is a PHP script (take the space // out from between the ? and the < or >). Everything outside is plain old // HTML which is rendered by your browser. // This is an excellent example of parsing out CGI variables and headers // and doing, uhm, interesting things to them. Somehow I suspect the // creators of CGI didn't expect their creation to be so abused by // scam artists, though! // Now to start: // get all the headers sent by the browser into a single place. $headers = getallheaders(); // then issue the correct document type to tell browsers what they're // getting in return. ?>
Your IP is NOT under investigation:
Your ISP " // Now we do a reverse lookup on the IP address to get the name of the // machine that is connecting to us. This doesn't always work, because // not all ISP's have enabled their reverse lookups, so we must // test the resulting host name to make sure it's not blank. $host=gethostbyaddr($ip); if ("$host" == "") { $host = $ip; // sigh, they have no reverse lookup. } // Now we will simply shift the hostname over to the left until // there's only one dot left in it. Thus if my hostname // was ip-99-54-87.roadrunner.com , what I'll be left with is // roadrunner.com as the final "ISP name". Note that this does not // work on foreign names that have their own equivalent of a // "dot-com" subdomain. E.g., foo.demon.co.uk will end up saying // "co.uk" as the ISP, when the real ISP is Demon Internet (i.e., // "demon.co.uk"). But Robin Hood Software's own web applet has the // same sorts of problems. I *could* make it smarter and make it account // for various country endings like .uk .au .ca etc and bump // the dot-count upwards for those to preserve TWO dots in the ISP name, // but I've already spent too much time on this! $isp=$host; while (substr_count($isp,".")>1) { $tmp=strstr($isp,"."); $isp=substr($tmp,1); } echo $isp; ?>" has NOT handed over all the info:
Your computer is:
echo $headers["User-Agent"]; ?> [I'm too lazy to parse your User-Agent header!]
You are NOT trying to hide that you were browsing:
Your risk status for further investigation:
Your computer is NOT full of evidence. You do NOT need help now (unless you're stupid enough to buy Evidence Eliminator, or stupid enough to download child pornography, or stupid enough to browse porn from work).
Years of Internet data could be used by the police if you're stupid enough to download child pornography. So don't do it.
Time of latest "investigation" (run of this stupid cheesy little web application that I wrote in an hour's time this morning):
Click Here Now For an explanation of how this bogus "Investigation" works, and why you should not be worried.
Click Here Now for the complete source code for this bogus warning, completely commented so that you know exactly how the boys at Robin Hood Software are doing their tricks.
Whoops, forgot the last trick in this one-trick pony show: showing you the hard drive if you're running Windows! This trick is just creating an inline frame with its source as "file:\c:", oooh, it shows me my own hard drive without sending it over the Internet, I'm so scared!
If you were running IE on Windows, you would have seen the last trick in this one-trick pony show: Showing you the contents of C:! This trick is just creating an inline frame with its source as "file:\c:", oooh, it shows me my own hard drive without sending it over the Internet, I'm so scared! Of course, the Evidence Eliminator people claim to be looking at your hard drive over the Internet (and offer the above as "proof"), and claim that their software will "stop this investigation". Just another lie from the Boys in Spammingham.
| You are NOT going to go to jail! It was a trick, a low-down dirty trick! |
|