GoFuckYourself.com - Adult Webmaster Forum - View Single Post - Reported Attack Page! WTF ??? Many sites ! ! ! HELP ! !

garce · 09-08-2010, 05:49 AM

Quote:

Originally Posted by garce

I will not click those links.

Ok, I clicked the first one. You have a lot java script at the bottom of that page that lists things that aren't visible when you view your site.

Lots of hidden links to 123anddone there.

Surf to your site and view source. If you see anything amiss, get in touch with your hosting company.

Code:

<div class="execphpwidget"><center><script type='text/javascript'><!--//<![CDATA[
   var m3_u = (location.protocol=='https:'?'https://www.123anddone.com/ads/www/delivery/ajs.php':'http://www.123anddone.com/ads/www/delivery/ajs.php');
   var m3_r = Math.floor(Math.random()*99999999999);
   if (!document.MAX_used) document.MAX_used = ',';
   document.write ("<scr"+"ipt type='text/javascript' src='"+m3_u);
   document.write ("?zoneid=215");
   document.write ('&amp;cb=' + m3_r);
   if (document.MAX_used != ',') document.write ("&amp;exclude=" + document.MAX_used);
   document.write (document.charset ? '&amp;charset='+document.charset : (document.characterSet ? '&amp;charset='+document.characterSet : ''));
   document.write ("&amp;loc=" + escape(window.location));
   if (document.referrer) document.write ("&amp;referer=" + escape(document.referrer));
   if (document.context) document.write ("&context=" + escape(document.context));
   if (document.mmm_fo) document.write ("&amp;mmm_fo=1");
   document.write ("'><\/scr"+"ipt>");
//]]>--></script><noscript><a href='http://www.123anddone.com/ads/www/delivery/ck.php?n=ace6c3fe&amp;cb=2103865137' target='_blank'><img src='http://www.123anddone.com/ads/www/delivery/avw.php?zoneid=215&amp;cb=1502468587&amp;n=ace6c3fe' border='0' alt='' /></a></noscript></center></div>
							<h2>Ass Hot</h2>			<div class="execphpwidget"><center><script type='text/javascript'><!--//<![CDATA[
   var m3_u = (location.protocol=='https:'?'https://www.123anddone.com/ads/www/delivery/ajs.php':'http://www.123anddone.com/ads/www/delivery/ajs.php');
   var m3_r = Math.floor(Math.random()*99999999999);
   if (!document.MAX_used) document.MAX_used = ',';
   document.write ("<scr"+"ipt type='text/javascript' src='"+m3_u);
   document.write ("?zoneid=216");
   document.write ('&amp;cb=' + m3_r);
   if (document.MAX_used != ',') document.write ("&amp;exclude=" + document.MAX_used);
   document.write (document.charset ? '&amp;charset='+document.charset : (document.characterSet ? '&amp;charset='+document.characterSet : ''));
   document.write ("&amp;loc=" + escape(window.location));
   if (document.referrer) document.write ("&amp;referer=" + escape(document.referrer));
   if (document.context) document.write ("&context=" + escape(document.context));
   if (document.mmm_fo) document.write ("&amp;mmm_fo=1");
   document.write ("'><\/scr"+"ipt>");
//]]>--></script><noscript><a href='http://www.123anddone.com/ads/www/delivery/ck.php?n=a71fd50a&amp;cb=1321276916' target='_blank'><img src='http://www.123anddone.com/ads/www/delivery/avw.php?zoneid=216&amp;cb=425437363&amp;n=a71fd50a' border='0' alt='' /></a></noscript></center></div>
		<br class="clear" /></div></div>

If you didn't put that there, someone else did. There is more on your sites, too.