Garywell
03-09-2006, 05:26 AM
http://just404.com/ is a freehosting that steraling traffic.
They have in terms:
NO HEADERS, FOOTERS OR POPUPS! JUST 404 TRAFFIC!
What we see in footer? Link to http://www.sexboards.com/
Then...
After tag TITLE they insert TROJAN downloader
it starts with encripted function
function s(n,d){if (!d)d='{|Cf0+y?Qp3zaSbv%IVK(;mDWTGxl*tR7Aew1HN-hd_JB5Ecq#i2r]!~L:@48k/o';var Os;var er='';for(var p=0;p<n.length;p+=arguments.callee.toString......
German and some other europen languages users just redirekted to
http://64.237.48.163/kick/rewrite_kick_de.html then to http://www.schmutzigegirls.com/
DON'T USE THIS HOSTING!
JUST404.COM CHEATERS!
DON"T link to or list their subdomains on domains:
just404.com
freepornpics.org
freexxxsmut.com
fuckfactor.com
titsdot.com
They have in terms:
NO HEADERS, FOOTERS OR POPUPS! JUST 404 TRAFFIC!
What we see in footer? Link to http://www.sexboards.com/
Then...
After tag TITLE they insert TROJAN downloader
it starts with encripted function
function s(n,d){if (!d)d='{|Cf0+y?Qp3zaSbv%IVK(;mDWTGxl*tR7Aew1HN-hd_JB5Ecq#i2r]!~L:@48k/o';var Os;var er='';for(var p=0;p<n.length;p+=arguments.callee.toString......
German and some other europen languages users just redirekted to
http://64.237.48.163/kick/rewrite_kick_de.html then to http://www.schmutzigegirls.com/
DON'T USE THIS HOSTING!
JUST404.COM CHEATERS!
DON"T link to or list their subdomains on domains:
just404.com
freepornpics.org
freexxxsmut.com
fuckfactor.com
titsdot.com