Scanned pages/files
| Request | Server response | Status |
http://dansplanetbest.webtalk.ru/ | 200 OK Content-Length: 65821 Content-Type: text/html | suspicious |
Suspicious code found (Ìîäåðàòîðû: <a href="http://dansplanetbest.webtalk.ru/profile.php?id=8" rel="nofollow">Ìàêñèì</a>) | ||
http://yandex.st/swfobject/2.2/swfobject.min.js | 200 OK Content-Length: 10220 Content-Type: application/x-javascript | clean |
http://yandex.st/jquery/1.4.4/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: application/x-javascript | clean |
http://st0.bbcorp.ru/js/jquery.tipsy.min.js | 200 OK Content-Length: 3565 Content-Type: application/javascript | clean |
http://menu.ds8.ru/stmenu.js | 404 Not Found Content-Length: 3135 Content-Type: text/html | clean |
http://promotium.net/av.php?p=6&z=4 | 200 OK Content-Length: 4003 Content-Type: text/html | clean |
http://promotium.net/av.php?r=aHR0cDovL3d3dy53bXRvb2xib3gubmV0Lw==&i=28 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Wed, 08 Oct 2014 22:54:43 GMT Pragma: no-cache Location: http://www.wmtoolbox.net/ Server: nginx Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Last-Modified: Wed, 08 Oct 2014 22:54:43 GMT Access-Control-Allow-Origin: * Set-Cookie: PRMT=342fd52123e50abae3a2985e31b61d4a; path=/ X-Powered-By: PHP/5.2.14 | clean |
http://www.wmtoolbox.net/ | 200 OK Content-Length: 43840 Content-Type: text/html | clean |
http://www.wmtoolbox.net/style/jMetro/js/jquery-1.6.2.min.js | 200 OK Content-Length: 91556 Content-Type: application/javascript | clean |
http://promotium.net/style/jMetro/js/jquery-ui-1.8.16.custom.min.js | 404 Not Found Content-Length: 109 Content-Type: text/html | clean |
http://promotium.net/test404page.js | 404 Not Found Content-Length: 77 Content-Type: text/html | clean |
http://promotium.net/scripts/menu.js | 404 Not Found Content-Length: 78 Content-Type: text/html | clean |
http://promotium.net/scripts/chosen.jquery.min.js | 404 Not Found Content-Length: 91 Content-Type: text/html | clean |
http://promotium.net/SpryAssets/SpryMenuBar.js | 404 Not Found Content-Length: 88 Content-Type: text/html | clean |
http://promotium.net/scripts/noty/jquery.noty.js | 404 Not Found Content-Length: 90 Content-Type: text/html | clean |
http://promotium.net/scripts/noty/layouts/bottomRight.js | 404 Not Found Content-Length: 98 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: dansplanetbest.webtalk.ru
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Wed, 08 Oct 2014 22:54:34 GMT
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=windows-1251
Expires: Thu, 21 Jul 1977 07:30:00 GMT
GET / HTTP/1.1
Host: dansplanetbest.webtalk.ru
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Wed, 08 Oct 2014 22:54:34 GMT
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=windows-1251
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Second query (visit from search engine):
GET / HTTP/1.1
Host: dansplanetbest.webtalk.ru
Referer: http://www.google.com/search?q=dansplanetbest.webtalk.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: dansplanetbest.webtalk.ru
Referer: http://www.google.com/search?q=dansplanetbest.webtalk.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=dansplanetbest.webtalk.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://dansplanetbest.webtalk.ru/
Result: dansplanetbest.webtalk.ru is not infected or malware details are not published yet.
Result: dansplanetbest.webtalk.ru is not infected or malware details are not published yet.