Scanned pages/files
Request | Server response | Status |
http://www.alice.it/ | HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Date: Thu, 25 Sep 2014 09:57:46 GMT Accept-Ranges: bytes Age: 329 Location: http://www.telecomitalia.it/?ref=1 Server: Apache Content-Length: 242 Content-Type: text/html; charset=iso-8859-1 Keep-Alive: timeout=15, max=100 | clean |
http://www.telecomitalia.it/?ref=1 | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it/misc/jquery.js?V | 200 OK Content-Length: 31028 Content-Type: application/javascript | clean |
http://www.alice.it/misc/drupal.js?V | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 25 Sep 2014 09:57:52 GMT Location: http://www.telecomitalia.it?ref=1 Server: Apache Content-Length: 241 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: cookie_www.187.alice.it=2821041418.36895.0000; path=/ | clean |
http://www.telecomitalia.it?ref=1/ | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/misc/jquery.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/misc/drupal.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/modules/lightbox2/js/lightbox.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it/sites/default/files/themes/pti-bo/js/report.js?V | 200 OK Content-Length: 4485 Content-Type: application/javascript | clean |
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/jquery.cookie.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/check.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/jquery.easing.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/global.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/it.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/themes/pti-bo/../../../default/files/themes/pti-bo/js/preferiti.js?V | 200 OK Content-Length: 47497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var axel = Math.random() + ""; var a = axel * 10000000000000; document.write('<iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1? <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=1?" width="1" height="1" frameborder="0" style="display:none"> Hidden iFrame found. size: 1x1 style: hidden src: http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord= <iframe src="http://1597775.fls.doubleclick.net/activityi;src=1597775;type=landi001;cat=landi575;ord=' + a + '?" width="1" height="1" frameborder="0" style="display:none"> | ||
http://www.telecomitalia.it?ref=1/sites/all/modules/custom/ti_stats/js/ga_ext_track.js | 404 Not Found Content-Length: 265 Content-Type: text/html | clean |
http://www.telecomitalia.it?ref=1/test404page.js | 404 Not Found Content-Length: 227 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: alice.it
Result:
GET / HTTP/1.1
Host: alice.it
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: alice.it
Referer: http://www.google.com/search?q=alice.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: alice.it
Referer: http://www.google.com/search?q=alice.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=alice.it
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://alice.it/
Result: alice.it is not infected or malware details are not published yet.
Result: alice.it is not infected or malware details are not published yet.