Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=alienwarelaptops.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://alienwarelaptops.net/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.alienwarelaptops.net/ | 200 OK Content-Length: 4317 Content-Type: text/html | clean |
http://www.cpalead.com/locker.php?pub=221453 | 200 OK Content-Length: 5820 Content-Type: text/javascript | clean |
http://www.alienwarelaptops.net/jquery.js | 404 Not Found Content-Length: 326 Content-Type: text/html | clean |
http://www.alienwarelaptops.net/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://connect.facebook.net/en_US/all.js | 200 OK Content-Length: 164160 Content-Type: application/x-javascript | clean |
http://www.cpalead.com/exitpopup.php?pub=221453&gateid=MjA0MDAz | 200 OK Content-Length: 2609 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var PreventExitSplash = false; function addLoadEvent(func){ var oldonload = window.onload; if (typeof window.onload != 'function') { window.onload = func; } else { window.onload = function(){ if (oldonload) { oldonload(); } func(); } } } function addClickEvent(a, i, func){ if (typeof a[i].onclick != 'function') { a[i].oncl body_tag.bottomMargin = "0px"; body_tag.leftMargin = "0px"; body_tag.style.overflow = "hidden"; body_tag.appendChild(new_div); return exitsplashmessage; } } function wait_for_body_tag() { body_tag = document.getElementsByTagName("body").item(0); if (body_tag == null) { setTimeout("wait_for_body_tag();", 200); } else { window.onbeforeunload = DisplayExitSplash; } } wait_for_body_tag(); addLoadEvent(load_ett); Antivirus reports:
| ||
http://j.maxmind.com/app/geoip.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: alienwarelaptops.net
Result:
GET / HTTP/1.1
Host: alienwarelaptops.net
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: alienwarelaptops.net
Referer: http://www.google.com/search?q=alienwarelaptops.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: alienwarelaptops.net
Referer: http://www.google.com/search?q=alienwarelaptops.net
Result:
The result is similar to the first query. There are no suspicious redirects found.