View Single Post
Old 08-16-2002, 05:07 PM  
HowlingWulf
Confirmed User
 
HowlingWulf's Avatar
 
Join Date: Nov 2001
Posts: 1,662
Help with Russian dickward img src'ing me (and others)

Here's one of his many .html pages. It currently points to
Cowlist, but it probably rotates and its showing up in my
logs.

perl get_url.cgi http://www.today-movie-clips.com/blank.html

<html>
<head>
<script language="JScript.Encode">//**Start Encode**
var theURL = "exit.html";
var title = "FREE MOVIES"
var windowWidth =520; // cannot be less than 100
var windowHeight = 610; // cannot be less than 100
var windowX = 10;
var windowY = 50;
var autocenter = false
var autoclose = false;
var s="width="+windowWidth+",height="+windowHeight;
var beIE=document.all?true:false;
var done=new Object("no");
if(autocenter){
windowX = (window.screen.width-windowWidth)/2;
windowY = (window.screen.height-windowHeight)/2;
}
function doMagilePopup(){
if (beIE){
magilePopper = window.open("","popMagile","fullscreen,"+s);
magilePopper.blur();
window.focus();
magilePopper.resizeTo(windowWidth,windowHeight);
magilePopper.moveTo(windowX,windowY);
var frameString=""+
"<html>"+
"<head>"+
"<title>"+title+"</title>"+
"</head>"+
"<frameset rows='*,0' framespacing=0 border=0 frameborder=0>"+
"<frame name='top' src='"+theURL+"' scrolling=no>"+
"<frame name='bottom' src='about:blank' scrolling='no'>"+
"</frameset>"+
"</html>"
magilePopper.document.open();
magilePopper.document.write(frameString);
magilePopper.document.close();
}else{
magilePopper=window.open(theURL,"popMagile","scrol lbars=no,"+s);
magilePopper.blur();
window.focus();
magilePopper.resizeTo(windowWidth,windowHeight);
magilePopper.moveTo(windowX,windowY);
}
magilePopper.blur();
if (autoclose){
window.onunload = function(){magilePopper.close();}
}
done="okay";
}
</script>
<META HTTP-EQUIV="Expires" CONTENT=" "></head>
<BODY onbeforeunload=doMagilePopup()>
<iframe height="0" width="0" src="http://www.cowlist.com/"></iframe>
<IMG src=http://www.cowlist.com/cgi-bin/ucj/c.cgi width=0 height=0
border=0>
<script language="javascript">
<!--
ua=navigator.userAgent.toLowerCase();an=navigator. appName.toLowerCase
();bv=parseInt(navigator.appVersion);
bt="";bt=(ua.indexOf("webtv")!=-1)?"webtv"ua.indexOf("msie")!=-
1)?"msie"ua.indexOf("aol")!=-1)?"aol":an;
bv=(bt=="msie"&&bv<4)?3bt=="msie"&&bv==4&&ua. indexOf("msie 5")!=-1)?
5:bv;co="";js="1.0";sr="";
re=escape(top.document.referrer);re=
(re=="undefined"||re=="")?"bookmark":re; // --></script>
<script language="javascript1.1"><!--
js="1.1"; // --></script>
<script language="javascript1.2"><!--
js="1.2";co=(ua.indexOf("msie")!=-1)?screen.colorDepth:screen.pixelDepth;
sr=screen.width+"x"+screen.height; // --></script>
<script language="javascript1.3"><!--
js="1.3"; // --></script>
<script language="javascript1.4"><!--
js="1.4"; // --></script>
<script language="javascript"><!--
args="?
fn=0&si=80664&bt="+bt+"&bv="+bv+"&co="+co+"&js="+j s+"&sr="+sr+"&re="+re;
document.write("<a href=\"http://in.paycounter.com/?fn=1&si=80664\"
target=\"_top\">");
document.write("<img src=\"http://count.paycounter.com/"+args+"\" width=1
height=1 border=0></a>"); // -->
</script>
<noscript>
<img src="http://count.paycounter.com/?fn=0&si=80664" width=1 height=1></a>
</noscript>
<IMG src=http://www.cowlist.com/cgi-bin/ucj/c.cgi width=0 height=0
border=0>
</body>
</html>

I want to use .htaccess to block him but I'm not sure if I have it right. Can someone check this for me:

RewriteCond %{HTTP_REFERER} ^http://.*today-movie-clips.com.*$ [NC]
RewriteRule .*\.*$ http://www.today-movie-clips.com/index.html [R,L]


He's also using
fuckingmovies.net
my-daily-movies.com
freehqmovies.com
HowlingWulf is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote