New scan:

Malware Scanner report for tickets.nczoo.org

Malicious/Suspicious/Total urls checked
0/4/16
4 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "tickets.nczoo.org" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=tickets.nczoo.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tickets.nczoo.org/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://tickets.nczoo.org/
HTTP/1.1 302 Found
Cache-Control: private
Date: Sat, 20 Dec 2014 16:57:43 GMT
Location: /ErrorPage.aspx?aspxerrorpath=/welcome.aspx
Server: Microsoft-IIS/7.5
Content-Length: 168
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=jw1tjdnqc3zf3ezk5ayu2f55; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
clean
http://tickets.nczoo.org/errorpage.aspx?aspxerrorpath=/welcome.aspx
200 OK
Content-Length: 17181
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.nczoo.org

...[4010 bytes skipped]...
removed align="center" from <tr>-->
<tr>
<!--removed width="100" class="footer" from <td> -->
<td>
<div id="ctl00_PageFooter"><span class="whitetext">&copy; &amp; &#8482; 1998 - 2013 | North Carolina Zoo | 4401 Zoo Parkway | Asheboro, North Carolina 27205 | 1.800.488.0444 x7700</span> <br /> <a class="sublink" href="http://www.nczoo.org/privacy.html">Privacy Policy</a> | <a class="sublink" href="logout.aspx">Logout</a></div>
</td>
</tr>
</table>
</div><!-- end footer -->
</div><!-- end wrapper -->
</body>
</html>

http://tickets.nczoo.org/WebResource.axd?d=2vfA_mlAWltMg3mcFkQqOyNDlOq7iYPzstfRLaMgnMXGb4UXVHlUS9kGFFti_fnPXjtKNkGnF40r_N0XWA3hUm-NtwY1&t=635294965144197332
200 OK
Content-Length: 20794
Content-Type: application/x-javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=sXx_dRUvv4IW_C1G0fP1Vxku7EXfEufUYC-kteJSktTj381scQuskleodeUxSXa7iK-fVzUULVzzHyMwVx1grmgSn-HOVoFMKMP21WsAQ53nZQ3njHrdxWZcpwsT4jXq2bfmOFIXAQme2vYWVkD78h_Vv5M1&t=2e2045e2
200 OK
Content-Length: 99504
Content-Type: application/x-javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=1-UH_kN9MAa1he5vrn4RVH4vQ0D6DMjzPBKpRF0z9wfBSorOAUxDWVPg4zCuaILEe-j_FsihtmZrcIp0BVL0SBr1mmX374XlDv_HGFMezIB_3kb-9zvv3DAbHv6TmcBVzE6dkdqUvqwT_GPpd1flwfE4J03c64VnzARuq9qbxXh2UY3w0&t=2e2045e2
200 OK
Content-Length: 32254
Content-Type: application/x-javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=EgU1Qa19rmFsdHm5_X8CL0JpT9PagQRytShqrbWEGGXkAn07FhE7LBgp_P33gv7pm6rqBr-GwWLzmgeXFHoSbX9yRm0jr1jDZ0_TNiySePH8yupL12yc9dVY8U5nNieOepQ6wg2&t=ffffffffe743a918
200 OK
Content-Length: 47972
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=jxCyPX4Hav5rCwMXrFtxgh18IsiwIj8PEpXhOPgMExSlzOWL6DKx9U_iIxEucrrdWyybKl7ZLBXQtL4cOecXcMf7AoKxl16N7o0hVmR-voJTILwNjvgXGqE2x8dPzljdYOe3Og2&t=ffffffffe743a918
200 OK
Content-Length: 94007
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=uPyPMTaQYj2dp9EgVgO8M4e2dmWW07IqltrY00lLhnJjKoKcu3R-Va11YKDtbdxs8R2_mVPAGjkbZUNnmJ7aVYW4igQtuo2JM21zkQxofJRrk4UwQK70W2IfcwgEr-Lld5w8Ug2&t=ffffffffe743a918
200 OK
Content-Length: 7314
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=wnHnsBExnPmKg6oKk3eXxXJ4uwmoqKyP_DFPxucy_dqQLWDa0BPxyEPJ7ZfgECIikoidIDwtCFrFBeKft23peJfLJ7_rf_KCPGH-CzlYT9HRd0Mf63_lfwXnTPoSOkW87L75yHne29XPorMV0EWVEFA02541&t=ffffffffe743a918
200 OK
Content-Length: 9122
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=8DcJZ4YHc9zBjn1GEJSkkZ_bQ-uU2iAls_A9sLeFaviEW9xLuauGNYWN_H4gAFFvSZg0b0FUIsu3YKkZecIps148bshC9tAEfYS69r-u2Z4aDqFyHivdPTwHf8LeKEfyqeZOhUZ-lNeV-BvM0zI0O3VkkLk1&t=ffffffffe743a918
200 OK
Content-Length: 13780
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=3SRSz3tOZVCEARUunvls53azvY7aOr9hZGvVW5MICtoETvW_BWvi0dVLF283QF1By2Vd48tkOmwYNzpnOiTpWtnCZoIkTH7eDYigKv5jlWs71QYnH3wj16_jBnwpXT6mNO4o_5KEeJ-ESPYWlqjfQZuRjkI1&t=ffffffffe743a918
200 OK
Content-Length: 27733
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=u-qvCoNww1H99gjCwHdzcsBnRp3LCsP1U0nBp7re5lShrKvZUZE7vvkIH2cu49XtsF8PrwMcV_2u3baGtCVCpofE2vQtYTPad2R-0KtvzTILAO19TzEToyK1Y4nK0RUgNhFpg7g10BPEJmKCJgEwOY1XTlQ1&t=ffffffffe743a918
200 OK
Content-Length: 69947
Content-Type: text/javascript
clean
http://tickets.nczoo.org/ScriptResource.axd?d=Ag4FSo1q3NTTe4g-8REJymS08ErBgAqK72o5pCuqXJA13hZgRBAwbVIDQVU4EbhrTglw1dYOcvr6FjzJu9ztE-VLI-Ic1hFDs82gttkBY956VqvOr7sAsmydsJ-yZsAGOybzmBy_2MbzZzD1c2FK7JfY6tQ1&t=ffffffffe743a918
200 OK
Content-Length: 10504
Content-Type: text/javascript
clean
http://tickets.nczoo.org/Info.aspx?EventID=10
200 OK
Content-Length: 27460
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.nczoo.org

...[4034 bytes skipped]...
removed align="center" from <tr>-->
<tr>
<!--removed width="100" class="footer" from <td> -->
<td>
<div id="ctl00_PageFooter"><span class="whitetext">&copy; &amp; &#8482; 1998 - 2013 | North Carolina Zoo | 4401 Zoo Parkway | Asheboro, North Carolina 27205 | 1.800.488.0444 x7700</span> <br /> <a class="sublink" href="http://www.nczoo.org/privacy.html">Privacy Policy</a> | <a class="sublink" href="logout.aspx">Logout</a></div>
</td>
</tr>
</table>
</div><!-- end footer -->
</div><!-- end wrapper -->
</body>
</html>

http://tickets.nczoo.org/Info.aspx?EventID=11
200 OK
Content-Length: 40704
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.nczoo.org

...[4012 bytes skipped]...
removed align="center" from <tr>-->
<tr>
<!--removed width="100" class="footer" from <td> -->
<td>
<div id="ctl00_PageFooter"><span class="whitetext">&copy; &amp; &#8482; 1998 - 2013 | North Carolina Zoo | 4401 Zoo Parkway | Asheboro, North Carolina 27205 | 1.800.488.0444 x7700</span> <br /> <a class="sublink" href="http://www.nczoo.org/privacy.html">Privacy Policy</a> | <a class="sublink" href="logout.aspx">Logout</a></div>
</td>
</tr>
</table>
</div><!-- end footer -->
</div><!-- end wrapper -->
</body>
</html>

http://tickets.nczoo.org/Info.aspx?EventID=12
200 OK
Content-Length: 34853
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.nczoo.org

...[1923 bytes skipped]...
> __doPostBack('PageTimeout', '')
}
function timeoutMsg(timeoutms) {
t = setTimeout("OpenTimeoutWindow()", timeoutms);
currenttimeoutms = timeoutms; // save this off for the AJAX case
}
r purchase at the gift shops on day of visit. Information on the activities for Scouts is available on the Zoo Web site at <a href="http://www.nczoo.org/education/scoutleaderhints.html">www.nczoo.org<br />
</a></P></td><td align="center" valign="middle"><a href="javascript:__doPostBack('ctl00$ContentPlaceHolder1$grid$ctl08$ctl01','')"><span class="booknowlink"></span></a></td>
</tr>
</table>

</td> <!-- End Start Activity Table --></tr>
</table> <!-- End Main Layout Table -->
<
...[1929 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: tickets.nczoo.org

Result:
HTTP/1.1 302 Found
Cache-Control: private
Date: Sat, 20 Dec 2014 16:57:43 GMT
Location: /ErrorPage.aspx?aspxerrorpath=/welcome.aspx
Server: Microsoft-IIS/7.5
Content-Length: 168
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=jw1tjdnqc3zf3ezk5ayu2f55; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET

...168 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tickets.nczoo.org
Referer: http://www.google.com/search?q=tickets.nczoo.org

Result:
The result is similar to the first query. There are no suspicious redirects found.