Scanned pages/files
Request | Server response | Status |
http://kannas.nm.ru/ | 200 OK Content-Length: 14313 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/news.htm | 200 OK Content-Length: 27982 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/index.htm | 200 OK Content-Length: 14313 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/books.htm | 200 OK Content-Length: 48038 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/articles.htm | 200 OK Content-Length: 20186 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/history.htm | 200 OK Content-Length: 142279 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/finds.htm | 200 OK Content-Length: 16090 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/suit.htm | 200 OK Content-Length: 21431 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/antrea.htm | 200 OK Content-Length: 15668 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../index.htm | 200 OK Content-Length: 14313 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../news.htm | 200 OK Content-Length: 27982 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../books.htm | 200 OK Content-Length: 48038 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../articles.htm | 200 OK Content-Length: 20186 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../history.htm | 200 OK Content-Length: 142279 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
| ||
http://kannas.nm.ru/Fotos/shitov/suit/big/../../../../finds.htm | 200 OK Content-Length: 16090 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>'; document.getElementById('h_24x4').style.display = ''; Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kannas.nm.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 May 2014 15:09:05 GMT
Server: nginx
Content-Type: text/html; charset=windows-1251
GET / HTTP/1.1
Host: kannas.nm.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 May 2014 15:09:05 GMT
Server: nginx
Content-Type: text/html; charset=windows-1251
Second query (visit from search engine):
GET / HTTP/1.1
Host: kannas.nm.ru
Referer: http://www.google.com/search?q=kannas.nm.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kannas.nm.ru
Referer: http://www.google.com/search?q=kannas.nm.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kannas.nm.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kannas.nm.ru/
Result: kannas.nm.ru is not infected or malware details are not published yet.
Result: kannas.nm.ru is not infected or malware details are not published yet.