« previous next »
Pages: [1]   Go Down

Author Topic: Site re-directing to dsparking dot com. Is it being detected?  (Read 2022 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Site re-directing to dsparking dot com. Is it being detected?
« on: October 22, 2012, 10:53:11 PM »
See: http://zulu.zscaler.com/submission/show/908d696a874eb8b048f066b59b2a51af-1350937680 &
http://www.unmaskparasites.com/web-page-options/?url=http%3A//laquintapatadelgato.com/%2520index%2520page&susp=1&sb=1
found JS with undefined variables....(referer=cdn.dsultra dot com/js/registrar.js) this cause by a Joomla hack on this website,
similar problem described here by renegadeskone: http://forum.joomla.org/viewtopic.php?f=621&t=707099
See: http://www.mywot.com/en/scorecard/dsparking.com?utm_source=addon&utm_content=popup-donuts
Malware found on site according to sucuri: http://sitecheck.sucuri.net/results/laquintapatadelgato.com/
Content after the < /html> tag should be considered suspicious.
sc​ript type≈ "text/javascript"> JS_load_form('resultado_post_calen',​ 'val_ref1≈ 1349071200&val_ref2≈ bogota',​ 'htxp://wXw.laquintapatadelgato.com/calendario.php',​ 2)

polonus
« Last Edit: October 22, 2012, 10:55:49 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »