Scanned pages/files
Request | Server response | Status |
http://adimjatisansthan.org/restriction.php | HTTP/1.1 200 OK Connection: close Date: Mon, 26 Oct 2015 11:28:39 GMT Server: Apache Vary: Accept-Encoding Content-Type: text/html | clean |
http://p57rri.net/?a=370951&c=wl_con&s=24dcba | HTTP/1.1 302 Found Cache-Control: max-age=172800 Connection: close Date: Mon, 26 Oct 2015 11:28:40 GMT Location: http://3c0g3e.net/?a=370951&s=24dcba&c=wl_con Server: nginx Content-Length: 45 Content-Type: text/html; charset=UTF-8 Expires: Wed, 28 Oct 2015 11:28:40 GMT Set-Cookie: AFFID=370951; expires=Wed, 25-Nov-2015 11:28:40 GMT; path=/; domain=.p57rri.net Set-Cookie: SID=24dcba; expires=Wed, 25-Nov-2015 11:28:40 GMT; path=/; domain=.p57rri.net X-Powered-By: ARR/2.5(86ea9a97c) | clean |
http://3c0g3e.net/?a=370951&s=24dcba&c=wl_con | HTTP/1.1 302 Found Cache-Control: max-age=172800 Connection: close Date: Mon, 26 Oct 2015 11:28:40 GMT Location: http://693-beauty.3c0g3e.net/dochwne/intforshwne/ Server: nginx Content-Length: 49 Content-Type: text/html; charset=UTF-8 Expires: Wed, 28 Oct 2015 11:28:40 GMT Set-Cookie: AFFID=370951; expires=Wed, 25-Nov-2015 11:28:40 GMT; path=/; domain=.3c0g3e.net Set-Cookie: SID=24dcba; expires=Wed, 25-Nov-2015 11:28:40 GMT; path=/; domain=.3c0g3e.net X-Powered-By: ARR/2.5(86ea9a97c) | clean |
http://693-beauty.3c0g3e.net/dochwne/intforshwne/ | 200 OK Content-Length: 22415 Content-Type: text/html | clean |
http://693-beauty.3c0g3e.net/static/diet/en/doctors2/js/today.js | 200 OK Content-Length: 687 Content-Type: text/javascript | clean |
http://adimjatisansthan.org/static/diet/en/doctors2/js/close.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Mon, 26 Oct 2015 11:28:43 GMT Pragma: no-cache Location: http://www.adimjatisansthan.org/static/diet/en/doctors2/js/close.js Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT X-Pingback: http://www.adimjatisansthan.org/xmlrpc.php | clean |
http://www.adimjatisansthan.org/static/diet/en/doctors2/js/close.js | 404 Not Found Content-Length: 23256 Content-Type: text/html | clean |
http://www.adimjatisansthan.org/wp-content/plugins/compact-wp-audio-player/js/soundmanager2-nodebug-jsmin.js?ver=4.3.1 | 200 OK Content-Length: 35422 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.8 | 200 OK Content-Length: 53010 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-includes/js/jquery/jquery.js?ver=1.11.3 | 200 OK Content-Length: 95977 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.4.0 | 200 OK Content-Length: 53855 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.4.0 | 200 OK Content-Length: 21095 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.61 | 200 OK Content-Length: 6017 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/jquery.sumoselect.min.js?ver=1.2.61 | 200 OK Content-Length: 10215 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.61 | 200 OK Content-Length: 6419 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.61 | 200 OK Content-Length: 25171 Content-Type: application/javascript | clean |
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 | 200 OK Content-Length: 7583 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ;(function($) { function defined(a) { return typeof a !== 'undefined'; } function extend(child, parent, prototype) { var F = function() {}; F.prototype = parent.prototype; child.prototype = new F(); child.prototype.constructor = child; parent.prototype.constructor = parent; child._super = parent.prototype; if (prototype) { $.extend(child.prototype, prototype); } } var SUBST = [ ['', ''], element: function() { return this.__isFullScreen ? this._fullScreenElement : null; } });$.fullscreen = IS_NATIVELY_SUPPORTED ? new FullScreenNative() : new FullScreenFallback(); $.fn.fullscreen = function(options) { var elem = this[0]; options = $.extend({ toggleClass: null, }, options); options.styles = { }; if (elem) { $.fullscreen.open(elem, options); } return this; }; })(jQuery); Antivirus reports:
| ||
http://www.adimjatisansthan.org/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.61 | 200 OK Content-Length: 7174 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: adimjatisansthan.org
Result:
GET / HTTP/1.1
Host: adimjatisansthan.org
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: adimjatisansthan.org
Referer: http://www.google.com/search?q=adimjatisansthan.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: adimjatisansthan.org
Referer: http://www.google.com/search?q=adimjatisansthan.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=adimjatisansthan.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://adimjatisansthan.org/
Result: adimjatisansthan.org is not infected or malware details are not published yet.
Result: adimjatisansthan.org is not infected or malware details are not published yet.