Scanned pages/files
Request | Server response | Status |
http://canulos.narod.ru/vitamini-dlya-potencii.html | 200 OK Content-Length: 10465 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=n0AZcztgNQQBYpuukipX!ZOX25n2XDmxbySftIQt7zyDV!yCxJ8kF9pzbC43Xw1LDtVlplI29wtg!hFlziaOK5^JTaVNwb;!SX5ncz9S1iuw7CXTZXKM!PuA3NxsFPOdmOLIdp5J634t5woo | 200 OK Content-Length: 2757 Content-Type: application/javascript | clean |
http://canulos.narod.ru/index.html | 200 OK Content-Length: 21760 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=tbUbufhryR;l0lfr;X9dYHTJ^URIqZZGwFYcNxTz7fUlPqpqgTUKPHMS1Q124OxVNgwtvdMJm!W5;CWEIWRsCUPjXLxztWU1OVxyFpLcaZsaZ14wq5Yt3P6t;KXRHbYcT7KXIF5Yp!io | 200 OK Content-Length: 2737 Content-Type: application/javascript | clean |
http://canulos.narod.ru/sostoyanie-erekcii.html | 200 OK Content-Length: 12955 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=2kiT^3xf7FpXDR7!g7AayElQIxvgL3ur7E3dw6PXxkAml2dVg6xmEP7FMjEKVOuUNr6TViuz;pGbU0eGeHdYG5umm;a9;B!f2w6Ghmn;yuwgOGckYxOOlFARQCDO7h7WSeZpOG5Zevwo | 200 OK Content-Length: 2737 Content-Type: application/javascript | clean |
http://canulos.narod.ru/kakaya-doljna-bit-erekciya.html | 200 OK Content-Length: 13483 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=Vk^K;JTYYvLw4wtCpFf1dxM08WnRHKceMtBkyD!L5SNCMHTU2;0nMBNR0bJBfl881tQZEM9tW6hkgrPjmXa1047rneyiq0BGF8mziat!TzlssmnLIQ86TmFNXjbgYTBNRVDBwNRAevio | 200 OK Content-Length: 2721 Content-Type: application/javascript | clean |
http://canulos.narod.ru/mojno-li-vilechit-impotenciy.html | 200 OK Content-Length: 11670 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=PurqrMzmmS^FePkjf8F!0tnkz1Ft8Ope6FdhG23gzjQLy9MTrG8br!iWIYzhE8TfeSwqqAbdU6;pZ2R7S5;lDZ^PaUhfP7eh!Nj0uXNazeP2!XxJc!31v94lGhg9RL^l4hi1d4gbgJkbQwoo | 200 OK Content-Length: 2737 Content-Type: application/javascript | clean |
http://canulos.narod.ru/yoga-dlya-potencii.html | 200 OK Content-Length: 13462 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=iZs;pwNvFQxy!GDB2XgAYVYhZX14i1g9YZbz7N9DQ55EG4;ODV8Y0uy!rBX31jZv7AzwO8qvnKRmf4AcI4y;^tUbSMu7xcvE7dNdLFP4H2BeKTBllJFZVIJtX9YUs3Jx1OukLVspqNsNYwoo | 200 OK Content-Length: 2733 Content-Type: application/javascript | clean |
http://canulos.narod.ru/sposobi-povisheniya-erekcii.html | 200 OK Content-Length: 11370 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
| ||
http://canulos.narod.ru/abnl/?adsdata=rY9YKl8eCLM5;HQimq6YlRLED;79zbh4nd52GIU71^jww2emBb7IqKs5yfM9L1nXPP9HngKuYqvOJuHT4na9VLdqnZsG^4mpLakBfWSObj164zipdevKrikNYrzZARxU7TheOS^Ojm2JMSYC | 200 OK Content-Length: 2753 Content-Type: application/javascript | clean |
http://canulos.narod.ru/vredno-li-prerivanie-polovogo-akta.html | 200 OK Content-Length: 12118 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!98!114!62!13!10!60!97!32!104!114!101!102!61!34!104!116!116!112!58!47!47!119!119!119!46!114!117!116!97!98!108!101!116!107!105!46!99!111!109!47!105!110!100!101!120!46!112!104!112!63!119!109!95!105!100!61!51!55!54!56!38!115!117!98!95!105!100!61!49!38!115!105!116!101!95!105!100!61!49!38!112!114!111!109!111!95!105!100!61!50!54!34!62!60!105!109!103!32!115!114!99!61!34!47!105!109!97!103!101!115!47!99!111!117!110!116!46!103!105!102!34!32!98!111!114!100!101!114!61!48!62!60!47!97!62!60!98!114!62!13!10!60!98!114!62!13!10!";l=str.length;while(c<=str.length-1){while(str.charAt(c)!='!')temp=temp+str.charAt(c++);c++; out=out+String.fromCharCode(temp);temp="";}document.write(out); Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: canulos.narod.ru
Result:
GET / HTTP/1.1
Host: canulos.narod.ru
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: canulos.narod.ru
Referer: http://www.google.com/search?q=canulos.narod.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: canulos.narod.ru
Referer: http://www.google.com/search?q=canulos.narod.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=canulos.narod.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://canulos.narod.ru/
Result: canulos.narod.ru is not infected or malware details are not published yet.
Result: canulos.narod.ru is not infected or malware details are not published yet.