New scan:

Malware Scanner report for leadingchildren.com

Malicious/Suspicious/Total urls checked
1/0/8
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked by Mr. DellatioNx196 - Indonesian Cyber Freedom  (66 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.leadingchildren.com/
200 OK
Content-Length: 16462
Content-Type: text/html
suspicious
Malicious code - confirmed by antiviruses (see below)



<!-- HTML Encryption provided by iWEBTOOL.com -->
<!--
document.write(unescape('%0A%0A%3C%2F%63%65%6E%74%65%72%3E%3C%6C%69%6E%6B%20%68%72%65%66%3D%27%68%74%74%70%3A%2F%2F%66%6F%6E%74%73%2E%67%6F%6F%67%6C%65%61%70%69%73%2E%63%6F%6D%2F%63%73%73%3F%66%61%6D%69%6C%79%3D%49%63%65%6C%61%6E%64%27%20%72%65%6C%3D%27%73%74%79%6C%65%73%68%65%65%74%27%20%74%79%70%65%3D%27%74%65%78%74%2F%63%73%73%27%3E%0A%3C%70%20%61%6C%69%67%6E%3D%22%63%65%6E%74%65%72%22%3E%0A%3C%66%6F%6E%74%2
... 3025 bytes are skipped ...
%3D%22%49%63%65%6C%61%6E%64%22%20%73%69%7A%65%3D%22%35%22%20%66%6F%6E%74%20%63%6F%6C%6F%72%3D%22%23%34%38%44%31%43%43%22%3E%66%69%63%61%68%6F%6C%69%63%40%6F%75%74%6C%6F%6F%6B%2E%63%6F%2E%69%64%3C%69%6D%67%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%6C%2E%79%69%6D%67%2E%63%6F%6D%2F%75%73%2E%79%69%6D%67%2E%63%6F%6D%2F%69%2F%6D%65%73%67%2F%65%6D%6F%74%69%63%6F%6E%73%37%2F%31%31%31%2E%67%69%66%22%3E%3C%2F%66%6F%6E%74%3E%3C%2F%66%6F%6E%74%3E%3C%62%72%3E%20%3C%2F%63%65%6E%74%65%72%3E%0A%3C%62%72%3E%0A'));

Antivirus reports:

CAT-QuickHeal
HTML/Phish.AXT

Deface/Content modification. The following signature was found: Hacked by Mr. DellatioNx196 - Indonesian Cyber Freedom

...[5289 bytes skipped]...
9%7A%65%74%69%74%6C%65%28%29%7B%20%74%62%35%5F%69%6E%69%74%28%30%29%3B%0A%7D%0A%74%62%35%5F%72%61%6E%64%6F%6D%69%7A%65%74%69%74%6C%65%28%29%3B%0A%0A%3C%2F%73%63%72%69%70%74%3E%20'));
//-->
</Script>


<meta name="robots" content="index, follow">
<link rel="SHORTCUT ICON" href="http://i.imgur.com/QYUFm5u.png"/>
<meta name="description" content="Hacked by Mr. DellatioNx196 - Indonesian Cyber Freedom"/>
<meta name="googlebot" content="index,follow"/>
<meta name="robots" content="all"/>
<meta name="robots schedule" content="auto"/>
<meta name="distribution" content="global"/>
<base target='_blank'/>

</head>


<title>./Hacked by Mr. DellatioNx196 | Indonesian Cyber Freedom</title>






<meta name="description" con
...[11004 bytes skipped]...


http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK
Content-Length: 72174
Content-Type: text/javascript
clean
http://jqueryrotate.googlecode.com/svn/trunk/jQueryRotate.js
200 OK
Content-Length: 13892
Content-Type: text/plain
clean
http://jqueryrotate.googlecode.com/test404page.js
404 Not Found
Content-Length: 1439
Content-Type: text/html
clean
http://jqueryrotate.googlecode.com//www.google.com/
404 Not Found
Content-Length: 1425
Content-Type: text/html
clean
http://www.p0wersurge.com/js/jquery-css-transform.js
200 OK
Content-Length: 4109
Content-Type: application/x-javascript
clean
http://www.p0wersurge.com/js/rotate3Di.js
200 OK
Content-Length: 5389
Content-Type: application/x-javascript
clean
http://www.leadingchildren.com//www.google.com/
404 Not Found
Content-Length: 332
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: leadingchildren.com

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: leadingchildren.com
Referer: http://www.google.com/search?q=leadingchildren.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=leadingchildren.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://leadingchildren.com/

Result: leadingchildren.com is not infected or malware details are not published yet.