Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://markt.com.au/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: markt.com.au Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Tue, 22 Apr 2014 07:04:05 GMT Location: http://www.cibonline.org/cache/mod_poll/7c7478fde2f89a23.php Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html | malicious |
Scanned pages/files
Request | Server response | Status |
http://markt.com.au/ | 200 OK Content-Length: 6470 Content-Type: text/html | clean |
http://markt.com.au/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: text/javascript | clean |
http://markt.com.au/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: text/javascript | clean |
http://markt.com.au/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: text/javascript | clean |
http://markt.com.au/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: text/javascript | clean |
http://markt.com.au/templates/js_formula/wright/js/html5.js | 200 OK Content-Length: 1540 Content-Type: text/javascript | clean |
http://markt.com.au/templates/js_formula/js/accordion.open.js | 200 OK Content-Length: 3054 Content-Type: text/javascript | clean |
http://markt.com.au/templates/js_formula/js/menu.js | 200 OK Content-Length: 903 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) window.addEvent('domready', function() { $$('#menu ul li.parent').addEvent('mouseenter', function() { var x = this.getPosition().x; var wp = 0; try { wp = this.getSize().size.x; } catch (e) { wp = this.getSize().x; } var li = this; var sm = this.getElement('ul'); if (sm) { sm.setStyle('display','block'); var w = 0; var mw = 0; try { w = sm.getSize().size.x; mw = window.getSize().s } var posx = sm.getPosition().x; var par = li.getParent('li.parent'); if (par) { if (posx + w > mw) { sm.setStyle('left','-' + (w) + 'px'); } } else { if (x+w > mw) { sm.setStyle('left','-' + (w-wp) + 'px'); } } } }).addEvent('mouseleave', function() { var sm = this.getElement('ul'); if (sm) { sm.setStyle('display','none'); } }) }); Antivirus reports:
| ||
http://markt.com.au/test404page.js | 404 Not Found Content-Length: 2445 Content-Type: text/html | clean |
http://cdn.dsultra.com/js/registrar.js | 200 OK Content-Length: 1652 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=markt.com.au
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://markt.com.au/
Result: markt.com.au is not infected or malware details are not published yet.
Result: markt.com.au is not infected or malware details are not published yet.