Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.jobprize.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.jobprize.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Fri, 16 May 2014 17:39:09 GMT Location: http://qrue.qpoe.com/ Server: Apache Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.2.17 | malicious |
Scanned pages/files
Request | Server response | Status |
http://www.jobprize.com/ | 200 OK Content-Length: 29465 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/Post_Profile | HTTP/1.1 302 Moved Temporarily Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 16 May 2014 17:39:10 GMT Pragma: no-cache Location: http://www.jobprize.com/Login Server: Apache Content-Length: 0 Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=5bdeceb4bd6bf52382bff961ca748556; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://www.jobprize.com/login | HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 16 May 2014 17:39:11 GMT Pragma: no-cache Server: Apache Vary: negotiate Content-Location: login.php Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=2c79e4d1376a6e8a66bb568af31d28ed; path=/ TCN: choice X-Powered-By: PHP/5.2.17 | clean |
http://www.jobprize.com/login.php | 200 OK Content-Length: 18058 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/index.php | 200 OK Content-Length: 29465 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/Seek_Profile | 200 OK Content-Length: 301380 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/faqs.php | 200 OK Content-Length: 18230 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/forgotpass.php | 200 OK Content-Length: 17429 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/jobs.php | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 16 May 2014 17:39:17 GMT Location: http://www.jobprize.com/Jobs.php Server: Apache Content-Length: 240 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.jobprize.com/test404page.js | 404 Not Found Content-Length: 631 Content-Type: text/html | clean |
http://www.jobprize.com/register_seeker.php | 200 OK Content-Length: 19898 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/js/validation.js | 200 OK Content-Length: 9546 Content-Type: application/x-javascript | clean |
http://www.jobprize.com/register_hunter.php | 200 OK Content-Length: 19900 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/Contact.php | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 16 May 2014 17:39:20 GMT Location: http://www.jobprize.com/contact.php Server: Apache Content-Length: 243 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.jobprize.com/contact.php | 200 OK Content-Length: 15887 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/about_us.php | 200 OK Content-Length: 18334 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/terms.php | 200 OK Content-Length: 18202 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/Finance-Business/608 | 200 OK Content-Length: 18144 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function clearf() { document.getElementById('txtKey').value=""; } Antivirus reports:
| ||
http://www.jobprize.com/Finance-Business/forgotpass.php | 404 Not Found Content-Length: 631 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=jobprize.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://jobprize.com/
Result: jobprize.com is not infected or malware details are not published yet.
Result: jobprize.com is not infected or malware details are not published yet.