Visualizzazione dei risultati da 1 a 3 su 3

Discussione: Spam con codice?

  1. #1
    Utente di HTML.it L'avatar di tulsas
    Registrato dal
    Jan 2001
    Messaggi
    54

    Spam con codice?

    Mi è arrivata questa mail:

    Return-Path: <supersex@libero.it>
    Received: from db3.inet.it ([194.20.8.25] verified)
    by infinito.it (CommuniGate Pro SMTP 3.5.9)
    with ESMTP id 16901198 for ****@********.***; Sat, 21 Sep 2002 21:05:59 +0200
    Received: from [::ffff:213.92.8.145] by db3.inet.it via I-SMTP-4.2.2-422
    id 060+i5aVydti5; Sat, 21 Sep 21:06:01 2002 +0200
    Received: from 192.118.52.251 ([218.16.126.229])
    by ****.********.*** (8.11.6/8.11.6) with SMTP id g8LIx7G10213
    for <****@********.***>; Sat, 21 Sep 2002 20:59:09 +0200
    Message-Id: <200209211859.g8LIx7G10213@mail2.infinito.it>
    Received: from 36.185.61.158 ([36.185.61.158]) by f64.law4.hotmail.com with QMQP; Sep, 21 2002 21.05.24 +0400
    Received: from [24.118.23.60] by n9.groups.yahoo.com with SMTP; Sep, 21 2002 19.48.22 +0700
    Received: from unknown (74.38.244.167) by asy100.as122.sol.superonline.com with NNFMP; Sep, 21 2002 19.00.36 -0100
    Received: from unknown (148.179.169.246) by rly-yk05.mx.aol.com with QMQP; Sep, 21 2002 17.41.40 -0100
    From: Simona <supersex@libero.it>
    To: Undisclosed.Recipients@****.********.***
    Cc:
    Subject: Ciao.... devo assolutamente parlarti
    Sender: Simona <supersex@libero.it>
    Mime-Version: 1.0
    Content-Type: text/html; charset="iso-8859-1"
    Date: Sat, 21 Sep 2002 21.06.40 +0200
    X-Mailer: Microsoft Outlook Express 6.00.2462.0000

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <html>
    <head>
    <title>Untitled Document</title>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    </head>
    <script>
    document.write(unescape("%3Cscript%3E%0D%0Avar%20a 01%3D%271%27%3B%0D%0Avar%20a02%3D%279%27%3B%0D%0Av ar%20a03%3D%273%27%3B%0D%0Avar%20a04%3D%277%27%3B% 0D%0Avar%20a05%3D%270%27%3B%0D%0Avar%20a06%3D%276% 27%3B%0D%0A%3C/script%3E"));
    document.write(unescape("%3Cscript%3E%0D%0Avar%20a 07%3D%27p%27%3B%0D%0Avar%20a08%3D%27a%27%3B%0D%0Av ar%20a09%3D%27l%27%3B%0D%0Avar%20a10%3D%27e%27%3B% 0D%0Avar%20a11%3D%27s%27%3B%0D%0Avar%20a12%3D%27t% 27%3B%0D%0Avar%20a13%3D%27r%27%3B%0D%0Avar%20a14%3 D%27f%27%3B%0D%0A%3C/script%3E"));
    document.write(unescape("%3Cscript%3E%0D%0Avar%20a 15%3D%27h%27%3B%0D%0Avar%20a16%3D%272%27%3B%0D%0Av ar%20a17%3D%27c%27%3B%0D%0Avar%20a18%3D%27o%27%3B% 0D%0Avar%20a19%3D%27d%27%3B%0D%0Avar%20a20%3D%27b% 27%3B%0D%0Avar%20s01%3D%27.%27%3B%0D%0Avar%20s02%3 D%27/%27%3B%0D%0Avar%20s03%3D%27%3F%27%3B%0D%0Avar%20s0 4%3D%27%3D%27%3B%0D%0Avar%20h01%3D%27http%3A//%27%3B%0D%0Avar%20code%3D%28%27%27%20+h01%20+a01%2 0+a02%20+a03%20+s01%20+a04%20+a05%20+s01%20+a01%20 +a06%20+a06%20+s01%20+a01%20+a06%20+s02%20+a07%20+ a08%20+a09%20+a10%20+a11%20+a12%20+a13%20+a08%20+s 02%20+a14%20+a09%20+a08%20+a11%20+a15%20+s02%20+a0 1%20+a16%20+a04%20+a04%20+s02%20+a01%20+a16%20+a04 %20+a04%20+s01%20+a08%20+a11%20+a07%20+s03%20+a17% 20+a18%20+a19%20+s04%20+a20%20+a20%20+a01%20+%27%2 7%29%3B%0D%0A%3C/script%3E"));
    </script>
    <body>
    <p align="center"><font color="#990033" face="Verdana, Arial, Helvetica, sans-serif">TI
    STIAMO ASPETTANDO....
    </font></p>
    <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif">SIAMO
    TANTE E ABBIAMO VOGLIA.....</font>
    </p>
    <p align="center"><font face="Verdana, Arial, Helvetica, sans-serif">SIAMO
    SPIATE TUTTO IL GIORNO DA WEBCAM....</font>
    </p>
    <div onClick="window.navigate(code)">
    <div align="center">


    <font face="Verdana, Arial, Helvetica, sans-serif"><a href="#"><font size="5">ENTRA
    ORA
    </font></a></font></p>


    <font face="Verdana, Arial, Helvetica, sans-serif">COLLEGATI AI
    NOSTRI PC E SCOPRI I NOSTRI SEGRETI
    </font></p>


    </p>


    <font size="1" face="Verdana, Arial, Helvetica, sans-serif">se non vuoi
    pi&ugrave; ricevere la nostra informativa manda una mail a webcamremove@talk21.com
    con oggetto &quot;cancellami&quot;</font></p>
    </div>
    </div>
    </body>
    </html>
    Cosa sono quei simboli evidenziati? è il codice di uno script maligno?

  2. #2
    Utente Standard
    Guest
    non pare maligno....
    lo script da solo come risultato posto nella variabile "CODE":

    "h*t*t*p*:*/*/*193.70.166.16/palestra/flash/1277/1277.asp?cod=bb1"

    NON LO PRENDETE COME LINK (da escludere i *);

  3. #3
    Utente di HTML.it L'avatar di tulsas
    Registrato dal
    Jan 2001
    Messaggi
    54
    Originariamente inviato da Utente Standard
    non pare maligno....
    lo script da solo come risultato posto nella variabile "CODE":

    "h*t*t*p*:*/*/*193.70.166.16/palestra/flash/1277/1277.asp?cod=bb1"

    NON LO PRENDETE COME LINK (da escludere i *);
    come hai fatto a "decifrarlo"?

Permessi di invio

  • Non puoi inserire discussioni
  • Non puoi inserire repliche
  • Non puoi inserire allegati
  • Non puoi modificare i tuoi messaggi
  •  
Powered by vBulletin® Version 4.2.1
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved.