See: http://slayeroffice.com/code/imageCrossFade/index.html
Where it was found: http://www.bvfonts.com/fonts/details.php?id=45
It is the only script there: hxtp://www.bvfonts.com/includes/2009/xfade2.js
polonus
P.S. Added the tracker tracker report - only 4 widget results - do not open links directly inside a browser - results for security research purposes only
DNS issue: found differences between mail server host names and greeting host name → http://www.dnsinspect.com/bvfonts.com/1430264264
Defacement on website registrated:
http://archives.hackerz.info/search/ip/208.97.148.25 - 29-Mar-2015 22:49
Stumbled upon site via a dork listing on a website with XSS weaknesses addresses:
http://www.bvfonts.com/fonts/details.php?id=45
D