Malware Scanner report for az-tudo.com

http://www.az-tudo.com/

200 OK
Content-Length: 160669
Content-Type: text/html

Hidden iFrame found.
size: 0x0     
src: http://blog-pager.blogspot.com.br/

http://ajax.googleapis.com/ajax/libs/jquery/1.4.1/jquery.min.js

200 OK
Content-Length: 70843
Content-Type: text/javascript

http://ajax.googleapis.com/ajax/libs/jquery/1.5/jquery.min.js

200 OK
Content-Length: 85925
Content-Type: text/javascript

http://yourjavascript.com/11215013191/jquery.colorbox-min.js

200 OK
Content-Length: 9284
Content-Type: text/javascript

http://dl.dropbox.com/u/93265919/efeitoimagens/blogger.js

HTTP/1.1 302 FOUND
Cache-Control: no-cache
Connection: close
Date: Wed, 18 Jun 2014 02:58:08 GMT
Pragma: no-cache
Location: http://dl.dropboxusercontent.com/u/93265919/efeitoimagens/blogger.js
Server: nginx
Content-Type: text/html; charset=utf-8

http://dl.dropboxusercontent.com/u/93265919/efeitoimagens/blogger.js

404 None
Content-Length: 53
Content-Type: text/plain

http://dl.dropboxusercontent.com/test404page.js

404 Not Found
Content-Length: 53
Content-Type: text/plain

http://dl.dropbox.com/u/93265919/efeitoimagens/data-post.js

HTTP/1.1 302 FOUND
Cache-Control: no-cache
Connection: close
Date: Wed, 18 Jun 2014 02:58:09 GMT
Pragma: no-cache
Location: http://dl.dropboxusercontent.com/u/93265919/efeitoimagens/data-post.js
Server: nginx
Content-Type: text/html; charset=utf-8

http://dl.dropboxusercontent.com/u/93265919/efeitoimagens/data-post.js

404 None
Content-Length: 53
Content-Type: text/plain

http://dl.dropboxusercontent.com/s/goc6n5d5phacl3y/seo2.js

200 OK
Content-Length: 385
Content-Type: application/javascript

Malicious code - confirmed by antiviruses (see below)


Antivirus reports:


Hidden iFrame found.
size: 0x0     style: hidden
src: http://seotraffic.com.br

http://www.ishopeletro.com.br/anunciar/anuncie.js

200 OK
Content-Length: 1891
Content-Type: application/javascript

http://jf.revolvermaps.com/r.js

200 OK
Content-Length: 2365
Content-Type: application/javascript

http://widget.networkedblogs.com/getwidget?bid=1211456

200 OK
Content-Length: 10934
Content-Type: application/javascript

https://www.blogger.com/static/v1/widgets/2131577651-widgets.js

200 OK
Content-Length: 90264
Content-Type: text/javascript

https://apis.google.com/js/plusone.js

200 OK
Content-Length: 11798
Content-Type: application/javascript

https://sites.google.com/site/paginblogger/numeradas/pagenav.js

HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Connection: close
Date: Wed, 18 Jun 2014 02:58:12 GMT
Pragma: no-cache
ETag: "1401830941722"
Location: https://sites.google.com/site/paginblogger/numeradas/pagenav.js?attredirects=0
Server: GSE
Content-Type: text/html; charset=UTF-8
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Last-Modified: Tue, 03 Jun 2014 21:29:01 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noarchive
X-XSS-Protection: 1; mode=block

https://sites.google.com/site/paginblogger/numeradas/pagenav.js?attredirects=0

HTTP/1.1 302 Moved Temporarily
Cache-Control: private, max-age=0
Connection: close
Date: Wed, 18 Jun 2014 02:58:12 GMT
Location: https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth=ANoY7crcX82opPy1SPLD9GsymBPu2bPZN6INAVdtgu05szp1TJL8p47wzPFIC_gphy_89TcOjSQJhs6CAA_jOEo8N7c7_EWBX2tOMLQ_NtYmIQwf1P2oLkUjv6GsIMC3eNehVl8eu562wSK3VrFTySE36G4n0cxEG-lsUbgXmQCOt7LVxQcRpgoBf0mFT_TfQaMvgVMC-7O0jxbNgoDANW5jSzMNl2hFEm3Ombzx2EmTaSoXZePf4hM%3D&attredirects=0
Server: GSE
Content-Type: text/html; charset=UTF-8
Expires: Wed, 18 Jun 2014 02:58:12 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block

https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth=anoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw5jszmnl2hfem3ombzx2emtasoxzepf4hm%3d&attredirects=0

HTTP/1.1 302 Moved Temporarily
Cache-Control: private, max-age=0
Connection: close
Date: Wed, 18 Jun 2014 02:58:13 GMT
Location: https://www.google.com/a/UniversalLogin?service=jotspot&passive=1209600&continue=https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth%3Danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw5jszmnl2hfem3ombzx2emtasoxzepf4hm%253D%26attredirects%3D0&followup=https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth%3Danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw5jszmnl2hfem3ombzx2emtasoxzepf4hm%253D%26attredirects%3D0
Server: GSE
Content-Type: text/html; charset=UTF-8
Expires: Wed, 18 Jun 2014 02:58:13 GMT
Alternate-Protocol: 443:quic
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block

https://www.google.com/a/universallogin?service=jotspot&passive=1209600&continue=https://89edd755-a-62cb3a1a-s-sites.googlegroups.com/site/paginblogger/numeradas/pagenav.js?attachauth%3danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw <span>...443 symbols skipped</span>

HTTP/1.1 301 Moved Permanently
Cache-Control: private, max-age=0
Connection: close
Date: Wed, 18 Jun 2014 02:58:13 GMT
Location: /a/cpanel/universallogin?service=jotspot&passive=1209600&continue=https%3A%2F%2F89edd755-a-62cb3a1a-s-sites.googlegroups.com%2Fsite%2Fpaginblogger%2Fnumeradas%2Fpagenav.js%3Fattachauth%3Danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw5jszmnl2hfem3ombzx2emtasoxzepf4hm%253d%26attredirects%3D0&followup=https%3A%2F%2F89edd755-a-62cb3a1a-s-sites.googlegroups.com%2Fsite%2Fpaginblogger%2Fnumeradas%2Fpagenav.js%3Fattachauth%3Danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_tfqamvgvmc-7o0jxbngodanw5jszmnl2hfem3ombzx2emtasoxzepf4hm%253d%26attredirects%3D0
Server: GSE
Content-Length: 1054
Content-Type: text/html; charset=UTF-8
Expires: Wed, 18 Jun 2014 02:58:13 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

https://www.google.com/a/cpanel/universallogin?service=jotspot&passive=1209600&continue=https%3a%2f%2f89edd755-a-62cb3a1a-s-sites.googlegroups.com%2fsite%2fpaginblogger%2fnumeradas%2fpagenav.js%3fattachauth%3danoy7crcx82oppy1spld9gsymbpu2bpzn6inavdtgu05szp1tjl8p47wzpfic_gphy_89tcojsqjhs6caa_joeo8n7c7_ewbx2tomlq_ntymiqwf1p2olkujv6gsimc3enehvl8eu562wsk3vrftyse36g4n0cxeg-lsubgxmqcot7lvxqcrpgobf0mft_t <span>...482 symbols skipped</span>

404 Not Found
Content-Length: 141
Content-Type: text/html