Author Topic: Site with javascript malware?  (Read 1381 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34065
  • malware fighter
Site with javascript malware?
« on: October 27, 2013, 05:16:16 PM »
See: https://www.virustotal.com/nl/url/a6a6c9107c65d120677353a2c4fac45e5abf9b4e8913ed0e273ce05b0a7849e0/analysis/1382889581/
and nothing here: http://urlquery.net/report.php?id=7212778
flagged: Suspicious <a href="htxp://a8olld3filee.ru/map1.html">êàðòà ñàéòà</a> </div><!-- pageinfo --> <div class="clear"></div> </div><!-- topline --> <div class="header"> <div class... -> http://jsunpack.jeek.org/?report=a9e8dabab5d698f43bec720d0654ef24e25d7952
See: http://scanurl.net/?u=http%3A%2F%2Fa8olld3filee.ru%2F&uesb=Check+This+URL#results
Excessive header warning: System Details:
Running on: Apache/2.2.25
System info: (FreeBSD) PHP/5.2.17 with Suhosin-Patch mod_ssl/2.2.25 OpenSSL/1.0.1e DAV/2

Current releases      
Apache:   2.4.6, 2.2.25   
PHP:   5.5.4, 5.4.20, 5.3.27             
MySQL:   5.6.14, 5.5.32      
IIS:   8.0, 7.5

URL Domain Result: Blacklisted in multiple real-time domain blocklists -> http://zulu.zscaler.com/submission/show/2615e85103e898625c37f3393d51ad81-1382890067  Blocked by WOT and Bitdefender's TrafficLight extension

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10