Help - Search - Members - Calendar
Full Version: Hosting Emails - Blueadvertise found
Get Paid Forum - Get Paid Discussion > Get Paid To Programs > Sites Allegedly with problems of hacking/virus/0-iframes, autosearches etc ... > Sites with 0-iframes or other nasty codes
longshanks1971
Oct 1 2008, 09:55 AM
Source code URL: hxxp://www.hostingemails.com/pages/index.php?refid=mailreader

Blueadvertise found, this has been reported.

Extracted code;

CODE
<iframe width="120" height="600" allowtransparency="false" frameborder="0" hspace="0" vspace="0" marginheight="0" marginwidth="0" scrolling="no"
src="http://adserver2.blueadvertise.com/b120x600.php?uid=zeng1982"></iframe>


Complete code;

CODE
<html>
<head>
<title>Welcome to hostingemails.com</title>
<meta name="keywords" content="Advertising, Get Paid to Surf the Web, Get Paid to Surf, Earn Free Money, paid surfing, viewbars, mlm, make money with web site, cashbars, get paid to search the web, get paid to read emails, referrals, sponsors, affiliate programs, ads, sponsors, associate programs, partner programs, webmaster, revenue, commissions, affiliates, associates, surf for pay, surf for cash, surf to earn, directories, partners, referrals, program, sell, income, money making, business opportunities, get paid to surf the net, free, easy money, cash, money, extra income, online, earn money at home, freebies, Internet, money tree, make money, top, top sites, top money sites, mlm, easy, pay, paid, earn, cash, chat, affiliates, www, web, residual, email, xxxxxxx">
<meta name="description" content="Get paid to read emails!">
<meta name="robots" content="ALL">
<meta name="distribution" content="global">
<meta name="design-by" content="Pro-Design.in">
<meta  http-equiv=Content-Type content="text/html; ch(Censored Word)t=windows-1252">
<link href="http://www.hostemails.com/pages/style.css" rel="stylesheet" type="text/css">
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_preloadimages2() { //v3.0
  var d=document; if(d.images2){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadimages2.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}
//-->
</script>
<STYLE type="text/css">
<!--

/* CSS For showing random baner/texads*/
.spxBanner {
  border-width:1px;
  border-color:#666666;
}
.spxTextad {
    font-family:verdana;
    font-size:10px;
}
.spxTextadD1 {
}
.spxTextadD2 {
}
/***/

table {
    font-family:Verdana,arial;
    font-size:12px;
}
.STYLE2 {color: #000000}
.STYLE3 {color: #D4D0C8}
.STYLE4 {color: #9B9B9B}
-->
</STYLE>
</head>

<body leftmargin="0" topmargin="0" marginheight="0" marginwidth="0" bgcolor="#3399CC" alink="#294A7B" link="#000000" vlink="#000000" style="text-align: center">
<table width="850" border="0" cellspacing="0" cellpadding="0" align="center">
  <tr>
    <td height="5"></td>
  </tr>
<table width="850" height="144" border="0" align="center" cellpadding="0" cellspacing="0">
  <td height="144" colspan="8" valign="top"><img src="../../images/logo.jpg" width="850" height="144">
  
<TBODY>
        <TR>
    <td height="30" colspan="4"><table width="852" height="30" border="0">

       <tr>
        <td width="288" height="40" bgcolor="#CCFFFF"><div align="center"><span class="STYLE4"></span><img src="../../images/hs.jpg" width="288" height="40"></div></td>
        <td width="86" bgcolor="#CCFFFF"><div align="center" class="STYLE5">
          <p><strong><a href="/pages/index.php">Home</a></strong></p>
        </div></td>
        <td width="86" bgcolor="#CCFFFF"><div align="center" class="STYLE5">
          <p><strong><a href="/pages/confirm.php">Join</a></strong></p>
        </div></td>

        <td width="85" bgcolor="#CCFFFF"><div align="center" class="STYLE5">
          <p><strong><a href="/pages/advertise.php">Advertise</a> </strong></p>
        </div></td>
        <td width="85" bgcolor="#CCFFFF"><div align="center" class="STYLE5">
          <p><strong><a href="/pages/enter.php">Members</a> </strong></p>
        </div></td>
        <td width="85" bgcolor="#CCFFFF"><div align="center" class="STYLE5">

          <p><strong><a href="/pages/gold.php">Upgrade</a></strong></p>
        </div></td>
        <td width="85" bgcolor="#CCFFFF"><div align="center" class="STYLE5">
          <p><strong><a href="/pages/contact.php">Contact</a> </strong></p>
        </div></td>
</tr>
</table>
<tr><td valign="top"><table width=848 border="0" bgcolor="#FFFFFF" align=center cellspacing="0" cellpadding="2">

<tr><td width="170" valign="top" bgcolor=""><table  width="170" border="1" cellpadding="0" cellspacing="0" bordercolor="#E6E6E6">
<tr><td height="25" bgcolor="#FFFFFF" class="style3"><div align="center"><B><font color="#000000">Statistics</font></B></FONT><FONT COLOR="#E6E6E6"><B> </B></FONT> </div></td>
  </tr>
  <td HEIGHT="100" class="style2"><TABLE WIDTH="88%" height="0" ALIGN="CENTER" CELLSPACING="0" style="border-collapse: collapse" bordercolor="#111111">
        <TR>
          <TD height="22" valign="top" CLASS="style3"><div align="center"><span class="STYLE2">Total Members</span></div></TD>
        </TR>
        <TR>

          <TD height="22" valign="top" CLASS="style3"><div align="center" class="STYLE2">776</div></TD>
        </TR>
        <TR>
          <TD height="22" valign="top" CLASS="style3"><div align="center"><span class="STYLE2">Total Payouts</span></div></TD>
        </TR>
        <TR>
          <TD height="22" valign="top" CLASS="style3"><div align="center" class="STYLE2">60,540.00</div></TD>

        </TR>

      </TABLE></td>
  </tr>
</table>
    <table width="170" border="1" cellpadding="1" cellspacing="0" bordercolor="#E6E6E6"><tr>
              <td height="25" bgcolor="#FFFFFF" class="style3"><div align="center"><strong></B><font color="#000000">News & Events</font></B></strong></div></td>
      </tr>
  <td width="170" height="50" background="#E6E6E6" class="style3"><TABLE WIDTH="88%" height="0" ALIGN="CENTER" CELLSPACING="0">

        <tr>
          <TD height="20" valign="top" CLASS="style2"><div align="center"><a href="http://www.cirtexhosting.com/affiliates/idevaffiliate.php?id=655_8_1_13" target="_blank"><img border="0" src="http://www.cirtexhosting.com/affiliates/banners/cirtexhosting_120_60_02.gif" width="120" height="60"></a>
        </tr>              
    </TABLE></td>
    </table>
    <table width="170" border="1" cellpadding="1" cellspacing="0" bordercolor="#E6E6E6">
            <tr><td height="25" bgcolor="#FFFFFF" class="style3"><div align="center"><strong></B><font color="#000000">Advertisement</font></B></strong></div></td>
      </tr>
      <td width="170" height="600" background="#E6E6E6"><div align=center><iframe width="120" height="600" allowtransparency="false" frameborder="0" hspace="0" vspace="0" marginheight="0" marginwidth="0" scrolling="no"
src="http://adserver2.blueadvertise.com/b120x600.php?uid=zeng1982"></iframe>

<!-- END PROFIBURNER.COM -->
    </table>
   </td>
<td valign="top" bordercolor="#E6E6E6" width="80%" align="left">
<div align="center"><a href="http://www.hostingemails.com/scripts/runner.php?BA=112&amp;hash=89d1522ef113dfc98b4c3e842efce891&amp;url=http%3A%2F%2Fecfundmaker.com%2F30sales.htm" target="_blank"><img src="http://www.hostingemails.com/scripts/runner.php?REDIRECT=http%3A%2F%2Fshenmu999.net.cn%2Fimages%2F200sales.gif&amp;hash=9f9d174e864c4e82f90a4360db04188a" alt="nice work"   border="0"></a><br> <br>
<div align="center"><a href="http://www.hostingemails.com/scripts/runner.php?BA=47&amp;hash=6f5e598573154348814a3b237f7d17c7&amp;url=http%3A%2F%2Fwww.awsurveys.com" target="_blank"><img src="http://www.hostingemails.com/scripts/runner.php?REDIRECT=http%3A%2F%2Fwww.AWSurveys.com%2FHomeMain.cfm%3FRefID%3Dgranit65%22%3E%3Cimg%20src%3D%22http%3A%2F%2Fwww.AWSurveys.com%2FPictures%2FAWS_ad1_300300.jpg%22%20width%3D%22300%22%20height%3D%22300%22%3E%3C%2Fa%3E&amp;hash=decd5d6664c90db87135dd70f44749fc" alt="Super"   border="0"></a><br> <br><a href="http://www.lucidityhosting.com/clients/aff.php?aff=024">
<img src="http://www.lucidityhosting.com/banners/banner_light.gif" alt="lucidityhosting.com Hosting" /></a><head>

<style type="text/css">

<!--

.STYLE10 {color: #0000FF}

-->

</style>
</head>




<table width="528" height="582" border="0" align="center" cellpadding="5" cellspacing="5">

<tr>
<td height="0" valign="top" width="504">

<table border="2" width="100%" height="55">
  <tr>    
     <td width="100%" height="49"><strong><font color="#0000FF" size="4">Menbership</font></strong>
      <p>Free Memberships.<br>  
      Get Paid by clicking!<br>  
      All Emails Worth <span class="STYLE10">$2</span><br>  
      All ptc worth <span class="STYLE10">$1</span><br>  
      <span class="STYLE10">$5</span> signup bonus<br>  
      <span class="STYLE10">$5</span> referral bonus<br>  
      We send redemption with <span class="STYLE10">48</span> hours<br>  
      No downline required for payout<br>  
      Fast Payments For Honest Members<br>  
      Payments Will be Made With via PayPal,<br>  
      E-Gold,MoneyBookers, StormPay, EvoCash, AnyPay,<br>  
      NetPay, Neteller, E-Bullion, Money Order or check!<br>  
      2 Ref level of commission under you Level: 1 - 20% Level 2 - 15%<br>  
      <span class="STYLE10">Hostsemails.com is not a multi-level marketing site!<br>
      This is a Pay Per Action Site and the membership is completely free to  
      join.<br>

      You are not required to recruit or sell anything in order to get paid.</span>  
      </p>
      <p><b><a href="../../../pages/confirm.php"><strong><font color="#FF0000" size="4">Join Now</font></strong></a>      
  </b>  

      </p>
    </td>
  </tr>
</table>  

<table border="2" width="100%" height="55">
  <tr>

    <td width="100%" height="49"><strong><font color="#0000FF" size="4">Advertser Benefits</font></strong>
      <p>The most cost effective advertising.<br>  
      Guaranteed Clickthru Ad Options.<br>  
      eMail Advertising or Banner Advertising.<br>  
      Advertise to 100% opt in membership.<br>  
      Members are eager to receive your ads.<br>  
      Absolutely no Spam!<br>  
      We will customize your Ad Campaign.<br>  
      Reliable, Friendly Service.<br>  
      Fast respond! mostly in 24 hours will be processed.<br>  
      Advertising Will Be Made Within 24 hours.</p>
      <p><strong><a href="../../../pages/advertise.php"><font size="4" color="#FF0000"> Choose Your Page </font> </a></strong>          

</table>

</tr>
</table><br>
<div align="center"><a href="http://www.hostingemails.com/scripts/runner.php?BA=108&amp;hash=7bcebc22da6e0dcdb9285f2f385c59bd&amp;url=http%3A%2F%2Fusers6.nofeehost.com%2Fgfeng%2Fnewptr.htm" target="_blank"><img src="http://www.hostingemails.com/scripts/runner.php?REDIRECT=http%3A%2F%2Fusers6.nofeehost.com%2Fgfeng%2Fnew.gif&amp;hash=5b5fce08402ebf72ad3a846605f81c16" alt="newptr"   border="0"></a><br>
<!--End Body Content -->
</td>
<style type="text/css">
<!--
.STYLE3 {color: #000000}
-->
</style>
<td width="0%" valign="top"><table  width="120" border="1" cellpadding="1" cellspacing="0" bordercolor="#E6E6E6">
     <tr>
<td width="130" height="20" align="center" bgcolor="#FFFFFF"><div align="center"><strong></B><span class="STYLE3">Advertisement</span></B></strong></div></td>
</tr>
          <tr>

         <td height="20" background="#E6E6E6" class="style3"><div align="center">
        <!-- BEGIN STANDARD TAG - 120 x 600 - ROS: Run-of-site - DO NOT MODIFY -->
<IFRAME FRAMEBORDER=0 MARGINWIDTH=0 MARGINHEIGHT=0 SCROLLING=NO WIDTH=120 HEIGHT=600 SRC="http://ad.spot200.com/st?ad_type=iframe&ad_size=120x600&section=344481"></IFRAME>
<!-- END TAG -->
</td>
          </tr>
</table>
  <table  width="130" border="1" cellspacing="0" cellpadding="1" bordercolor="#E6E6E6">
  <td width="120" height="20" align="center" bgcolor="#FFFFFF"><div align="center"><strong></B><span class="STYLE3">Advertisement</B></span></strong></div></td>
    </tr>

    <tr>
      <td height="20" background="#E6E6E6" class="style3"><div align="center" class="style37">
<script type="text/javascript" src=http://www.hostmonster.com/src/js/zeng1982/CODE1/120x240/1.gif></script></td>
  </TR>                      
    </table>
   </td>
     <table width="850" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#E6E6E6">
<td height="30" align="center" bgcolor="#FFFFFF" ><div align="center" class="style1 STYLE2 STYLE3"></B><font color="#000000">Copyright &copy; . 2007-2008 Hostingemails.com All Rights Reserved </font></B></td>

</table>
</body></html>
lynn55
Oct 1 2008, 11:38 AM
Hi Craig,



Mvents pops out alert said Creditburner_System.
I took screenshot of mvents display.
http://i34.tinypic.com/whmfc4.jpg


I readout jutakys detektor and copy and paste extracted code URL.
hxxp://adserver2.blueadvertise.com/b120x600.php?uid=zeng1982


Extracted Code and 1x1 hidden iframe.
<iframe width="1" height="1" allowtransparency="false" frameborder="0" hspace="0" vspace="0" marginheight="0" marginwidth="0" scrolling="no" src="hxxp://blueadvertise.com/ctm/controller_pb.php?uid=zeng1982"></iframe>



Total zeroiframes found: 1

Check took 1.29 seconds

(Level: 0) Url checked:
hxxp://adserver2.blueadvertise.com/b120x600.php?uid=zeng1982
Zeroiframes detected on this site: 1
No ad codes identified

(Level: 1) Url checked: (iframe source)
hxp://blueadvertise.com/ctm/controller_pb.php?uid=zeng1982
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 2) Url checked: (iframe source)
hxxp://blueadvertise.com/ctm/controller_universal_port2_devnet.php?uid=zeng1982
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 2) Url checked: (iframe source)
hxxp://blueadvertise.com/ctm/controller_universal_port2_devnet_importer.php?uid=zeng1982
Zeroiframes detected on this site: 0
No ad codes identified

Source code of submitted URL:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>CREDITBURNER_SYSTEM</title>
<style type="text/css">
<!--
body,td,th {
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
color: #0066CC;
}
body {
background-color: #0066CC;
margin-left: 0px;
margin-top: 0px;
margin-right: 0px;
margin-bottom: 0px;
}
-->
</style></head>

<body>
<table width="120" height="600" border="0" cellspacing="0" cellpadding="0">
<tr>
<td><a href="http://profiburner.com" target="_blank"><img width="120" height="600" border="0" alt="ProfiBurner PTP Network" src="_media/b120x600.gif" /></a></td>
</tr>
</table><iframe width="1" height="1" allowtransparency="false" frameborder="0" hspace="0" vspace="0" marginheight="0" marginwidth="0" scrolling="no" src="http://blueadvertise.com/ctm/controller_pb.php?uid=zeng1982"></iframe>
</body>
</html>
longshanks1971
Oct 2 2008, 05:23 AM
Hello Lynn aa.gif

The Mvent2 alert you had was normal. I am not sure which for certain is the "parent" name, but I think it is Creditburner, and the others are all related.

Creditburner alerts from mvent2 will also alert of the related codes in that family they are,

Creditburner, Blueadvertise, Profiburner & Revenueburner.

Whenever you get a Mvent alert for creditburner it will mean it has detected the presence of one of those listed above.

Hope that helps,

Craig
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.