« previous next »
Pages: [1]   Go Down

Author Topic: Unknown html malware detected?  (Read 1920 times)

0 Members and 2 Guests are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33938
  • malware fighter
Unknown html malware detected?
« on: April 29, 2015, 04:04:35 PM »
See: https://www.virustotal.com/nl/url/e8eb8d6a9bf4d7e2f3f6b8e50625fd7b9195be0878d4c5e84880f42ea5240cf6/analysis/1430315150/
See nothing detected by external scan: https://sitecheck.sucuri.net/results/videa.hu
2 Warnings: https://asafaweb.com/Scan?Url=videa.hu
IP badness results: https://www.virustotal.com/nl/ip-address/195.228.244.117/information/
Java Exploit active on website? http://urlquery.net/report.php?id=1430315704935
Hard to blockl ads via  -s0.2mdn.ne
Read: https://adblockplus.org/forum/viewtopic.php?f=10&t=12301
http://pro.hit.gemius.pl blocked by uBlock for me in Google Chrome, htxp://ls.hit.gemius.pl/ also
External domain requests:
http://videa.hu links to the following External Domains:
==>apis.google.com
==>name=legjobb videók;action-uri=ad.adverticum.net
==>name=legnézettebb videók;action-uri=ad.adverticum.net
==>name=legújabb videók;action-uri=ad.adverticum.net
Possible Frontend SPOF from:

apis.google.com - Whitelist
(99%) - <script type="text/javascript" src="htxps://apis.google.com/js/plusone.js">
forrest.adverticum.net - Whitelist
(78%) - <script src="//forrest.adverticum.net/cc.js" type="text/javascript">
imgs.adverticum.net - Whitelist
(78%) - <script src="//imgs.adverticum.net/scripts/cookie2customtarget/cookie2customtarget.js" type="text/javascript" charset="utf-8">
(78%) - <script src="//imgs.adverticum.net/scripts/goa3/goa3.js" type="text/javascript">
pagead2.googlesyndication.com - Whitelist
(2%) - <script async src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js">
www.google-analytics.com - Whitelist
(1%) - <script src="//wXw.google-analytics.com/urchin.js" type="text/javascript">
ad.adverticum.net - Whitelist
(0%) - <script type="text/javascript" charset="utf-8" src="//ad.adverticum.net/g3.js">*
* ->  https://www.virustotal.com/nl/url/19fc0051ba365821e074dbe0cc26cd378daf1dd5f2c63fc72d6de53eda531fa2/analysis/
See: http://linkeddata.informatik.hu-berlin.de/uridbg/index.php?url=http://ad.adverticum.net/scripts/goa3/main/2.11.4/goa3.js&acceptheader=&useragentheader=

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »