Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cm94.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: weizun.net
Result:
HTTP/1.1 200 OK
Connection: Close
Date: Sat, 04 Oct 2014 21:40:47 GMT
Server: Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)
Content-Type: text/html
GET / HTTP/1.1
Host: weizun.net
Result:
HTTP/1.1 200 OK
Connection: Close
Date: Sat, 04 Oct 2014 21:40:47 GMT
Server: Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector)
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: weizun.net
Referer: http://www.google.com/search?q=weizun.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: weizun.net
Referer: http://www.google.com/search?q=weizun.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.cm94.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:10 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cma94.com/ | 200 OK Content-Length: 42528 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.bourse-emploi-apprentissage.cma94.com ...[18390 bytes skipped]... t;span class="level5">Verser ma Taxe d'Apprentissage</span> </a> </li> <li class="level3" access="0" level="2" id="420"> <span class="level4" class="separator"> <span class="level5">...</span> </span> </li> <li class="level3" access="0" level="2" id="419"> <a class="level4" href="http://www.bourse-emploi-apprentissage.cma94.com" target="_blank"> <span class="level5">Rechercher un salarié</span> </a> </li> </ul> </li> <li class="level1" access="0" level="1" id="35"> <a class="level2" href="/createur-repreneur/minstaller-dans-lartisanat/informations-prealables.html"> <span class="level3">Créateur / Repreneur</span> </a> <ul class="level2"> < ...[33129 bytes skipped]... | ||
http://www.cma94.com/templates/tpl_cma94/js/mootools-1.2.5-core-yc.js | 200 OK Content-Length: 66798 Content-Type: application/javascript | clean |
http://www.cm94.com/templates/tpl_cma94/js/mootools-1.2.5.1-more.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:12 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cma94.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://www.cm94.com/templates/tpl_cma94/js/ticker.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:12 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cm94.com/templates/tpl_cma94/js/SqueezeBox.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:12 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cm94.com/templates/tpl_cma94/js/sexyalertbox.v1.2.moo.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:12 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cm94.com/templates/tpl_cma94/js/calendar-eightysix-v1.0.1.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:13 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cm94.com/templates/tpl_cma94/js/UvumiDropdown.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 30 Mar 2014 23:39:13 GMT Location: http://www.cma94.com/ Server: Apache Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.cma94.com/modules/mod_menu_elastique/tmpl/js/dropline.js | 200 OK Content-Length: 9932 Content-Type: application/javascript | clean |