HMMMM?? Shenanigans afoot....
At the very bottom of that page is some javascript hidden.
Attachment:
source.jpg [ 123.17 KiB | Viewed 11664 times ]
I copied this to a text file, changed the javascript "document.write" method that would have written the decoded stuff to the loaded webpage to "alert" that instead popped the decoded text into a messagebox. As javascript messageboxes wont allow you to control-c to copy the contents, I used winspy++ from http://www.catch22.uk.net to be able to copy the text from the window.
Attachment:
2nd website.jpg [ 29.76 KiB | Viewed 11664 times ]
Ok, so going to "oodn-go.ru/?khhs3nq6=Tu7lV%2F3hTJ85Gbq4BpC8G5M6H7%2B9FJu5HpUI%3D" gives a page with the properties of oodn-go.ru/s2375854739/
and copying the loaded webpage to my Hard drive allowed me to see that its sourcecode was simple, just 2 more htm files "s525524840.htm" and "yzuikrnfni.htm".
first one loads the image that pretends to be a page, all that text is just fake, 1 big image in the folder /images/
Attachment:
dodgy-page-htm1.jpg [ 132.25 KiB | Viewed 11664 times ]
the second page has some more encoded crap in it, which I am in the process of investigating.. so may pay to steer clear of the page
Attachment:
dodgy-page-htm2.jpg [ 618.78 KiB | Viewed 11664 times ]