTimeout( "window.location.replace( '/pages/poneyby.php?blur=1&startpos=0' );", waittime*900 );
}
</pre><pre id="line122"></script>
<table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href="http://pokerptr.info/scripts/runner.php?PA=199" target=_ptc onclick="java script:reloadpage(10)"><img src=http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fi178.photobucket.com%2Falbums%2Fw241%2Flaf384%2Fpandapromo.gif&hash=29fb7ad057be979ea28be17f616aa676 alt="" border=0></a></td></tr></table>The ad above is worth 2 point(s)<br><br><table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href="http://pokerptr.info/scripts/runner.php?PA=198" target=_ptc onclick="java script:reloadpage(10)"><img src=http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.cashemail4u.com%2Fimages%2Fbanner1.gif&hash=d49b0d2699bd3970a442fcbd3d7029c0 alt="" border=0></a></td></tr></table>The ad above is worth 2 point(s)<br><br><table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href="http://pokerptr.info/scripts/runner.php?PA=200" target=_ptc onclick="java script:reloadpage(10)"><img src=http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.polarbearclicks.com%2Fimages%2Fbanner1.gif&hash=b4640b02ce503920ceb84ba4834982e3 alt="" border=0></a></td></tr></table>The ad above is worth 2 point(s)<br><br><table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href="http://pokerptr.info/scripts/runner.php?PA=201" target=_ptc onclick="java script:reloadpage(10)"><img src=http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.aquamails.com%2Fpages%2Fimages%2Fbanner1.gif&hash=929e782c3a4cebe0a615202857b7e239 alt="" border=0></a></td></tr></table>The ad above is worth 2 point(s)<br><br><table border=0 cellpadding=0 cellspacing=0 bgcolor=ffffff><tr><td><a href="http://pokerptr.info/scripts/runner.php?PA=202" target=_ptc onclick="java script:reloadpage(10)"><img src=http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.cash-hi.com%2Fimages%2Fbanner1.gif&hash=8845c7ced06b9cc080d579df7298b029 alt="" border=0></a></td></tr></table>The ad above is worth 2 point(s)<br><br><br> <a href=/pages/poneyby.php?startpos=5><b>Next Page</b></a><br><br><b>1</b><br> <br>
<br>
</font> </b></td>
</tr>
</table><center>

</pre><pre id="line129"><center><a href="http://pokerptr.info/scripts/runner.php?BA=481&hash=34d944a88365050af351c0477bc7a63a&url=http%3A%2F%2Ffairyclicksptr.com%2Fpages%2Fptp.php%3Frefid%3Dponeyby" target="_blank"><img src="http://pokerptr.info/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.fairyclicksptr.com%2Fimages%2Ffcbanner2.gif&hash=dfc5337f60a4601f71dea3d1fb3ab24c" alt="" border="0"></a><br><br>
<a href="http://www.pokerptr.info/pages/enter.php"><font face="Arial" size="1"><b>RETURN TO MEMBERS AREA</font></a><br><br>
<a href="http://pokerptr.info/pages/affiliatepages.php"><font face="Arial" size="1"><b>RETURN TO AFFILIATE PAGES</font></a><br><br><br>
<div align="left">
<br>
 <div align="center">
 <a href="http://sitesenhanced.com/ptp.php" target=_"blank"><b>Installed by sitesenhanced.com<br><u>Purchase your plugin here</a></font></div><br><br>

</pre><pre id="line140">

<td width="150" height="334" rowspan="2" background="../images/design/D62-BGSide.jpg">
<p align="center">
<font color="#990000"><B>Affiliates Links:</font>
<br>
<font size="2"><center>
<a href="http://pokerptr.info/scripts/runner.php?BA=487&hash=4550eaacc255dcf48ae25bb9884e6435&url=http%3A%2F%2Fseaturtlesptr.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">SeaTurtles</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=488&hash=49f28276e016e68306edf5c34061c098&url=http%3A%2F%2Flelasworldptr.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">LelasWorld ptr</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=489&hash=aafa9b2d06b402fb842dc3d893d2bd96&url=http%3A%2F%2Fwww.brandymail.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">BrandyMails</a><br><br>
</pre><pre id="line154"><a href="http://pokerptr.info/scripts/runner.php?BA=490&hash=6d018e170d5d76e58451cc18290edf29&url=http%3A%2F%2Fwww.jaguarcash.com%2Fpages%2Findex.php%3Frefid%3Dponeyby" target="_blank">Jaguar Cash</a><br><br>
<a href="http://pokerptr.info/scripts/runner.php?BA=491&hash=16311a211bf8df50ac15d0f6afea31aa&url=http%3A%2F%2Ftrollmails.com%2Fpages%2Fptp.php%3Frefid%3Dponeyby" target="_blank">TrollS</a><br><br>
______________________</font><br><center>
<div align="center"><br><table border="0" cellpadding="0" cellspacing="0"><tr><td><a target=_blank href="http://click.linksynergy.com/fs-bin/click?id=BMgPGw7/tt8&offerid=114684.10000018&type=4&subid=0"><IMG alt="Inspired Silver" border="0" src="http://www.inspiredsilver.com/images/aff/vday-120x600.gif"></a><IMG border="0" width="1" height="1" src="http://ad.linksynergy.com/fs-bin/show?id=BMgPGw7/tt8&bids=114684.10000018&type=4&subid=0"></td></tr></table></B></font>
<br>
<br>

<p align="left">&nbsp;</font>
 <div align="left">
 <table border="0" cellpadding="0" cellspacing="0" width="100%">
 <tr>
</pre><pre id="line165"> <td width="100%">
</td>
 </tr>
 </table>
 </div>

<center>
<p align="left"><font color="#000000">&nbsp;</font>
 <div align="left">
 <table border="0" cellpadding="0" cellspacing="0" width="100%">
</pre><pre id="line176"> <tr>
 <td width="100%">
 </td>
 </tr>
 </table>
 </div>
<BR>

 </td>
 </tr>
</pre><pre id="line186"> </table>
 </div>

<center>
<br>
<table width="100%"> <tr> <td valign="top" align="middle" height="28"> <DIV
ALIGN="center"><div style="text-align:center; COLOR:#990000; FONT-SIZE:12px; font-weight:bold;
font-familiy:Amazone BT;">Owned and Operated By Ronald Woodfolk aka spchlss711<br>

All Rights Reserved. 2007 - 2008. pokerptr.info <br>Powered by <a href="http://cashcrusader.myecom.net" target="_blank"><font color="#990000">Cash Crusader</a> <br/>Site Design by <a href=
"http://www.crbmarketing.com/CRBBanners/banners.php" target="_blank"><font color="#990000"> Carla</a> </div><BR> </td> </tr> </table>
</pre><pre id="line197"><center>
<iframe src=http://pokerptr.info/scripts/runner.php?IFRAME=1&GA=banner space=0 vspace=0 width=468 height=60 marginwidth=0 marginheight=0 frameborder=0 scrolling=no>
<script language="JavaScript" src="http://pokerptr.info/scripts/runner.php?JS=1&GA=banner">
</script>
</iframe><br><br>

<table border="0" cellpadding="0" cellspacing="0"><tr><td><a target=_blank href='http://www.axill.com/trackingcode.aspx?affid=37738&pid=3948&bid=16420&AXID=37738x'><img border=0 src="http://axill.com/banners/3948_728x90_5.gif"/></a></td></tr></table><br>
<table border="0" cellpadding="0" cellspacing="0"><tr><td><a target=_blank href="http://www.tkqlhce.com/click-2842929-10485859" target="_top">
<img src="http://www.awltovhc.com/image-2842929-10485859" width="728" height="90" alt="728x90 CJ Media" border="0"/></a></td></tr></table><br>

</center>
</pre>

wagdoll

Aug 2 2008, 01:09 PM

I found two lots of ads huh on there - where the vnsex.info is in a 0 iframe

The first is a 468 banner rotator

CODE

The bottom one is a leaderboard and I can't get into it via the normal source code, but I can see it doing select all then view selection source, also with view source chart from a FF add on and with firebug add on for firefox.

This is what appears with select all and view selection source

CODE

longshanks1971

Aug 2 2008, 01:17 PM

Thanks very much for that, I'll have a practice using the methods you described to see if I can work it out and hopefuly, put it to use next time.

Thanks again and take care,

Craig

longshanks1971

Aug 11 2008, 02:37 PM

OK, they are still there, from wagdolls method above to get the code below;

CODE

</script>
<script type="text/javascript" src="http://www.adshuh.com/member/adshuh.js"></script><script language="javascript" src="http://www.adshuh.com/member/pb.js"></script><iframe src="http://www.adshuh.com/pb.asp?pid=31200&p=1&b=5&cat=21" frameborder="0" height="105" scrolling="no" width="728"></iframe>

The url in that code that launches the frames is:

CODE

http://www.adshuh.com/pb.asp?pid=31200&p=1&b=5&cat=21

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.