On 29-Oct-11 09:07:29, MJ Ray wrote:
Ted Harding wrote:
Yes, it seem you can only disable javascript globally in firefox. Then the http://auberge.delecluse.free.fr site comes up beautifully.
Turn javascript back on, and re-load, and you get to that awful http://www.cibleclick.com site, with absolutely no visible link back to the auberge.delecluse.free.fr site.
Does this suggest that the Auberge de l'Ãcluse website has been hijacked?
It looks a lot like it, but it's hard to know why without seeing the server-side source code.
cibleclick do seem awful: searching for them finds reports of them storing passwords as clear-text in cookies, of losing their domain to squatters because they didn't renew in time and so on.
I've not found exactly what's going on on the auberge site, though. Maybe cibleclick redirect discontinued affiliate sites to their own homepage?
Regards,
MJ Ray (slef), member of www.software.coop, a for-more-than-profit co-op. Webmaster, Debian Developer, Past Koha RM, statistician, former lecturer. In My Opinion Only: see http://mjr.towers.org.uk/email.html Available for hire for various work through http://woww.software.coop/
I did a 'wget -l 1' on http://auberge.delecluse.free.fr and got a single file "index.html". This looks innocuous until you get near the bottom, where you find:
<!--- Code <E0> ins<E9>rer CibleClick : multi-programme2 ---> <script language="JavaScript" src="http://www.cibleclick.com/cibles/banniere/script_aff2.cfm/ script.js?friend_id=27317700"> </script> <!--- fin du Code <E0> ins<E9>rer CibleClick : multi-programme2 --->
which is the only plave cibleclick is mentioned. There is another chunk of javascript nearer the beginning:
<script language="JavaScript"> <!-- function namosw_exchange_src(name, rpath, nsdoc) { str = (navigator.appName == 'Netscape') ? nsdoc+'.'+name : 'document.all.'+name; img = eval(str); if (img) { if (img.altsrc == null) { img.altsrc = img.src; img.src = rpath; } else { var temp = img.src; img.src = img.altsrc; img.altsrc = temp; } } } //--> </script>
which doesn't do anything that I can make out!
Ted.
-------------------------------------------------------------------- E-Mail: (Ted Harding) ted.harding@wlandres.net Fax-to-email: +44 (0)870 094 0861 Date: 29-Oct-11 Time: 11:18:41 ------------------------------ XFMail ------------------------------