New scan:

Malware Scanner report for andromedical.by

Malicious/Suspicious/Total urls checked
0/0/2
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked By SeRaVo !  (5 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://andromedical.by/
200 OK
Content-Length: 1340
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: Hacked By SeRaVo !



<!DOCTYPE R html PUBLIC z "-//W3C//DTD XHTML 0 Transitional//EN" 4 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<meta http-equiv="Content-Language" content="fa" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Hacked By SeRaVo !</title>
<style type="text/css">
.style1 {
text-align: center;
font-size: 20pt;
color: #00FF00;
}
.style2 {
text-align: center;
font-family: Arial Black;
font-size: 30pt;
color: #00FF00;

}
.style5 {
font-family: Tahoma;
}
</style>
</head>

<body style="color: #FF0000; background-color: #0
...[969 bytes skipped]...


http://andromedical.by/test404page.js
404 Not Found
Content-Length: 331
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: andromedical.by

Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 21 Oct 2014 22:46:29 GMT
Accept-Ranges: bytes
Server: nginx/1.4.4
Vary: Accept-Encoding,User-Agent
Content-Length: 1340
Content-Type: text/html
Last-Modified: Wed, 24 Sep 2014 11:06:45 GMT

...1340 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: andromedical.by
Referer: http://www.google.com/search?q=andromedical.by

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=andromedical.by

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://andromedical.by/

Result: andromedical.by is not infected or malware details are not published yet.