New scan:

Malware Scanner report for marconswansea.com

Malicious/Suspicious/Total urls checked
0/1/2
1 page has suspicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

!-- Hacked By Phenomene Dz --  (44 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://marconswansea.com/
200 OK
Content-Length: 47514
Content-Type: text/html
suspicious
Suspicious code. Script contains iFrame.


<!-- Hacked By Phenomene Dz -->
<!-- fb.com/J1jeI
document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%4A%61%76%61%53%63%72%69%70%74%3E%6D%3D%27%25%33%43%68%65%61%64%25%33%45%25%30%41%25%33%43%74%69%74%6C%65%25%33%45%48%61%63%6B%65%64%25%32%30%42%79%25%32%30%50%68%65%6E%6F%6D%65%6E%65%25%32%30%44%7A%25%33%43%2F%74%69%74%6C%65%25%33%45%25%30%41%25%33%43%6C%69%6E%6B%25%32%30%52%45%4C%25%33%44%25%32%32
...[3569 bytes skipped]...

Decoded script:

...[13777 bytes skipped]...
22Trajan%20Pro%22%20size%3D%225%22%20color%3D%22%23FFFFFF%22%3E%26nbsp%3B%20%0A.%20.%20Will%20Be%20For%20Us%20%2C%20%3C/font%3E%3Cfont%20face%3D%22Trajan%20Pro%22%20size%3D%225%22%20color%3D%22%23FF0000%22%3E%0AInsha%20Allah%3C/font%3E%3C/p%3E%0A%09%09%09%3C/p%3E%0A%09%09%09%3C/td%3E%0A%09%09%3C/tr%3E%0A%09%3C/table%3E%0A%3C/p%3E%0A%3Ccenter%3E%0A%3Ccenter%3E%0A%3Ccenter%3E%0A%3Ccenter%3E%3C/p%3E%0A%3Cpre%3E%0A%3Ccenter%3E%0A%3Ccenter%3E%0A%3Ciframe%20src%3D%22//www.facebook.com/plugins/likebox.php%3Fhref%3Dhttps%253A%252F%252Fwww.facebook.com%252FJ1jeI%26amp%3Bwidth%26amp%3Bheight%3D62%26amp%3Bcolorscheme%3Dlight%26amp%3Bshow_faces%3Dfalse%26amp%3Bheader%3Dtrue%26amp%3Bstream%3Dfalse%26amp%3Bshow_border%3Dtrue%22%20scrolling%3D%22no%22%20frameborder%3D%220%22%20style%3D%22border%3Amedium%20none%3B%20overflow%3Ahidden%3B%20height%3A82px%3Bwidth%3A275px%22%20allowTransparency%3D%22true%22%3E%3C/iframe%3E%0A%3Cp%3E%0A%3Ccenter%3E%3Cs
...[1045 bytes skipped]...

Deface/Content modification. The following signature was found: !-- Hacked By Phenomene Dz --

<Script Language='Javascript'>
<!-- Hacked By Phenomene Dz -->
<!-- fb.com/J1jeI
document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%4A%61%76%61%53%63%72%69%70%74%3E%6D%3D%27%25%33%43%68%65%61%64%25%33%45%25%30%41%25%33%43%74%69%74%6C%65%25%33%45%48%61%63%6B%65%64%25%32%30%42%79%25%32%30%50%68%65%6E%6F%6D%65%6E%65%25%32%30%44%7A%25%33%43%2F%74%69%74%6C%65%25%33%45%25%30%41%25%33%43%6C%69%6E%6B%25%32%30%52%45%4C%25%33%44%25%32%32%53%48%4F%52%54
...[47055 bytes skipped]...


http://marconswansea.com/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: marconswansea.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 19 Dec 2015 23:47:37 GMT
Accept-Ranges: bytes
ETag: "b99a-515fd868d6436"
Server: Apache
Vary: Accept-Encoding
Content-Length: 47514
Content-Type: text/html
Last-Modified: Wed, 13 May 2015 21:45:11 GMT
X-Pad: avoid browser bug

...47514 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: marconswansea.com
Referer: http://www.google.com/search?q=marconswansea.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=marconswansea.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://marconswansea.com/

Result: marconswansea.com is not infected or malware details are not published yet.