Scanned pages/files
Request | Server response | Status |
http://tlcp.org.uk/ | HTTP/1.1 200 OK Date: Tue, 16 Sep 2014 22:51:27 GMT Accept-Ranges: bytes ETag: "4646711e2763ce1:0" Server: Microsoft-IIS/7.5 Content-Length: 390 Content-Type: text/html Last-Modified: Fri, 07 Jun 2013 02:31:30 GMT X-Powered-By: ASP.NET | clean |
http://www.dulas.org.uk/ | 200 OK Content-Length: 29083 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) $(document).ready(function() { $("#homeText1").hide(); $(".mainBodyText1").click(function () { $("#homeText1").toggle(); }); }); Antivirus reports:
| ||
http://pass-1234.com/js/19657.js | 200 OK Content-Length: 1361 Content-Type: application/x-javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js | 200 OK Content-Length: 91668 Content-Type: text/javascript | clean |
http://tlcp.org.uk/js/nav.js | 404 Not Found Content-Length: 5332 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://faultRequestLogPath | 404 Not Found Content-Length: 5370 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://faultRequestLogPath | 404 Not Found Content-Length: 5382 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5394 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5406 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5418 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5430 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5442 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5454 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5466 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5478 Content-Type: text/html | clean |
http://tlcp.org.uk/js/file://file://file://file://file://file://file://file://file://file://file://faultRequestLogPath | 404 Not Found Content-Length: 5490 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tlcp.org.uk
Result:
HTTP/1.1 200 OK
Date: Tue, 16 Sep 2014 22:51:27 GMT
Accept-Ranges: bytes
ETag: "4646711e2763ce1:0"
Server: Microsoft-IIS/7.5
Content-Length: 390
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 02:31:30 GMT
X-Powered-By: ASP.NET
...390 bytes of data.
GET / HTTP/1.1
Host: tlcp.org.uk
Result:
HTTP/1.1 200 OK
Date: Tue, 16 Sep 2014 22:51:27 GMT
Accept-Ranges: bytes
ETag: "4646711e2763ce1:0"
Server: Microsoft-IIS/7.5
Content-Length: 390
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 02:31:30 GMT
X-Powered-By: ASP.NET
...390 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tlcp.org.uk
Referer: http://www.google.com/search?q=tlcp.org.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tlcp.org.uk
Referer: http://www.google.com/search?q=tlcp.org.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tlcp.org.uk
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tlcp.org.uk/
Result: tlcp.org.uk is not infected or malware details are not published yet.
Result: tlcp.org.uk is not infected or malware details are not published yet.