Scanned pages/files
Request | Server response | Status |
http://muckwork.ru/ | 200 OK Content-Length: 24745 Content-Type: text/html | clean |
http://muckwork.ru/themes/Beauty_Shot_ad/script.js | 200 OK Content-Length: 7825 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) (function($) { var m = document.uniqueID && document.compatMode && !window.XMLHttpRequest && document.execCommand; try { if (!!m) { m('BackgroundImageCache', false, true); } } catch (oh) { }; var data = [ {str:navigator.userAgent,sub:'Chrome',ver:'Chrome',name:'chrome'}, {str:navigator.vendor,sub:'Apple',ver:'Version',name:'safari'}, {prop:window.opera,ver:'Opera',name:'opera'}, {str:n Antivirus reports:
| ||
http://muckwork.ru/sitemap_0.html | 200 OK Content-Length: 39658 Content-Type: text/html | clean |
http://muckwork.ru/images/24.jpg | 200 OK Content-Length: 1544 Content-Type: image/jpeg | clean |
http://muckwork.ru/test404page.js | 404 Not Found Content-Length: 5 Content-Type: text/html | clean |
http://muckwork.ru/images/66.jpg | 200 OK Content-Length: 1765 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/92.jpg | 200 OK Content-Length: 2299 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/102.jpg | 200 OK Content-Length: 1821 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/62.jpg | 200 OK Content-Length: 3286 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/43.jpg | 200 OK Content-Length: 1991 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/30.jpg | 200 OK Content-Length: 2011 Content-Type: image/jpeg | clean |
http://muckwork.ru/images/47.jpg | 200 OK Content-Length: 1975 Content-Type: image/jpeg | clean |
http://muckwork.ru/archive_Nov-2012_0.html | 200 OK Content-Length: 21240 Content-Type: text/html | clean |
http://muckwork.ru/archive_Oct-2012_0.html | 200 OK Content-Length: 18587 Content-Type: text/html | clean |
http://muckwork.ru/archive_Sep-2012_0.html | 200 OK Content-Length: 19649 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: muckwork.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 09 Oct 2014 17:05:23 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=5230b90a4c06cde8922d6c2915053ee2; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: muckwork.ru
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 09 Oct 2014 17:05:23 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=5230b90a4c06cde8922d6c2915053ee2; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: muckwork.ru
Referer: http://www.google.com/search?q=muckwork.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: muckwork.ru
Referer: http://www.google.com/search?q=muckwork.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=muckwork.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://muckwork.ru/
Result: muckwork.ru is not infected or malware details are not published yet.
Result: muckwork.ru is not infected or malware details are not published yet.