Author Topic: Blocked site - copypast.ru  (Read 6612 times)

0 Members and 1 Guest are viewing this topic.

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Blocked site - copypast.ru
« on: January 29, 2009, 06:37:16 PM »
Hello :)

I just want to ask why is this site copypast.ru blocked by the Network Shield. Not that I use this site, but some folks on my forum are asking this question, and I can't answer. According to WOT the site is clear.  ::) Thanks ..  ;)
You've Got To Get Close To The Flame To See What It's Made Of...

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Blocked site - copypast.ru
« Reply #1 on: January 29, 2009, 08:31:34 PM »
Hi XMAS,

Checked the site wth Exploit Prevention Lab's LinkChecker: results: Congratulations! LinkScanner Online did not find any exploits. finjan does not flag it. McAfeeSiteAdvisor warns against 6 unwanted downloads there.
DrWeb's av linkchecker reports:
Checking: hxxp://copypast.ru/
Engine version: 4.44.0.9170
File size: 111.47 KB

hxxp://copypast.ru/ - archive HTML
>hxxp://copypast.ru//javascript.0 - Ok
>hxxp://copypast.ru//Script.1 - Ok
>hxxp://copypast.ru//Script.2 - Ok
>hxxp://copypast.ru//Script.3 - Ok
>hxxp://copypast.ru//Script.4 - Ok
>hxxp://copypast.ru//Script.5 - Ok
>hxxp://copypast.ru//Script.6 - Ok
>hxxp://copypast.ru//Script.7 - Ok
>hxxp://copypast.ru//Script.8 - Ok
>hxxp://copypast.ru//Script.9 - Ok
hxxp://copypast.ru/ - Ok

Checking: hxxp://mg.dt00.net/js/c/o/copypast.ru.i3.js
File size: 3583 bytes

hxxp://mg.dt00.net/js/c/o/copypast.ru.i3.js - Ok

Checking: hxxp://copypast.ru/top.js?1
File size: 3304 bytes

hxxp://copypast.ru/top.js?1 - Ok

Checking: hxxp://copypast.ru//engine/ajax/js_edit.js
File size: 11.24 KB

hxxp://copypast.ru//engine/ajax/js_edit.js - Ok

Checking: hxxp://readme.ru/informer/14709.js
File size: 3927 bytes

hxxp://readme.ru/informer/14709.js - Ok

Checking: hxxp://copypast.ru/count/online.php
File size: 23 bytes

hxxp://copypast.ru/count/online.php - Ok

Checking: hxxp://copypast.ru//engine/ajax/menu.js
File size: 3368 bytes

hxxp://copypast.ru//engine/ajax/menu.js - Ok

Checking: hxxp://copypast.ru//engine/modules/us_rating/us_rating.ajax.js
File size: 9616 bytes

hxxp://copypast.ru//engine/modules/us_rating/us_rating.ajax.js - Ok

Checking: hxxp://mg.dt00.net/js/c/o/copypast.ru.i1.js
File size: 3583 bytes

hxxp://mg.dt00.net/js/c/o/copypast.ru.i1.js - Ok

Checking: hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/widget.js
File size: 1944 bytes

hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/widget.js - archive HTML
>hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/widget.js/Script.0 - Ok
hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/widget.js - Ok

Checking: hxxp://copypast.ru//engine/ajax/dle_ajax.js
File size: 4731 bytes

hxxp://copypast.ru//engine/ajax/dle_ajax.js - Ok

Checking: hxxp://readme.ru/informer/14708.js
File size: 3939 bytes

hxxp://readme.ru/informer/14708.js - Ok

Checking: hxxp://toget.ru/adblocks/adblockLoader.php?id=copypast
File size: 4079 bytes

hxxp://toget.ru/adblocks/adblockLoader.php?id=copypast - Ok
Checked against Jutakys - BadStuff Detektor - results:
Quote from: IframeChecker
No zeroiframes detected!
Check took 12.26 seconds

(Level: 0) Url checked:
hxxp://copypast.ru/
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
hxxp://tizers.net/iframe.php?r=+rnd
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
hxxp://tizers.net/iframe.php?r=+rnd
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
hxxp://tizers.net/iframe.php?r=+rnd
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
hxxp://tizers.net/iframe.php?r=+rnd
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru//engine/modules/us_rating/us_rating.ajax.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru//engine/ajax/menu.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru//engine/ajax/dle_ajax.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru//engine/ajax/js_edit.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru/top.js?1
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru/count/online.php
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/widget.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 2) Url checked: (script source)
hxxp://widgets.clearspring.com/o/492a68fd6fb318ff/492a6a1594302c2c/492a68fd6fb318ff/2e42f5f4/\+cso.jho+/+cso.vjs+/widget+((cso.tfm&&cso.tfm.indexof(v3)
Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://copypast.ru//js.js?2
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://mg.dt00.net/js/c/o/copypast.ru.i1.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://mg.dt00.net/js/c/o/copypast.ru.i3.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://toget.ru/adblocks/adblockloader.php?id=copypast
Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://readme.ru/informer/14708.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
hxxp://readme.ru/informer/14709.js
Zeroiframes detected on this site: 0
No ad codes identified

The one that flagged it was scandoo.com: Scanning Results: Security & Content Safety
   
 Копипаст.... (Change Preferences)
 hxxp://copypast.ru
   
 Sex / Nudity
 (Redefine)

polonus

« Last Edit: January 29, 2009, 09:21:29 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

CharleyO

  • Guest
Re: Blocked site - copypast.ru
« Reply #2 on: January 29, 2009, 08:46:23 PM »
***

ScanDoo does not like the site. See the images below.


***

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Re: Blocked site - copypast.ru
« Reply #3 on: January 29, 2009, 10:02:11 PM »
Thanks for the replies  :) I'll report the findings to the other forum, but I was hoping for an answer from alwil, since there was not found info for malicious content  ::) :) Thanks anyway...
You've Got To Get Close To The Flame To See What It's Made Of...

kubecj

  • Guest
Re: Blocked site - copypast.ru
« Reply #4 on: January 30, 2009, 11:22:50 AM »
On re-evaluating I've temporarily removed it, I'll watch it...

Offline XMAS

  • Avast translator
  • Super Poster
  • ***
  • Posts: 1211
  • Santa is watching you ;)
    • avast! in Bulgarian
Re: Blocked site - copypast.ru
« Reply #5 on: January 30, 2009, 12:24:40 PM »
On re-evaluating I've temporarily removed it, I'll watch it...
Thanks kubecj.  :) But why was blocked - distributing malware ?  ::)
You've Got To Get Close To The Flame To See What It's Made Of...