Scanned pages/files
Request | Server response | Status |
http://letitesnami.ru/ | 200 OK Content-Length: 47038 Content-Type: text/html | clean |
http://letitesnami.ru/callme/js/callme.js | 200 OK Content-Length: 9076 Content-Type: application/x-javascript | clean |
http://letitesnami.ru//ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js/ | 404 Not Found Content-Length: 4066 Content-Type: text/html | clean |
http://letitesnami.ru/novogodnie-tury | 200 OK Content-Length: 69007 Content-Type: text/html | clean |
http://letitesnami.ru/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/plugins/system/kc_cufon/js/cufon-yui.js | 200 OK Content-Length: 18264 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/plugins/system/kc_cufon/fonts/AdverGothic_400.font.js | 200 OK Content-Length: 31797 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/plugins/system/kc_cufon/fonts/Adventure_400.font.js | 200 OK Content-Length: 52948 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/plugins/system/kc_cufon/fonts/DS_Note_400.font.js | 200 OK Content-Length: 47304 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/modules/mod_ariyuimenu/mod_ariyuimenu/js/yui.combo.js | 200 OK Content-Length: 136091 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(typeof YAHOO=="undefined"||!YAHOO){var YAHOO={};}YAHOO.namespace=function(){var A=arguments,E=null,C,B,D;for(C=0;C<A.length;C=C+1){D=(""+A[C]).split(".");E=YAHOO;for(B=(D[0]=="YAHOO")?1:0;B<D.length;B=B+1){E[D[B]]=E[D[B]]||{};E=E[D[B]];}}return E;};YAHOO.log=function(D,A,C){var B=YAHOO.widget.Logger;if(B&&B.log){return B.log(D,A,C);}else{return false;}};YAHOO.register=function(A,E,D){var I=YAHOO.env.modules,B,H,G,F,C;if(!I[A]){I[A]={versions:[],builds:[]};}B=I[A];H=D.version;G=D Antivirus reports:
| ||
http://letitesnami.ru/components/com_chronoforms/js/formcheck/formcheck-yui.js | 200 OK Content-Length: 19158 Content-Type: application/x-javascript | clean |
http://letitesnami.ru/components/com_chronoforms/js/formcheck/formcheck-max.js | 200 OK Content-Length: 3413 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: letitesnami.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 29 Jan 2015 16:28:27 GMT
Pragma: no-cache
Server: nginx/1.6.2
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: f88a7a71d37719903d900a4cb036a40c=a4be40943c088fe08d8dcd0c299bf0a0; path=/
X-Powered-By: PHP/5.2.17
X-Powered-By: TMX-194.19
GET / HTTP/1.1
Host: letitesnami.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 29 Jan 2015 16:28:27 GMT
Pragma: no-cache
Server: nginx/1.6.2
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: f88a7a71d37719903d900a4cb036a40c=a4be40943c088fe08d8dcd0c299bf0a0; path=/
X-Powered-By: PHP/5.2.17
X-Powered-By: TMX-194.19
Second query (visit from search engine):
GET / HTTP/1.1
Host: letitesnami.ru
Referer: http://www.google.com/search?q=letitesnami.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: letitesnami.ru
Referer: http://www.google.com/search?q=letitesnami.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=letitesnami.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://letitesnami.ru/
Result: letitesnami.ru is not infected or malware details are not published yet.
Result: letitesnami.ru is not infected or malware details are not published yet.