See: https://www.virustotal.com/en/url/b40676953a7da7228df9ab1bae89735c70696fce365e5764c849504e75639ddf/analysis/
Given as suspicious here: http://zulu.zscaler.com/submission/show/2073945ea78c10840ab65dd7bbe2d9af-1383775323
See: http://urlquery.net/queued.php?id=49377749
The malware flags here: http://sitecheck.sucuri.net/scanner/?scan=http%3A%2F%2Fart-style.in.ua%2F
Detected here as well: http://app.webinspector.com/recent_detections?list=30&page=2 (list of last 24 hrs)
Suspicious javascript check: Suspicious
21px;">
<a href="http://www.facebo… (via hidden iFrame)
More sites on IP: http://sameid.net/ip/93.178.216.22/
Browser difference site: Google: 33672 bytes Firefox: 33532 bytes
Diff: 140 bytes
First difference:
dy>…
Code hick-up on site: art-style.in dot ua/media/system/js/mootools.js benign
[nothing detected] (script) art-style.in dot ua/media/system/js/mootools.js
status: (referer=art-style.in.ua/)saved 74434 bytes 09a31fe3b9bd81e4426614bf507f70076daf6f04
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [script] art-style.in.ua/media/system/js/
info: [decodingLevel=0] found JavaScript
suspicious:
PHP version vulnerabilities: http://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-90935/PHP-PHP-5.2.13.html
polonus