« previous next »
Pages: [1]   Go Down

Author Topic: What is wrong with this page?  (Read 1644 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33927
  • malware fighter
What is wrong with this page?
« on: July 04, 2012, 06:20:13 PM »
See: http://urlquery.net/report.php?id=82340
Site suspicious but what? Various IDS alerts given...
Only hick-up in the code:
cts.snmmd dot nl/service/js/nu-nl/geo-layer/ benign
[nothing detected] (script) cts.snmmd dot nl/service/js/nu-nl/geo-layer/
     status: (referer=wXw.nu.nl/)saved 9782 bytes eb22430165584814f743e6e9895d8ccfd3637a8e
     info: [img] cts.snmmd dot nl/service/js/nu-nl/geo-layer/
     info: [decodingLevel=0] found JavaScript
     suspicious:

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: What is wrong with this page?
« Reply #1 on: July 04, 2012, 06:51:47 PM »
Some image writes inside of the style, but are png, not bmp. See:
http://wepawet.iseclab.org/view.php?hash=22e687cc92543b231bc42bd75cd12111&t=1341420437&type=js
Logged
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."
Pages: [1]   Go Up
« previous next »