Scanned pages/files
Request | Server response | Status |
http://libertychurchsisterhood.net/ | 200 OK Content-Length: 6504 Content-Type: text/html | clean |
http://libertychurchsisterhood.net/wp-includes/js/jquery/jquery.js?ver=1.10.2 | 200 OK Content-Length: 93085 Content-Type: application/x-javascript | clean |
http://libertychurchsisterhood.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/x-javascript | clean |
http://libertychurchsisterhood.net/wp-content/themes/Chameleon/js/jquery.cycle.all.min.js?ver=1.0 | 200 OK Content-Length: 32211 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) (function($){var ver="2.99";if($.support==undefined){$.support={opacity:!($.browser.msie)};}function debug(s){$.fn.cycle.debug&&log(s);}function log(){window.console&&console.log&&console.log("[cycle] "+Array.prototype.join.call(arguments," "));}$.expr[":"].paused=function(el){return el.cyclePause;};$.fn.cycle=function(options,arg2){var o={s:this.selector,c:this.context};if(this.length===0&&options!="stop"){if(!$.isReady&&o.s){log("DOM not ready, queuing s Antivirus reports:
| ||
http://libertychurchsisterhood.net/wp-content/themes/Chameleon/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=2.0 | 200 OK Content-Length: 13124 Content-Type: application/x-javascript | clean |
http://libertychurchsisterhood.net/test404page.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: libertychurchsisterhood.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 08 Jun 2014 16:51:07 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
X-Died: timeout at scan.pm line 1538.
X-Pingback: http://libertychurchsisterhood.net/xmlrpc.php
X-Powered-By: PHP/5.4.28
GET / HTTP/1.1
Host: libertychurchsisterhood.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 08 Jun 2014 16:51:07 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
X-Died: timeout at scan.pm line 1538.
X-Pingback: http://libertychurchsisterhood.net/xmlrpc.php
X-Powered-By: PHP/5.4.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: libertychurchsisterhood.net
Referer: http://www.google.com/search?q=libertychurchsisterhood.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: libertychurchsisterhood.net
Referer: http://www.google.com/search?q=libertychurchsisterhood.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=libertychurchsisterhood.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://libertychurchsisterhood.net/
Result: libertychurchsisterhood.net is not infected or malware details are not published yet.
Result: libertychurchsisterhood.net is not infected or malware details are not published yet.