New scan:

Malware Scanner report for skankazoid.com

Malicious/Suspicious/Total urls checked
1/0/17
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/13
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://skankazoid.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 28 Sep 2014 10:25:50 GMT
Location: http://www.skankazoid.com/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.skankazoid.com/xmlrpc.php
X-Powered-By: PHP/5.2.17
clean
http://www.skankazoid.com/
200 OK
Content-Length: 35805
Content-Type: text/html
clean
http://ajax.googleapis.com/ajax/libs/swfobject/2.2/swfobject.js?ver=3.8
200 OK
Content-Length: 10220
Content-Type: text/javascript
clean
http://jsc.skankazoid.com/js/cpop.js
200 OK
Content-Length: 1989
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

var puShown = false;

function doOpen(url)
{
if ( puShown == true )
{
return true;
}

win = window.open(url, 'ljPu', 'toolbar,status,resizable,scrollbars,menubar,location,height=1024,width=1024');
if ( win )
{
win.blur();
puShown = true;

... 1201 bytes are skipped ...
{
document.addEventListener( 'click', checkTarget, false );
}
}


function checkTarget(e)
{
if ( !getCookie('popundr') ) {
var e = e || window.event;
var win = doOpen('http://www.gfrevenge.com/main.htm?id=in3sting&cmp=skankp');

setCookie('popundr', 1, 60*100000);
}
}

initPu();

Antivirus reports:

Agnitum
JS.Pornpop.Gen

http://ads.crakmedia.com/www/delivery/fl.js
200 OK
Content-Length: 6707
Content-Type: application/javascript
clean
http://live-cams-1.livejasmin.com/fca/scripts.php?size=1&flags=137438953473,137438953504,1,4100&appletcol=AD0000&txtcolor1=00CCFF&txtcolor2=FFCC00&txtcolor3=AAAAFF&txtcolor4=FFFFFF&txtcolor5=FF8484&txtcolor6=FFCC00&txtcolor7=FFCC00&txtcolor8=FFFFFF&txtcolor9=FFFFFF&txtcolor10=FFCC00&membcol=A180C5&guestcol=F06724&addcol1=850000&addcol2=7E0101&addcol3=E33335&addcol4=400000&addcol5=C10A09&addcol6=92 <span>...108 symbols skipped</span>
200 OK
Content-Length: 2396
Content-Type: application/javascript
clean
http://skankazoid.com/ http://www.pinktube.com/videos/category/30/ass/latest/
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Sun, 28 Sep 2014 10:25:54 GMT
Pragma: no-cache
Location: http://www.skankazoid.com/%20http:/www.pinktube.com/videos/category/30/ass/latest/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
X-Pingback: http://www.skankazoid.com/xmlrpc.php
X-Powered-By: PHP/5.2.17
clean
http://www.skankazoid.com/%20http:/www.pinktube.com/videos/category/30/ass/latest/
404 Not Found
Content-Length: 27124
Content-Type: text/html
clean
http://www.skankazoid.com/submit-a-skank/
200 OK
Content-Length: 30150
Content-Type: text/html
clean
http://www.skankazoid.com/wp-includes/js/jquery/jquery.js?ver=1.10.2
200 OK
Content-Length: 93085
Content-Type: application/javascript
clean
http://www.skankazoid.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 7200
Content-Type: application/javascript
clean
http://www.skankazoid.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.3
200 OK
Content-Length: 4289
Content-Type: application/javascript
clean
http://www.skankazoid.com/wp-content/plugins/si-contact-form/includes/fscf-scripts.js?ver=152
200 OK
Content-Length: 693
Content-Type: application/javascript
clean
http://www.skankazoid.com/finest/
200 OK
Content-Length: 39199
Content-Type: text/html
clean
http://www.skankazoid.com/exclusive/
200 OK
Content-Length: 40108
Content-Type: text/html
clean
http://www.skankazoid.com/by-request/
200 OK
Content-Length: 37190
Content-Type: text/html
clean
http://www.skankazoid.com/about/
200 OK
Content-Length: 35422
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: skankazoid.com

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 28 Sep 2014 10:25:50 GMT
Location: http://www.skankazoid.com/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.skankazoid.com/xmlrpc.php
X-Powered-By: PHP/5.2.17

...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: skankazoid.com
Referer: http://www.google.com/search?q=skankazoid.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=skankazoid.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://skankazoid.com/

Result: skankazoid.com is not infected or malware details are not published yet.