Scanned pages/files
Request | Server response | Status |
http://wwwhorsandmustang.webtalk.ru/ | 200 OK Content-Length: 31505 Content-Type: text/html | suspicious |
Suspicious code found (Ìîäåðàòîðû: <a href="http://wwwhorsandmustang.webtalk.ru/profile.php?id=7" rel="nofollow">Ìèõàýëü</a>, <a href="http://wwwhorsandmustang.webtalk.ru/profile.php?id=8" rel="nofollow">ðîìàí</a>) | ||
http://yandex.st/swfobject/2.2/swfobject.min.js | 200 OK Content-Length: 10220 Content-Type: application/x-javascript | clean |
http://yandex.st/jquery/1.4.4/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: application/x-javascript | clean |
http://st0.bbcorp.ru/js/jquery.tipsy.min.js | 200 OK Content-Length: 3565 Content-Type: application/javascript | clean |
http://wwwhorsandmustang.webtalk.ru/userlist.php | 200 OK Content-Length: 34851 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/misc.php?action=rules | 200 OK Content-Length: 14509 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/search.php | 200 OK Content-Length: 18498 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/register.php | 200 OK Content-Length: 15081 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://st0.bbcorp.ru/js/crypto.js | 200 OK Content-Length: 7030 Content-Type: application/javascript | clean |
http://wwwhorsandmustang.webtalk.ru/login.php | 200 OK Content-Length: 16002 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/search.php?action=show_recent | 200 OK Content-Length: 19215 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/viewtopic.php?id=20 | 200 OK Content-Length: 68061 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/viewforum.php?id=30 | 200 OK Content-Length: 16019 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/viewtopic.php?id=20&p=2 | 200 OK Content-Length: 35076 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> | ||
http://wwwhorsandmustang.webtalk.ru/profile.php?id=29 | 200 OK Content-Length: 15647 Content-Type: text/html | suspicious |
Suspicious code found <div id="pun-announcement" class="section"> <h2><span>Îáúÿâëåíèå</span></h2> <div class="container"> <div class="html-box"> <img src="http://i030.radikal.ru/0803/78/3083a0b2d625.gif" > ÏÐÈÂÅÒ! ÐÅÃÍÈÑÜ Ó ÍÀÑ ÍÀ ÐÎËÅ! ÒÅÁÅ ÏÎÍÐÀÂÈÒÜÑß. ÒÓÒ ÒÀÊ ÈÍÒÅÐÅÑÍÎ!!! ÌÛ ÂÑÅ ÂÑÅ ÆÄ¨Ì ÒÎËÜÊÎ ÒÅÁß. ÑÊÎÐÅÅ ÏÐÈÕÎÄÈ!!! </div> </div> </div> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: wwwhorsandmustang.webtalk.ru
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Wed, 08 Oct 2014 23:46:37 GMT
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=windows-1251
Expires: Thu, 21 Jul 1977 07:30:00 GMT
GET / HTTP/1.1
Host: wwwhorsandmustang.webtalk.ru
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Wed, 08 Oct 2014 23:46:37 GMT
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=windows-1251
Expires: Thu, 21 Jul 1977 07:30:00 GMT
Second query (visit from search engine):
GET / HTTP/1.1
Host: wwwhorsandmustang.webtalk.ru
Referer: http://www.google.com/search?q=wwwhorsandmustang.webtalk.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: wwwhorsandmustang.webtalk.ru
Referer: http://www.google.com/search?q=wwwhorsandmustang.webtalk.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wwwhorsandmustang.webtalk.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wwwhorsandmustang.webtalk.ru/
Result: wwwhorsandmustang.webtalk.ru is not infected or malware details are not published yet.
Result: wwwhorsandmustang.webtalk.ru is not infected or malware details are not published yet.