New scan:

Malware Scanner report for informer.az

Malicious/Suspicious/Total urls checked
1/0/16
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/1
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://informer.az/
200 OK
Content-Length: 36257
Content-Type: text/html
clean
http://informer.az/tek/functions.js
200 OK
Content-Length: 15463
Content-Type: application/javascript
clean
http://js.sn00.net/00/25/68.js
200 OK
Content-Length: 68
Content-Type: application/x-javascript
clean
http://www.fayda.az/show-ads.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Thu, 22 Oct 2015 16:33:35 GMT
Pragma: no-cache
Location: http://fayda.az/show-ads.js
Server: nginx/1.2.1
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Set-Cookie: PHPSESSID=pfbueb0qca046s9pbc41tedni3; path=/
X-Pingback: http://fayda.az/xmlrpc.php
X-Powered-By: PHP/5.4.44-0+deb7u1
clean
http://fayda.az/show-ads.js
404 Not Found
Content-Length: 38660
Content-Type: text/html
clean
http://fayda.az/wp-includes/js/jquery/jquery.js?ver=1.11.3
200 OK
Content-Length: 95977
Content-Type: application/x-javascript
clean
http://fayda.az/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 7200
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/kento-post-view-counter/js/kento-pvc.js?ver=4.3
200 OK
Content-Length: 1347
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/kento-post-view-counter/js/google-chart-jsapi.js?ver=4.3
200 OK
Content-Length: 24547
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/photo-gallery/js/bwg_frontend.js?ver=1.2.53
200 OK
Content-Length: 5871
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/photo-gallery/js/jquery.mobile.js?ver=1.2.53
200 OK
Content-Length: 6419
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/photo-gallery/js/jquery.mCustomScrollbar.concat.min.js?ver=1.2.53
200 OK
Content-Length: 25171
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/photo-gallery/js/jquery.fullscreen-0.4.1.js?ver=0.4.1
200 OK
Content-Length: 7583
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

;(function($) {
function defined(a) {
return typeof a !== 'undefined';
}
function extend(child, parent, prototype) {
var F = function() {};
F.prototype = parent.prototype;
child.prototype = new F();
child.prototype.constructor = child;
parent.prototype.constructor = parent;
child._super = parent.prototype;
if (prototype) {
$.extend(child.prototype, prototype);
}
}
var SUBST = [
['', ''],
... 3601 bytes are skipped ...
,
element: function() {
return this.__isFullScreen ? this._fullScreenElement : null;
}
});$.fullscreen = IS_NATIVELY_SUPPORTED
? new FullScreenNative()
: new FullScreenFallback();
$.fn.fullscreen = function(options) {
var elem = this[0];
options = $.extend({
toggleClass: null,
}, options);
options.styles = {
};

if (elem) {
$.fullscreen.open(elem, options);
}
return this;
};
})(jQuery);

Antivirus reports:

Emsisoft
Trojan.Generic.1389340 (B)

http://fayda.az/wp-content/plugins/photo-gallery/js/bwg_gallery_box.js?ver=1.2.53
200 OK
Content-Length: 7100
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/plugins/social-share-by-wp-dev-shed/js/sswpds-scripts.js?ver=1.0.0
200 OK
Content-Length: 332
Content-Type: application/x-javascript
clean
http://fayda.az/wp-content/themes/verge/assets/frameworks/bootstrap/js/bootstrap.min.js?ver=4.3
200 OK
Content-Length: 29110
Content-Type: application/x-javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: informer.az

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 22 Oct 2015 16:33:32 GMT
Pragma: no-cache
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 DAV/2 mod_mono/2.6.3 mod_auth_passthrough/2.1 mod_bwlimited/1.4 mod_jk/1.2.32 mod_qos/9.74 mod_perl/2.0.5 Perl/v5.8.8
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=473e0c078772c100e4f247efab440be9; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: informer.az
Referer: http://www.google.com/search?q=informer.az

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=informer.az

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://informer.az/

Result: informer.az is not infected or malware details are not published yet.