Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=celestialmaiden.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://celestialmaiden.com/ | 200 OK Content-Length: 18564 Content-Type: text/html | clean |
http://www.celestialmaiden.com/mc.js | 200 OK Content-Length: 4994 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var ap = window.navigator.appVersion.toLowerCase(); var i = ap.indexOf("msie"); if (ap.indexOf("windows") >= 0 && i >= 0 && ((i + 5) < ap.length)) { var v = ap.charAt(i + 5); if (v >= 5 ) { document.write('<scr' + 'ipt src="http://us.i1.yimg.com/us.yimg.com/i/mc/mc1.js"></scr' + 'ipt>'); document.write('<scr' + 'ipt src="http://us.i1.yimg.com/us.yimg.com/i/mc/mc2.js"></scr' + 'ipt>'); } } Antivirus reports:
| ||
http://celestialmaiden.com/test404page.js | HTTP/1.1 404 Not Found Connection: close Date: Sat, 10 Jan 2015 07:29:54 GMT Accept-Ranges: bytes Server: Apache Content-Length: 124 Content-Type: text/html | clean |
http://templates.doteasy.com/errorpages/error404/ | 200 OK Content-Length: 10599 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.8.2/jquery.min.js | 200 OK Content-Length: 93435 Content-Type: text/javascript | clean |
http://celestialmaiden.com/js/selectBox/jquery.selectBox.min.js | HTTP/1.1 404 Not Found Connection: close Date: Sat, 10 Jan 2015 07:29:56 GMT Accept-Ranges: bytes Server: Apache Content-Length: 124 Content-Type: text/html | clean |
http://templates.doteasy.com/test404page.js | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://celestialmaiden.com/js/jquery.watermark.min.js | HTTP/1.1 404 Not Found Connection: close Date: Sat, 10 Jan 2015 07:29:57 GMT Accept-Ranges: bytes Server: Apache Content-Length: 124 Content-Type: text/html | clean |
http://celestialmaiden.com/js/fancybox/jquery.fancybox.js | HTTP/1.1 404 Not Found Connection: close Date: Sat, 10 Jan 2015 07:29:58 GMT Accept-Ranges: bytes Server: Apache Content-Length: 124 Content-Type: text/html | clean |
http://celestialmaiden.com/js/fancybox/helpers/jquery.fancybox-media.js | HTTP/1.1 404 Not Found Connection: close Date: Sat, 10 Jan 2015 07:29:58 GMT Accept-Ranges: bytes Server: Apache Content-Length: 124 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: celestialmaiden.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 07:29:52 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 18564
Content-Type: text/html
Last-Modified: Sat, 01 Nov 2014 02:00:04 GMT
...18564 bytes of data.
GET / HTTP/1.1
Host: celestialmaiden.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 07:29:52 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 18564
Content-Type: text/html
Last-Modified: Sat, 01 Nov 2014 02:00:04 GMT
...18564 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: celestialmaiden.com
Referer: http://www.google.com/search?q=celestialmaiden.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: celestialmaiden.com
Referer: http://www.google.com/search?q=celestialmaiden.com
Result:
The result is similar to the first query. There are no suspicious redirects found.