Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://imicor.ru/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: imicor.ru Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Mon, 15 Sep 2014 21:47:29 GMT Location: http://www.caribsoft-online.biz/templates/rhuk_solarflare_ii/images/index.php Server: Apache/1.3.42 (Unix) PHP/5.2.17 mod_deflate/1.0.21 Content-Type: text/html X-Powered-By: PHP/5.2.17 | malicious |
Scanned pages/files
Request | Server response | Status |
http://imicor.ru/ | 200 OK Content-Length: 32929 Content-Type: text/html | clean |
http://imicor.ru/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://imicor.ru/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://imicor.ru/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://imicor.ru/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
http://imicor.ru/media/system/js/modal.js | 200 OK Content-Length: 9732 Content-Type: application/javascript | clean |
http://imicor.ru/components/com_imageshow/assets/js/swfobject.js | 200 OK Content-Length: 10220 Content-Type: application/javascript | clean |
http://imicor.ru/components/com_imageshow/assets/js/jsn_is_extultils.js | 200 OK Content-Length: 3020 Content-Type: application/javascript | clean |
http://imicor.ru/components/com_imageshow/assets/js/jsn_is_imageshow.js | 200 OK Content-Length: 3050 Content-Type: application/javascript | clean |
http://imicor.ru/modules/mod_ariyuimenu/mod_ariyuimenu/js/yui.combo.js | 200 OK Content-Length: 136091 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(typeof YAHOO=="undefined"||!YAHOO){var YAHOO={};}YAHOO.namespace=function(){var A=arguments,E=null,C,B,D;for(C=0;C<A.length;C=C+1){D=(""+A[C]).split(".");E=YAHOO;for(B=(D[0]=="YAHOO")?1:0;B<D.length;B=B+1){E[D[B]]=E[D[B]]||{};E=E[D[B]];}}return E;};YAHOO.log=function(D,A,C){var B=YAHOO.widget.Logger;if(B&&B.log){return B.log(D,A,C);}else{return false;}};YAHOO.register=function(A,E,D){var I=YAHOO.env.modules,B,H,G,F,C;if(!I[A]){I[A]={versions:[],builds:[]};}B=I[A];H=D.version;G=D Antivirus reports:
| ||
http://imicor.ru/index.html | 404 Not Found Content-Length: 31926 Content-Type: text/html | clean |
http://imicor.ru/kompaniya-imikor.html | 200 OK Content-Length: 48849 Content-Type: text/html | clean |
http://imicor.ru/modules/mod_AutsonSlideShow/js/jquery-1.5.2.min.js | 200 OK Content-Length: 85925 Content-Type: application/javascript | clean |
http://imicor.ru/modules/mod_AutsonSlideShow/js/jquery.easing.1.3.js | 200 OK Content-Length: 8097 Content-Type: application/javascript | clean |
http://imicor.ru/modules/mod_AutsonSlideShow/js/jquery.animate-colors-min.js | 200 OK Content-Length: 1736 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=imicor.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://imicor.ru/
Result: imicor.ru is not infected or malware details are not published yet.
Result: imicor.ru is not infected or malware details are not published yet.