If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#16
|
|||
|
|||
Mayayana - can you help again please?
On 21/12/2018 19:00, David B. wrote:
On 21/12/2018 17:55, Mayayana wrote: "David B." "David wrote | | To a layman like me, the following is 'code'! | Â*Â* You might find it useful to look into HTML a bit. It's not very complex. It's complex trying to get it to act the way you want it to, but that actual HTML code is not complex. Â*Â* By code in my last post I meant script. HTML is code, but it just specifies the layout of a webpage. There's no script in your sample that's "doing" something. It's just HTML that sets up a layout and a badly designed link. Â*Â* If you want to know what it does, paste it to Notepad and save as an HTML file. Â* You can also do a search on the domain that's linked: detail-cc.cc Â* It appears to be a man from Buenos Aires who's trying to make some money by selling domain names. Thank you. I checked that URL with Virus Total and it has malwa- https://www.virustotal.com/#/url/42c...92ad/detection Here's an image, simply to clarify:- https://imgur.com/a/frCXS2V It was embedded on the Tekrider site - although the owner denies this. To ensure there is no misunderstanding, it was the code described to Mayayana which had been hidden on the Tekrider website, not the malware shown on the Virus Total link I shared. I must leave this now. My son has come to visit, have dinner and an overnight stay. Thanks again for looking, Mayayana. | |Â* html |Â* head |Â* meta charset=utf-8 |Â* meta name="robots" content="noindex" / |Â* /head |Â* body |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* table width=100% |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center height=50 |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* span | style='font-size:19pt'bwindows-web-browsers.cc.cc/b/span |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center height=30 |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* bThis URL is available. Get this name before | someone else does. |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center height=70 |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* tr |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* td align=center |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â*Â* button | onClick="location='http://detail-cc.cc/check_availability.php?s=windows-web-browsers'"span | style='font-size:12pt'Register for free /span/button |Â* Â*Â*Â*Â*Â*Â*Â*Â*Â* /table |Â* /body |Â* /html |Â* | | = | | What would it DO on someone's web page? | | If it doesn't *DO* anything, why would it be there? | | Talking about it may help me better understand. ;-) -- David B. Blog comments:- https://vxer.home.blog/2018/12/08/vx...file/#comments |
Ads |
#17
|
|||
|
|||
[OT]Mayayana - can you help again please?
On 21/12/2018 19:50, Shadow wrote:
On Fri, 21 Dec 2018 19:00:11 +0000, "David B." "David wrote: "David B." "David STALKED You can also do a search on the domain that's linked: detail-cc.cc I checked that URL with Virus Total and it has this malwa- You are right. Yes, I am. Here's an image of VT's finding: https://imgur.com/a/frCXS2V Your misguided obsession with alcohol is noted. As I've told you before, I haven't had ANY alcohol since the first day of spring - 21st March 2018. -- David B. Blog comments:- https://vxer.home.blog/2018/12/08/vx...file/#comments |
#18
|
|||
|
|||
Mayayana - can you help again please?
On 21/12/2018 14:58, Beauregard T. Shagnasty wrote:
Mayayana wrote: "David B." "David wrote | I've asked this question elsewhe- | | http://al.howardknight.net/msgid.cgi?ID=154534136700 | I really don't understand what you're talking about and don't see any reason that your questions should require people to read other versions of the question. Nor do I see why you never actually ask a direct question. It always seems to be some kind of setup. It is a setup. It always is. You really should get over yourself and tell the truth. I also don't see any code in your pasting. Just simple HTML and a javascripted link. I'm happy to offer any info I can about webpage code, if I understand it myself, but that doesn't seem to be what you're after. No, it's not. It's just a continuation of his years-long stalking of me and my web site. Nothing more than that. Are you afraid of what will be found if I, or other folk, look deeper? I did find the code I've shown to Mayayana in your website source code; I asked you why it was there and what it does/did. Instead of explaining matters, you denied it had ever been there. I think you lied about that, but I have no idea WHY you did so. -- David B. Blog comments:- https://vxer.home.blog/2018/12/08/vx...file/#comments |
#19
|
|||
|
|||
[OT]Mayayana - can you help again please?
On Fri, 21 Dec 2018 23:09:57 +0000, "David B." "David
wrote: On 21/12/2018 19:50, Shadow wrote: On Fri, 21 Dec 2018 19:00:11 +0000, "David B." "David wrote: "David B." "David STALKED You can also do a search on the domain that's linked: detail-cc.cc I checked that URL with Virus Total and it has this malwa- You are right. Yes, I am. About what ? The IP being shared by hundreds of other sites ? So false positives would be the rule, rather than the exception ? You cut my entire message where I said you had been told that before. No malware on this webpage: https://tekrider.net/pages/david-brooks-stalker.php I know you don't trust Sucuri any more, not since they BANNED you for STALKING, but here's the latest report on your "malware" sites: Is this the site that you claim has malware ? https://sitecheck.sucuri.net/results/tekrider.net Website Malware & Security No malware detected by scan (Low Risk) No injected spam detected (Low Risk) No defacements detected (Low Risk) No internal server errors detected (Low Risk) Website Blacklist Status Domain clean by Google Safe Browsing Domain clean by Norton Safe Web Domain clean by McAfee Domain clean by Sucuri Labs Domain clean by ESET Domain clean by PhishTank Domain clean by Yandex Domain clean by Opera Domain clean by Spamhaus Or is it this one ? https://sitecheck.sucuri.net/results/detail-cc.cc Website Malware & Security No malware detected by scan (Low Risk) No injected spam detected (Low Risk) No defacements detected (Low Risk) No internal server errors detected (Low Risk) Website Blacklist Status Domain clean by Google Safe Browsing Domain clean by Norton Safe Web Domain clean by McAfee Domain clean by Sucuri Labs Domain clean by ESET Domain clean by PhishTank Domain clean by Yandex Domain clean by Opera Domain clean by Spamhaus Please stop posting edited captures on your Dropbox account. Nobody believes them (they can go directly to the source of the "reports") and we all know you do it to increase traffic. []'s -- Don't be evil - Google 2004 We have a new policy - Google 2012 |
#20
|
|||
|
|||
Mayayana - can you help again please?
On 21/12/2018 17:55, Mayayana wrote:
"David B." "David wrote | | To a layman like me, the following is 'code'! | You might find it useful to look into HTML a bit. It's not very complex. It's complex trying to get it to act the way you want it to, but that actual HTML code is not complex. By code in my last post I meant script. HTML is code, but it just specifies the layout of a webpage. There's no script in your sample that's "doing" something. It's just HTML that sets up a layout and a badly designed link. If you want to know what it does, paste it to Notepad and save as an HTML file. You can also do a search on the domain that's linked: detail-cc.cc It appears to be a man from Buenos Aires who's trying to make some money by selling domain names. | | html | head | meta charset=utf-8 | meta name="robots" content="noindex" / | /head | body | table width=100% | tr | td align=center height=50 | tr | td align=center | span | style='font-size:19pt'bwindows-web-browsers.cc.cc/b/span | tr | td align=center height=30 | tr | td align=center | bThis URL is available. Get this name before | someone else does. | tr | td align=center height=70 | tr | td align=center | button | onClick="location='http://detail-cc.cc/check_availability.php?s=windows-web-browsers'"span | style='font-size:12pt'Register for free /span/button | /table | /body | /html | | | = | | What would it DO on someone's web page? | | If it doesn't *DO* anything, why would it be there? | | Talking about it may help me better understand. ;-) | | -- | David B. My son and his wife have now departed. It was great to see them! :-) You said "If you want to know what it does, paste it to Notepad and save as an HTML file." I don't have Notepad on my Apple Mac. Did YOU try doing what you suggested, Mayayana? If so, what was the result? -- David B. Blog comments:- https://vxer.home.blog/2018/12/08/vx...file/#comments |
#21
|
|||
|
|||
Mayayana - can you help again please?
"David B." "David wrote
| You said "If you want to know what it does, paste it to Notepad | and save as an HTML file." | | I don't have Notepad on my Apple Mac. I thought Macs were bad, but I had no idea they could even handle saving a plain text file. Oh well, I guess you'll have to buy a Windows computer. Then you'll also have a reason to be in this group. |
#22
|
|||
|
|||
Mayayana - can you help again please?
On 22/12/2018 23:15, Mayayana wrote:
"David B." "David wrote | You said "If you want to know what it does, paste it to Notepad | and save as an HTML file." | | I don't have Notepad on my Apple Mac. I thought Macs were bad, but I had no idea they could even handle saving a plain text file. Oh well, I guess you'll have to buy a Windows computer. Then you'll also have a reason to be in this group. I was tired when I posted last night, Mayayana. I'm so sorry I didn't try harder. :-( I have many computers with various operating systems - including Windows and Linux - but NONE are a patch on this 27inch iMac! I searched out THIS to help me: https://www.w3schools.com/html/ Here's the code I copied as you suggested:- html head meta charset=utf-8 meta name="robots" content="noindex" / /head body table width=100% tr td align=center height=50 tr td align=center span style='font-size:19pt'bwindows-web-browsers.cc.cc/b/span tr td align=center height=30 tr td align=center bThis URL is available. Get this name before someone else does. tr td align=center height=70 tr td align=center button onClick="location='http://detail-cc.cc/check_availability.php?s=windows-web-browsers'"span style='font-size:12pt'Register for free /span/button /table /body /html = When I 'ran' it, I saw this:- windows-web-browsers.cc.cc This URL is available. Get this name before someone else does. Register for free Here's an image showing how things actually came out on the page:- https://i.imgur.com/Rr47N5M.png The 'Button' "works" in so much as it 'depresses', but nothing actually *happens* (at least as far as I can see). I've thought hard about this, and cannot understand why it was hidden amongst all the other source code on the www.tekrider.net web page. The owner of that site has provided a great deal of helpful information about using HTML so I find it hard to believe that he'd never checked his code and found it there himself. Maybe mistakenly, I'm inclined to believe it had been placed there deliberately - but *WHY*? And by WHOM? Have you ANY ideas/thoughts about this? I did take a snapshot of a Virus Total finding of malware but I'm no expert on taking matters further:- https://www.dropbox.com/s/7lnpy4pez2...t%20site.jpeg? -- David B. |
#23
|
|||
|
|||
Mayayana - can you help again please?
"David B." "David wrote
Maybe mistakenly, I'm inclined to | believe it had been placed there deliberately - but *WHY*? And by WHOM? | | Have you ANY ideas/thoughts about this? | I'm not going to keep on with this. You're talking nonsense. That HTML is not on the page I see. It's plain HTML, with no "malware", as you found yourself when you put it into a webpage on your computer. The HTML you did post seems to have been lifted from a webpage run by a man in Buenos Aires who's trying to sell domain names. But WHY would you do such odd things? Do you have any ideas or thoughts about that? |
#24
|
|||
|
|||
Mayayana - can you help again please?
On 23/12/2018 12:53, Mayayana wrote:
"David B." "David wrote Maybe mistakenly, I'm inclined to | believe it had been placed there deliberately - but *WHY*? And by WHOM? | | Have you ANY ideas/thoughts about this? | I'm not going to keep on with this. You're talking nonsense. That HTML is not on the page I see. It's plain HTML, with no "malware", as you found yourself when you put it into a webpage on your computer. The HTML you did post seems to have been lifted from a webpage run by a man in Buenos Aires who's trying to sell domain names. But WHY would you do such odd things? Do you have any ideas or thoughts about that? Hi! :-) One of us is misunderstanding something, that's for sure! ;-) The code in question *WAS* on the Tekrider site, but it isn't any longer. What is the URL of the webpage which you say is carrying the HTML in question? Will I be able to see it in the source code of that site? Have you 'tested' that site at Virus Total? If so, with what result? I truly don't understand why you say I'm 'talking nonsense' - I'm trying to understand what is going on. If you are 'wondering' - I personally didn't uplift the HTML code from anywhere else other than Tekrider. Please *DO* "keep on" - I value your help and opinions. -- David B. |
#25
|
|||
|
|||
Mayayana - can you help again please?
David B. STALKER wrote:
On 23/12/2018 12:53, Mayayana wrote: But WHY would you do such odd things? Do you have any ideas or thoughts about that? Because he is a STALKER, plain and simple, who has unsuccessfully been stalking me for years. One of us is misunderstanding something, that's for sure! ;-) That would be you. No other. The code in question *WAS* on the Tekrider site, but it isn't any longer. The code in question *WAS NOT* ever on my web site. You HAVE the URL where you copied the "code." http://windows-web-browsers.cc.cc What is the URL of the webpage which you say is carrying the HTML in question? Will I be able to see it in the source code of that site? Yes. (Or at least any normally-skilled people could. You, on the other hand, have no skills.) http://windows-web-browsers.cc.cc Now **** off and die, you lying stalker. -- -bts |
#26
|
|||
|
|||
Mayayana - can you help again please?
On 23/12/2018 15:36, Beauregard T. Shagnasty wrote:
David B. wrote: On 23/12/2018 12:53, Mayayana wrote: But WHY would you do such odd things? Do you have any ideas or thoughts about that? Because he is an INVESTIGATOR, plain and simple, who has unsuccessfully been 'stalking' me for years. You have a website on public view. There is much useful information on it. What *IS* "unsuccessful stalking"? What am I missing? There's a lot of bad things in your vicinity:- https://www.virustotal.com/#/ip-address/192.251.238.3 It makes me uneasy. :-( One of us is misunderstanding something, that's for sure! ;-) That would be you. No other. Perhaps. Perhaps not. The code in question *WAS* on the Tekrider site, but it isn't any longer. The code in question *WAS NOT* ever on my web site. You HAVE the URL where you copied the "code." YES, yes it *WAS*! Tell folk the REAL reason why you blocked the Redleg facility from scanning your site. Are you hosting something BAD which you are trying so desperately to hide? https://aw-snap.info/file-viewer/?pr...Xl4uXl 5g~enc https://aw-snap.info/file-viewer/?pr...sje30ubnt0~enc http://windows-web-browsers.cc.cc What is the URL of the webpage which you say is carrying the HTML in question? Will I be able to see it in the source code of that site? Yes. (Or at least any normally-skilled people could. You, on the other hand, have no skills.) Mayayana tells me that the site is "run by a man in *Buenos Aires* who's trying to sell domain names." I've now looked up the site in Virus Total:- https://www.virustotal.com/#/url/e45...9c235b/details Final URL http://windows-web-browsers.cc.cc/ Serving IP Address 211.110.140.106 The public IP address 211.110.140.106 is located in *Republic of Korea*. It is assigned to the ISP SK Broadband. The address belongs to ASN 9318 which is delegated to SK Broadband Co Ltd. Please have a look at the tables below for full details about 211.110.140.106, or use the IP Lookup tool to find the approximate IP location for any public IP address. http://211.110.140.106.ipaddress.com SOMETHING is amiss. It's now plain for all to see. -- David B. |
#27
|
|||
|
|||
Mayayana - can you help again please?
David B. STALKER wrote:
SOMETHING is amiss. It's now plain for all to see. What is plain for ALL to see is that *YOU ARE A STALKER* and a liar of the first order. Not to mention world's greatest pest. -- -bts |
#28
|
|||
|
|||
Code query - ideas please! (was - Mayayana - can you help againplease?)
On 23/12/2018 15:36, Beauregard T. Shagnasty wrote:
David B. wrote: On 23/12/2018 12:53, Mayayana wrote: But WHY would you do such odd things? Do you have any ideas or thoughts about that? Because he is an INVESTIGATOR, plain and simple, who has unsuccessfully been 'stalking' me for years. You have a website on public view. There is much useful information on it. What *IS* "unsuccessful stalking"? What am I missing? There's a lot of bad things in your vicinity:- https://www.virustotal.com/#/ip-address/192.251.238.3 It makes me uneasy. One of us is misunderstanding something, that's for sure! That would be you. No other. Perhaps. Perhaps not. The code in question *WAS* on the Tekrider site, but it isn't any longer. The code in question *WAS NOT* ever on my web site. You HAVE the URL where you copied the "code." YES, yes it *WAS*! Tell folk the REAL reason why you blocked the Redleg facility from scanning your site. Are you hosting something BAD which you are trying so desperately to hide? https://aw-snap.info/file-viewer/?pr...Xl4uXl 5g~enc https://aw-snap.info/file-viewer/?pr...sje30ubnt0~enc http://windows-web-browsers.cc.cc What is the URL of the webpage which you say is carrying the HTML in question? Will I be able to see it in the source code of that site? Yes. (Or at least any normally-skilled people could. You, on the other hand, have no skills.) Mayayana tells me that the site is "run by a man in *Buenos Aires* who's trying to sell domain names." I've now looked up the site in Virus Total:- https://www.virustotal.com/#/url/e45...9c235b/details Final URL http://windows-web-browsers.cc.cc/ Serving IP Address 211.110.140.106 The public IP address 211.110.140.106 is located in *Republic of Korea*. It is assigned to the ISP SK Broadband. The address belongs to ASN 9318 which is delegated to SK Broadband Co Ltd. Please have a look at the tables below for full details about 211.110.140.106, or use the IP Lookup tool to find the approximate IP location for any public IP address. http://211.110.140.106.ipaddress.com SOMETHING is amiss. It's now plain for all to see. -- David B. |
#29
|
|||
|
|||
Code query - ideas please! (was - Mayayana - can you help againplease?)
David B. wrote:
https://www.virustotal.com/#/ip-address/192.251.238.3 It makes me uneasy. Just means he's on shared hosting. -- Take care, Jonathan ------------------- LITTLE WORKS STUDIO http://www.LittleWorksStudio.com |
#30
|
|||
|
|||
Mayayana - can you help again please?
In article
"David B." "David wrote: On 23/12/2018 12:53, Mayayana wrote: "David B." "David wrote Maybe mistakenly, I'm inclined to | believe it had been placed there deliberately - but *WHY*? And by WHOM? | | Have you ANY ideas/thoughts about this? | I'm not going to keep on with this. You're talking nonsense. That HTML is not on the page I see. It's plain HTML, with no "malware", as you found yourself when you put it into a webpage on your computer. The HTML you did post seems to have been lifted from a webpage run by a man in Buenos Aires who's trying to sell domain names. But WHY would you do such odd things? Do you have any ideas or thoughts about that? Hi! :-) One of us is misunderstanding something, that's for sure! ;-) The code in question *WAS* on the Tekrider site, but it isn't any longer. Did you ever try the Wayback Machine to see if you can find pages holding that code? https://web.archive.org/web/*/https://tekrider.net/ -- David B. I also noticed that in alt.comp.virus.pro-virus many of his posts from years back have been canceled. Just saying... |
Thread Tools | |
Display Modes | Rate This Thread |
|
|