Mining equipment — buckets and attachments
New tab
←
→
⟳
🔒 pb-professional.com /?q=%3Cdiv%20class%3D%22offer%22%3E…
TRAINING DEMO — the page below is a locally built mock-up, not pb-professional.com. Nothing is sent or stored.
Read this first. The address bar above is a drawing inside the mock-up, not a real address. On pb-professional.com, profdst.ru and dst-prof.ru a link of the form pb-professional.com/?q=… does not exist: checked 06.11, query strings and paths are escaped there, search returns 403. So this page shows the consequence of a substitution — what a customer would see and where his data would go — not a working attack on this cluster. The realistic equivalent for «Профессионал» is a forged letter or a forged quotation built from the openly downloadable documents.
PROFESSIONALmining equipment
ENRUFRESKZ
+7 (4932) 353-452
+7 (900) 000-00-00sales department
Request a call
Products in stockMining equipmentConstruction buckets CompanyDeliveryMediaContacts
Mining equipment

Buckets and attachments for mining and quarry equipment

Rock buckets, face shovel and backhoe buckets, LHD buckets, dump truck bodies. Engineering, manufacturing and delivery to the site.

20+years in the market
1 200units per year
2production sites
replaced form

Get a quotation in 15 minutes

Fill in the form — our manager will contact you.

In this demo submission is disabled.
In a real attack these fields would go to the attacker.
What is different here — three changes, nothing else touched. 1. The phone in the header is replaced: the real number is crossed out, a foreign one is labelled “sales department”.
2. The call-back form is replaced entirely: same fields, same look, but the data goes to the attacker.
3. The address bar and the padlock stay genuine, because the link points at the real site and the substituted block travels inside the query string:
https://pb-professional.com/?q=<injected block>