Malware Scanner report for sharezones.biz

Malicious/Suspicious/Total urls checked: 0/9/15

9 pages have suspicious code. See details below

Blacklists: Found

The website is marked by Yandex as suspicious.

The website "sharezones.biz" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.

Malicious Redirects: OK

Malicious/Hidden/Total iFrames: 0/0/0

Deface / Content modification: OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

Malware Removal
Blacklists Removal
Reason Eliminating
1 Month Hack Insurance

More details

Website Hack Insurance

Files & DB Monitoring
Daily Backups
Malware & Hack Detection
Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=sharezones.biz

Result: This site is not currently listed as suspicious.

Query: http://yandex.com/infected?l10n=en&url=http://sharezones.biz/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

Request	Server response	Status
http://sharezones.biz/	200 OK Content-Length: 11568 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://web.imgbum.net/8edzrkj3zto9ed614aoqvoyq63q08yd	200 OK Content-Length: 8434 Content-Type: text/javascript	clean
http://sharezones.biz/lib/cpaint2.inc.js	200 OK Content-Length: 34545 Content-Type: application/javascript	clean
http://sharezones.biz/lib/upload.js	200 OK Content-Length: 5500 Content-Type: application/javascript	clean
http://sharezones.biz/lib/user.js	200 OK Content-Length: 11813 Content-Type: application/javascript	clean
http://sharezones.biz/index.php	200 OK Content-Length: 11568 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/gallery.php	200 OK Content-Length: 13840 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/login.php	200 OK Content-Length: 7462 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/register.php	200 OK Content-Length: 8085 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/terms.php	200 OK Content-Length: 11679 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/email/form.php	200 OK Content-Length: 1483 Content-Type: text/html	clean
http://sharezones.biz/test404page.js	404 Not Found Content-Length: 564 Content-Type: text/html	clean
http://sharezones.biz/forgotpass.php	200 OK Content-Length: 7288 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/gallery.php?limit=15&start=15	200 OK Content-Length: 14305 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...
http://sharezones.biz/gallery.php?limit=15&start=0	200 OK Content-Length: 13840 Content-Type: text/html	suspicious
Suspicious code. Script contains iFrame. ...[2164 bytes skipped]... isplay\|removeChild\|false\|gradient\|linear\|E3E3E3\|stop\|FAFAFA\|bottom\|undefined\|000\|id\|src\|ShowAdbblock\|opacity\|background\|zIndex\|border\|200px\|fixed\|position\|text_detected\|parentNode\|text_detected_title\|15px\|uk\|lang\|padding\|innerHTML\|else\|none\|fontSize\|300\|ad_height\|adhandler\|adzone\|php\|adType\|RU\|adserver\|block\|jpg\|popudner\|com\|ads\|index\|google\|banner\|http\|uk_UA\|52mp\|content\|site\|blocker\|to\|userLanguage\|switch\|ad\|deactivate\|32\|UA\|like\|To\|default\|iframe\|img\|gain\|detected\|access\|language\|browserLanguage\|ru_UA\|marginTop\|333333\|lineHeight\|11px\|9px\|webkit\|moz\|borderTopLeftRadius\|1951px\|borderTopRightRadius\|MozBorderTopRightRadius\|borderBottom\|EAEAEA\|className\|visibility\|hidden\|clientHeight\|indexOf\|CCCCCC\|16px\|fontWeight\|bold\|borderTop\|MozBorderRadius\|MozBorderTopLeftRadius\|100000\|filter\|alpha\|borderRadius\|000000\|right\|1052px\|setTimeout\|500\|400px\|parseFloat\|marginLeft\|FFF\|fontFamily\|100001\|auto\|marginRight\|Arial\|14px\|50'.split('\|'),0,{})) Decoded script: ...[254 bytes skipped]... function text_detected(){return is_ru()?'ÐÐ»Ñ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð° Ðº ÐºÐ¾Ð½ÑÐµÐ½ÑÑ ÑÐ°Ð¹ÑÐ° Ð¾ÑÐºÐ»ÑÑÐ¸ÑÐµ, Ð¿Ð¾Ð¶Ð°Ð»ÑÐ¹ÑÑÐ°, Ð±Ð»Ð¾ÐºÐ¸ÑÐ¾Ð²ÑÐ¸ÐºÐ¸ ÑÐµÐºÐ»Ð°Ð¼Ñ.':'To gain access to site content, deactivate ad blocker, like AdBlock.'}function text_detected_title(){return is_ru()?'ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½ AdBlock!':'AdBlock detected.'}var v=false;var z=undefined;var x=undefined;function k(){z=document.createElement('iframe');x=document.createElement('img');z.id='zd';z.src='/52mp/index.php/adhandler/';z.style.display='block';z.style.border='none';x.id='xd';x.src='http://google.com/ads/popudner/banner.jpg?ad_height=300&adzone=100&adserver=1&adType=32';x.style.width=z.style.width='1px';x.style.height=z.style.height='1px';x.style.top=z.style.top='-1951px';x.style.left=z.style.left='-1052px';document.body.appendChild(z);document.body.appendChild(x);setTimeout(h,500)}function ShowAdbblock(){var ov ...[5796 bytes skipped]...

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: sharezones.biz

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 12 Dec 2014 22:56:09 GMT
Pragma: no-cache
ETag: PUB1418424969
Server: nginx
Vary: Accept-Encoding
Vary: Accept-Encoding,User-Agent
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Fri, 12 Dec 2014 22:55:59 GMT
Set-Cookie: PHPSESSID=hbpeed2kcgkkm3cuv371s4i193; path=/
X-Powered-By: PHP/5.2.17

Second query (visit from search engine):
GET / HTTP/1.1
Host: sharezones.biz
Referer: http://www.google.com/search?q=sharezones.biz

Result:
The result is similar to the first query. There are no suspicious redirects found.

Recently found suspicious websites

Malware Scanner report for sharezones.biz

Malware & Hack Repair

Website Hack Insurance

Safe Browsing / Blacklists

Scanned pages/files

Malicious Redirects

Recently found suspicious websites

Company

Services

eVuln Labs

eVuln Tools