zone-h URL: http://www.zone-h.org/mirror/id/30491158

Capture Date:       2017-11-15 00:18:06 JST

  zone-h info:
    Mirror saved on : 2017-11-14 15:14:51
    Notified by     : Jakarta6etar
    Domain          : http://m0090.japan-net.ne.jp
    IP address      : 202.241.190.90
    System          : FreeBSD
    Web server      : Apache

  Analyze:
    String Match:
      Header:
            1 : arta
            1 : FreeBSD
      Contents:
            3 : arta
            2 : Jakarta6etar
            1 : Hacked
            1 : Hacked by

  MD5:  f3511d9aa83f802b554636785bfd7805
        * 30491158

  Analyze: String Match Header: 2, 2 ; String Match Contents: 4, 7 ; MD5: 1 ;

  Header:
        Server: Apache/2.2.24 (FreeBSD) DAV/2 mod_fastcgi/2.4.6 mod_ssl/2.2.24 OpenSSL/0.9.8e
        Title: Jakarta Blackhat
        X-Powered-By: PHP/5.4.12

  Contents:
        
        
        
        <!DOCTYPE html>
        <!- Hacked by ./Jakarta6etar -!>
        <script>
        body {
          cursor: none;
        }
        </script>
        <html>
        <html lang='en-US'>
        <title>Jakarta Blackhat</title>
        <head>
          <embed src="http://www.youtube.com/v/zh4lSPANmvI&autoplay=1" type="application/x-shockwave-flash"wmode="transparent" width="1" height="1"></embed>
        <meta charset='UTF-8' />
        <link rel='icon' href='https://image.ibb.co/ngcwcb/logo_e2bfa0f80c78917edf7d9354fce781cd.png' />
        <link rel="shortcut icon"">
        <style>
          body {
            cursor: none;
          }
        </style>
        <style>
        body {
        background : #000;
        font-family : Courier new;
        text-align : center;
        color : #fff;
        }
        pre {
        margin-top: 9%;
        }
        </style>
        </head>
        <script src="https://pastebin.com/raw/PJkCMhQq">
        </script>
        <body>
        <br />
        <font size='4'>
        <pre>
                                                                   _______________________________
                                                /"""""""""""\      ,'                               `.
                                              _ / ____   ____ \ _  (       Eldersc0de Secur7y <3       )
                                            | \=( <font color='cyan'>(0</font> )=( <font color='cyan'>(0</font> )=/ |  `.  _____________________________,'
             \_(  ,`--'(_)`--'. )_/    |/
              ( /______I______\ )   _,'
        \\\_|_|_|_|_|_///
        \ `|_|_|_|_|' /
        `---.___,---'
        </pre>
        </font>
        <font size='2'>
        <font color='cyan'>[</font> <font color='cyan'> Eldersc0de Securi7y </font> <font color='cyan'>]</font>
        <br />
        <font size='2'>$ I really loving you $</font>
        <br>
        <br />
        <font color='cyan'>[</font> Messages <font color='cyan'>]</font>
        <br>
        <font color="white">$ aku yg gatau apa apa bisa apa.. $<font color="cyan">
        <br><br>
        <font color='white'> : </font>id<font color='white'> : </font>
        <br>
        uid=0 (root) gid=0 (root) group=0 (root)
        <br><br>
        <font color='white'>[</font> We Are <font color='white'>]</font>
        <br>
        <font size='2'> <font color="white">7ourney - RobinRoot - ./Lunatic0de - Angel Of Shafow - Fx106 - ./xMoody - M45KL <br> A999T - Sec7ion - <font color='cyan' size=2 face=''>./Jakarta6etar </font> - F0xBase - Hawk_B404 <br>W0nka - Artefvcker - Alazka - Justice Crew
        <br>
        <br>
        <font size='2' color='white'>&copy;</font><font size='2' color='white'>2K17</font>
        <br><br>
        <script type="text/&#65533;javascript">if (self==top) {function netbro_cache_analyti&#65533;cs(fn, callback) {setTimeout(function&#65533;() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol==&#65533;"https:" ? "https://" : "http://&#65533;");var idc_glo_r = Math.floor(Math.random()*9999&#65533;9999999);var url = idc_glo_url+ "cfs2.uzone.id/&#65533;cfspushadsv2/request" + "?id=1" + "&enc=telkom2" + "&params=" + "4TtHaUQnUEiP6K%2fc5&#65533;C582H6x5iDAuv2BinzOp&#65533;MU%2fUrrODoB9DINS9eY&#65533;dHvCpfLxkXPTXkEyzdkJ&#65533;7fJFdeI3XWC3Csc4R3ue&#65533;H3diUm5RGfi8u0XhmPF8&#65533;3h1T53Q2yADELBtYlB1H&#65533;9V2%2bATJH6ws7XYvN6d&#65533;g1KNqQA23rwFqW6P%2bl&#65533;rRcTMWYUwTEuDBeLS3ip&#65533;iXKJnSGyxyUTJ36%2fEa&#65533;uXO2U0o6CE9AYwPzATpl&#65533;%2fAw10UtUNE%2bR1Qaz&#65533;%2fIZ%2fyJNHj%2fnqS%&#65533;2fNQb5udhoYCe0L1%2ba&#65533;oS4Jbte6qA8%2b8UbGxl&#65533;4KPa0XbqE1f1qfi32X4K&#65533;WSM9Zrsqhd7skWtTIr2F&#65533;krBE1XciFx17BNUH1R6K&#65533;A9lfhTtQeCGoSDu67z%2&#65533;f1mF297d3NZpy2VLZscN&#65533;mzDPE%2fcO2zfEngiOcj&#65533;wE4scSPyDU23sUaA0H2J&#65533;gs9zFreWD1jcWHbxhM6%&#65533;2bCeYJJYIpKJipfvbNNE&#65533;6Kitn2pW%2bH7rlxe2Ew&#65533;1gWNNOM2TLRPzTgnb9iz&#65533;mG8tFMKgUIKCiu43eH8j&#65533;NZjcEJAerK3CXYgm%2bO&#65533;TFGjJfJtMxZ4yA4emcAu&#65533;rIEqwnBXA0ZoJSGcQIx%&#65533;2fi%2bBZheXGJWRxyndz&#65533;ndhNZm5DiOSq4jp%2bXj&#65533;fjLtFtRANKd8g%3d%3d"&#65533; + "&idc_r="+idc_glo_r + "&domain="+document.&#65533;domain + "&sw="+screen.width+&#65533;"&sh="+screen.height&#65533;;var bsa = document.createEleme&#65533;nt('script');bsa.typ&#65533;e = 'text/&#65533;javascript';bsa.async&#65533; = true;bsa.src = url;(document.getEle&#65533;mentsByTagName('head&#65533;')[0]||document.getE&#65533;lementsByTagName('bo&#65533;dy')[0]).appendChild&#65533;(bsa);}netbro_cache_&#65533;analytics(requestCfs&#65533;, function(){});};</&#65533;script><script type="text/&#65533;javascript">if (self==top) {function netbro_cache_analyti&#65533;cs(fn, callback) {setTimeout(function&#65533;() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol==&#65533;"https:" ? "https://" : "http://&#65533;");var idc_glo_r = Math.floor(Math.random()*9999&#65533;9999999);var url = idc_glo_url+ "cfs2.uzone.id/&#65533;2fn7a2/request" + "?id=1" + "&enc=9UwkxLgY9" + "&params=" + "4TtHaUQnUEiP6K%2fc5&#65533;C582H6x5iDAuv2Bq2XN9&#65533;%2f95UPef2b12z5%2b%2&#65533;b%2bEX1fu5HcaPbFbq58&#65533;1JAnv2Sx4eEcLCzW1jsN&#65533;HGExPn55K%2fGt%2blxS&#65533;9pCNiuPxJXfwFAkz7c0E&#65533;Fl%2bWETYsy2%2f4GJae&#65533;Zko5NzKyc9KlnwVqXy%2&#65533;boqIM8tfAzAbuP2Kjf2M&#65533;oGCpIxJyyd9IBgIhyT11&#65533;eqpCh809k5k36%2fhxGe&#65533;uuFhqkA8kI0civev2Qa9&#65533;NJzKhNVJoyZq7nKYMIKE&#65533;d4Bs5F4cmnB3rasyw%2b&#65533;Ls8lz2VqFPkK%2fTIfHn&#65533;I5SbDXFAlZMtoE4wOjA5&#65533;Rp718Wbi8hYdT%2bUwvt&#65533;a9bXEsBvut9y4TJ%2bsh&#65533;Hof6hcPenkUdyY%2bRlL&#65533;4ghO5kYSvFFibMC9oC6W&#65533;g%2fFMFQ9OuR1P%2bsWO&#65533;MLbGISUiqOdfN0PiXrQE&#65533;FwliLxSV0ozgirxVfc52&#65533;7RrwIhs3KBnWqDXGk0OA&#65533;kc3ck%2fW%2bOyvHCsVo&#65533;mAeDlhgLnDSnVXf4iKhY&#65533;Q6rn0bgWuCcKU0TrGWLQ&#65533;GYiQ3l4%2ff5RETuKoro&#65533;wO%2bt44aVELFigFJEYk&#65533;Iw4jKeIu5d48KjAHRigG&#65533;B" + "&idc_r="+idc_glo_r + "&domain="+document.&#65533;domain + "&sw="+screen.width+&#65533;"&sh="+screen.height&#65533;;var bsa = document.createEleme&#65533;nt('script');bsa.typ&#65533;e = 'text/&#65533;javascript';bsa.async&#65533; = true;bsa.src = url;(document.getEle&#65533;mentsByTagName('head&#65533;')[0]||document.getE&#65533;lementsByTagName('bo&#65533;dy')[0]).appendChild&#65533;(bsa);}netbro_cache_&#65533;analytics(requestCfs&#65533;, function(){});};</&#65533;script><script type="text/javascript">if (self==top) {function netbro_cache_analytics(fn, callback) {setTimeout(function() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol=="https:" ? "https://" : "http://");var idc_glo_r = Math.floor(Math.random()*99999999999);var url = idc_glo_url+ "cfs2.uzone.id/2fn7a2/request" + "?id=1" + "&enc=9UwkxLgY9" + "&params=" + "4TtHaUQnUEiP6K%2fc5C582H6x5iDAuv2BV645U7NQG6Au0iaqw%2f%2fW5aq0rW00V8Yzcyq11u2oFrd6FLxMPxUBpl8yVy15I6KQvMKG3ZEQDaParOTTsGosPVtmsAHe2F58pcKgofOzwG%2f3QLd3jdJFnZkqHZeMQtYQFrTuhDtRdXYtvCpTXbDdbQNciQd9juooDpenvN9AnaDuCAHAwqOI6JD9kf2Pq1ROJjkKc6bqj7poACLfD%2f2e194njOMbBTumWn7egeet08U3JQ7D8E5Mg%2f2bAOdvAShuCyOUkX1gA9vV7XJbRNfIeZ6KAd2mkNAK4EnPDhyP1Ihsb%2b%2bfWHijDSMoE%2bE4HLMBnNr%2fJQgMldJhj2KSYPd4Y3tX6gdTROYvxpqTsmDMtIs5CYmaJYI%2b9JFtYg9s4xsc" + "&idc_r="+idc_glo_r + "&domain="+document.domain + "&sw="+screen.width+"&sh="+screen.height;var bsa = document.createElement('script');bsa.type = 'text/javascript';bsa.async = true;bsa.src = url;(document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);}netbro_cache_analytics(requestCfs, function(){});};</script></body>
        </html>
        </script>
        <script>
        </script>