Spam Alert Full Report: /Canadian_Pharmacy_Geocities_redirect_spam174283.html Changed status to confirmed spam.Geocities redirection to Canadian Pharmacy site forwardwish.com
Obfuscated Java Script
var goiiinj='jzonwydprqyrxcegw';var ouxmo=0;var nmoldnk, kwczbj, sdxfs='56090C1C1E0910501E1017150D0202024A48300E18162A07021B010D5046140C0913050D411A18094A1C1D121806110C0B491F181F094E4A59431806050948574C0308051D1B1D0A001017185C12161F5F585948040908061E0347';kwczbj='';var erafqnh;for( nmoldnk=0;nmoldnk < sdxfs.length;nmoldnk+=2){erafqnh = unescape( '%' + sdxfs.substr( nmoldnk,2));kwczbj += String.fromCharCode( erafqnh.charCodeAt(0) ^ goiiinj.charCodeAt(ouxmo++) );if ( ouxmo >= goiiinj.length ) ouxmo = 0;}document.write(kwczbj);
Decodes to
window.top.location.href = 'http://forwardwish.com';
Use the redirection format as a fingerprint to remove all such breaches of the Geocities Terms of Service
NOTE: The generic fingerprint for redirection scripts starts with
var {TS}='{TSLONG}';var {TS}=0;var{TS}, {TS}, {TS}='{HEX}';{TS}='';var {TS};for( {TS}=0;{TS} < {TS}.length;{TS}+=2){{TS} = unescape( '%' + {TS}.substr( {TS},2));
where {TS} is a variable lower case text string of 3 - 9 characters
and {TSLONG} is a longer lower case text string 5 - 40 characters
and {HEX} is a long hexadecimal character string compring the set 0-9, A-F
Using this generic fingerprint, scan every Geocities page, and remove every page that matches. Keep running the scan and removal until the abuse ceases. Monitor for changes in fingerprint and adjust accordingly.
LEGAL EVIDENCE OF CRIME - REFER TO YAHOO! LEGAL COUNSEL
Yahoo! and Geocities is shown to be in a nexus with criminal actions at the public information site designed for Law Enforcement
http://www.spamtrackers.eu/wiki/index.php?title=Geocities
The criminal abuse of Yahoo Geocities terms of service is documented in evidence at
http://www.spamtrackers.eu/wiki/index.php?title=Blogspot#Obfuscated_Java_Script_redirections
Criminal Evidence of the frauds perpetrated at the target sites to which Yahoo Geocities is actively providing the access path is at
http://www.spamtrackers.eu/wiki/index.php?title=Canadian_Pharmacy
Yahoo Geocities must act immediately to fulfil its duty to enact its terms of service
"In section 5 MEMBER CONDUCT of its Terms of Service, Yahoo! Geocities has clauses that these redirections violate, and in section 12 TERMINATION there is the right to terminate. Yahoo! Geocities has both a legal right to terminate all of these violations, and a legal obligation to do so."
Reefer also to /Geocities_redirect_spam174335.html
| Quote: | | http://geocities.com/ericksonleslie69 |
|