Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=vertikal174.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: jwsmithrealestate.com
Result:
HTTP/1.1 200 OK
Date: Mon, 06 Oct 2014 08:32:07 GMT
Server: Microsoft-IIS/7.5
Content-Length: 18039
Content-Type: text/html
X-Powered-By: PHP/5.3.26
X-Powered-By: ASP.NET
...18039 bytes of data.
GET / HTTP/1.1
Host: jwsmithrealestate.com
Result:
HTTP/1.1 200 OK
Date: Mon, 06 Oct 2014 08:32:07 GMT
Server: Microsoft-IIS/7.5
Content-Length: 18039
Content-Type: text/html
X-Powered-By: PHP/5.3.26
X-Powered-By: ASP.NET
...18039 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: jwsmithrealestate.com
Referer: http://www.google.com/search?q=jwsmithrealestate.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: jwsmithrealestate.com
Referer: http://www.google.com/search?q=jwsmithrealestate.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://vertikal174.ru/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 01 Apr 2014 22:11:14 GMT Location: http://www.elvib.ru/ Server: nginx/1.2.9 Vary: Accept-Encoding Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.elvib.ru/ | 200 OK Content-Length: 10935 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: vertikal174.ru ...[12842 bytes skipped]... gt;ÑÐ°Ð±Ð»Ð¾Ð½Ñ joomla 1.7</a></div> </div> </div> </div> </div> </div> </div> <div style="margin:0 25%; text-align: center;"><a href="#" onclick="window.open('/images/request/request.php','request','width=500,height=500,toolbar=no'); return false;"><img src="http://vertikal174.ru/images/request/prais.png" /></a></div> </div> <div style="clear: both;"></div> </div> </div> </div> </body> </html> | ||
http://www.elvib.ru/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/x-javascript | clean |
http://vertikal174.ru/media/system/js/core.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 01 Apr 2014 22:11:15 GMT Location: http://www.elvib.ru/media/system/js/core.js Server: nginx/1.2.9 Vary: Accept-Encoding Content-Length: 337 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.elvib.ru/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/x-javascript | clean |
http://vertikal174.ru/media/system/js/caption.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 01 Apr 2014 22:11:15 GMT Location: http://www.elvib.ru/media/system/js/caption.js Server: nginx/1.2.9 Vary: Accept-Encoding Content-Length: 340 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.elvib.ru/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/x-javascript | clean |
http://vertikal174.ru/media/system/js/mootools-more.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 01 Apr 2014 22:11:15 GMT Location: http://www.elvib.ru/media/system/js/mootools-more.js Server: nginx/1.2.9 Vary: Accept-Encoding Content-Length: 346 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.elvib.ru/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/x-javascript | clean |
http://www.elvib.ru/templates/mega_arcon/js/megascript.js | 200 OK Content-Length: 396 Content-Type: application/x-javascript | clean |
http://www.elvib.ru/templates/mega_arcon/js/mega_menudropdown.js | 200 OK Content-Length: 4878 Content-Type: application/x-javascript | clean |
http://freemit.wz.cz/images/1swr6fG3.php?id= | HTTP/1.1 302 Found Connection: close Date: Tue, 01 Apr 2014 22:05:50 GMT Location: http://localhost/ Server: Apache Content-Length: 0 Content-Type: text/html | clean |
http://localhost/ | 200 OK Content-Length: 3700 Content-Type: text/html | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6816 Content-Type: text/javascript | clean |
http://freemit.wz.cz/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 01 Apr 2014 22:05:51 GMT Location: http://e.wz.cz/404.html Server: Apache Content-Length: 270 Content-Type: text/html; charset=iso-8859-1 | clean |
http://e.wz.cz/404.html | 200 OK Content-Length: 12877 Content-Type: text/html | clean |
http://www.google-analytics.com/urchin.js | 200 OK Content-Length: 22678 Content-Type: text/javascript | clean |