Scanned pages/files
Request | Server response | Status |
http://mpscontrols.com/ | 200 OK Content-Length: 7020 Content-Type: text/html | clean |
http://mpscontrols.com/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://mpscontrols.com/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://mpscontrols.com/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://mpscontrols.com/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
http://mpscontrols.com/templates/js_formula/wright/js/html5.js | 200 OK Content-Length: 1540 Content-Type: application/javascript | clean |
http://mpscontrols.com/templates/js_formula/js/accordion.open.js | 200 OK Content-Length: 3054 Content-Type: application/javascript | clean |
http://mpscontrols.com/templates/js_formula/js/menu.js | 200 OK Content-Length: 903 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) window.addEvent('domready', function() { $$('#menu ul li.parent').addEvent('mouseenter', function() { var x = this.getPosition().x; var wp = 0; try { wp = this.getSize().size.x; } catch (e) { wp = this.getSize().x; } var li = this; var sm = this.getElement('ul'); if (sm) { sm.setStyle('display','block'); var w = 0; var mw = 0; try { w = sm.getSize().size.x; mw = window.getSize().s } var posx = sm.getPosition().x; var par = li.getParent('li.parent'); if (par) { if (posx + w > mw) { sm.setStyle('left','-' + (w) + 'px'); } } else { if (x+w > mw) { sm.setStyle('left','-' + (w-wp) + 'px'); } } } }).addEvent('mouseleave', function() { var sm = this.getElement('ul'); if (sm) { sm.setStyle('display','none'); } }) }); Antivirus reports:
| ||
http://mpscontrols.com/about-us | 200 OK Content-Length: 10835 Content-Type: text/html | clean |
http://mpscontrols.com/modules/mod_AutsonSlideShow/js/jquery-1.5.2.min.js | 200 OK Content-Length: 85925 Content-Type: application/javascript | clean |
http://mpscontrols.com/modules/mod_AutsonSlideShow/js/jquery.easing.1.3.js | 200 OK Content-Length: 8097 Content-Type: application/javascript | clean |
http://mpscontrols.com/modules/mod_AutsonSlideShow/js/jquery.animate-colors-min.js | 200 OK Content-Length: 1736 Content-Type: application/javascript | clean |
http://mpscontrols.com/modules/mod_AutsonSlideShow/js/jquery.skitter.min.js | 200 OK Content-Length: 50242 Content-Type: application/javascript | clean |
http://mpscontrols.com/products | 200 OK Content-Length: 7208 Content-Type: text/html | clean |
http://mpscontrols.com/services | 200 OK Content-Length: 6413 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mpscontrols.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 21 Aug 2014 09:39:21 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Length: 7020
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 286a2e0e5acd655e4a313281ce017514=19abisk2b2mv9hvccb34nc4ck4; path=/
...7020 bytes of data.
GET / HTTP/1.1
Host: mpscontrols.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 21 Aug 2014 09:39:21 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Length: 7020
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 286a2e0e5acd655e4a313281ce017514=19abisk2b2mv9hvccb34nc4ck4; path=/
...7020 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: mpscontrols.com
Referer: http://www.google.com/search?q=mpscontrols.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mpscontrols.com
Referer: http://www.google.com/search?q=mpscontrols.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mpscontrols.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://mpscontrols.com/
Result: mpscontrols.com is not infected or malware details are not published yet.
Result: mpscontrols.com is not infected or malware details are not published yet.