New scan:

Malware Scanner report for rohaniyat.org

Malicious/Suspicious/Total urls checked
9/0/15
9 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/12
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.rohaniyat.org/
200 OK
Content-Length: 62278
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=2759322&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK
Content-Length: 94840
Content-Type: text/javascript
clean
http://illiweb.com/rsc/86/frm/lang/ar.js
200 OK
Content-Length: 70197
Content-Type: application/x-javascript
clean
http://illiweb.com/rsc/86/frm/jquery/ticker/ticker.js
200 OK
Content-Length: 9018
Content-Type: application/x-javascript
clean
http://illiweb.com/rsc/86/frm/cookiechoices.js
200 OK
Content-Length: 5032
Content-Type: application/x-javascript
clean
http://www.rohaniyat.org/calendar
200 OK
Content-Length: 31672
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=5058023&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://www.rohaniyat.org/faq
200 OK
Content-Length: 64425
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=2305225&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://illiweb.com/rsc/86/frm/collapsible_faq.js
200 OK
Content-Length: 1103
Content-Type: application/x-javascript
clean
http://www.rohaniyat.org/search
200 OK
Content-Length: 21806
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=6261878&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://illiweb.com/rsc/86/frm/extendedview.js
200 OK
Content-Length: 1445
Content-Type: application/x-javascript
clean
http://www.rohaniyat.org/memberlist
200 OK
Content-Length: 67819
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=1951956&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://www.rohaniyat.org/groups
200 OK
Content-Length: 15601
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=9726804&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://www.rohaniyat.org/register
200 OK
Content-Length: 17958
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=9671004&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://www.rohaniyat.org/login
200 OK
Content-Length: 15020
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=3415752&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef

http://www.rohaniyat.org/profile?mode=sendpassword
200 OK
Content-Length: 14279
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function AT_adFillSlot(){document.write('<iframe src=\"http://an.z5x.net/tt?id=4009473&size=300x250&cb=6173468&referrer=rohaniyat.org\" frameborder=\"0\" scrolling=\"no\" marginheight=\"0\" marginwidth=\"0\" topmargin=\"0\" leftmargin=\"0\" allowtransparency=\"true\" width=\"300\" height=\"250\"></iframe>');}
AT_adFillSlot();

Antivirus reports:

Ikarus
Trojan.IframeRef


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: rohaniyat.org

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: rohaniyat.org
Referer: http://www.google.com/search?q=rohaniyat.org

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=rohaniyat.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://rohaniyat.org/

Result: rohaniyat.org is not infected or malware details are not published yet.