Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: virusblokada.com.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 09 Oct 2014 17:06:41 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
X-Pingback: http://virusblokada.com.pl/xmlrpc.php
X-Powered-By: PHP/5.3.28
GET / HTTP/1.1
Host: virusblokada.com.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 09 Oct 2014 17:06:41 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
X-Pingback: http://virusblokada.com.pl/xmlrpc.php
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: virusblokada.com.pl
Referer: http://www.google.com/search?q=virusblokada.com.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: virusblokada.com.pl
Referer: http://www.google.com/search?q=virusblokada.com.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://virusblokada.com.pl/ | 200 OK Content-Length: 24938 Content-Type: text/html | clean |
http://virusblokada.com.pl/wp-includes/js/swfobject.js?ver=2.2-20120417 | 200 OK Content-Length: 10231 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-includes/js/jquery/jquery.js?ver=1.7.2 | 200 OK Content-Length: 94861 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/epanel/shortcodes/js/et_shortcodes_frontend.js?ver=1.6 | 200 OK Content-Length: 8417 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/plugins/anti-captcha/anti-captcha-0.2.js.php?ver=ab2481c9f93d0ed3033a3281d865ccb2 | 200 OK Content-Length: 3058 Content-Type: text/html | clean |
http://virusblokada.com.pl/test404page.js | 404 Not Found Content-Length: 12768 Content-Type: text/html | clean |
http://virusblokada.com.pl/wp-content/plugins/anti-captcha/anti-captcha-0.2.js.php?ver=2056d8c1dec3d12cbce646b348d189d1 | 200 OK Content-Length: 3466 Content-Type: text/html | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/js/jquery.lavalamp.1.3.3-min.js | 200 OK Content-Length: 8924 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/js/jquery.cycle.all.min.js | 200 OK Content-Length: 27880 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/js/superfish.js | 200 OK Content-Length: 3714 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/js/jquery.easing.1.3.js | 200 OK Content-Length: 8097 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/plugins/contact-form-7/includes/js/jquery.form.js?ver=3.14 | 200 OK Content-Length: 14589 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.2.1 | 200 OK Content-Length: 6630 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/epanel/page_templates/js/prettyphoto/jquery.prettyPhoto.js?ver=3.0.3 | 200 OK Content-Length: 22373 Content-Type: application/javascript | clean |
http://virusblokada.com.pl/wp-content/themes/Polished/epanel/page_templates/js/et-ptemplates-frontend.js?ver=1.1 | 200 OK Content-Length: 4196 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=virusblokada.com.pl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://virusblokada.com.pl/
Result: virusblokada.com.pl is not infected or malware details are not published yet.
Result: virusblokada.com.pl is not infected or malware details are not published yet.