New scan:

Malware Scanner report for dm-samara.ru

Malicious/Suspicious/Total urls checked
0/0/15
Blacklists
OK
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL. The chain of malicious redirects found:
->http://bitly.com/sttmln
271 websites infected.
->http://goo.gl/0rxysb
3236 websites infected.
->http://sh.oowoo.ru/redsh.php
78 websites infected.
->http://bitly.com/1knqqvm
271 websites infected.
->http://bongacams.com/track?c=18000

->http://bongacash.com/tools/hit.php?c=18000


The website "dm-samara.ru" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://dm-samara.ru/
(imitation of visitor from search engine)


GET / HTTP/1.1
Host: dm-samara.ru
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 302 Found
Connection: close
Date: Fri, 18 Jul 2014 18:58:55 GMT
Location: http://bitly.com/STTMlN
Server: Apache/2.2.8 (ASPLinux)
Content-Length: 290
Content-Type: text/html; charset=iso-8859-1
malicious
URL: http://bitly.com/STTMlN
(imitation of visitor from search engine)


GET /STTMlN HTTP/1.1
Host: bitly.com
Referer: http://www.google.com/search?q=redirect+check2
HTTP/1.1 301 Moved Permanently
Cache-Control: private; max-age=90
Connection: close
Date: Fri, 18 Jul 2014 19:33:32 GMT
Location: http://goo.gl/0rXySb
Server: nginx
Content-Length: 112
Content-Type: text/html; charset=utf-8
Mime-Version: 1.0
Set-Cookie: _bit=53c9768c-0018f-07d37-3c1cf10a;domain=.bitly.com;expires=Wed Jan 14 19:33:32 2015;path=/; HttpOnly
malicious
URL: http://goo.gl/0rXySb
(imitation of visitor from search engine)


GET /0rXySb HTTP/1.1
Host: goo.gl
Referer: http://www.google.com/search?q=redirect+check3
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Connection: close
Date: Fri, 18 Jul 2014 19:33:32 GMT
Pragma: no-cache
Location: http://sh.oowoo.ru/redsh.php
Server: GSE
Content-Type: text/html; charset=UTF-8
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Alternate-Protocol: 80:quic
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
malicious
URL: http://sh.oowoo.ru/redsh.php
(imitation of visitor from search engine)


GET /redsh.php HTTP/1.1
Host: sh.oowoo.ru
Referer: http://www.google.com/search?q=redirect+check4
HTTP/1.1 302 Found
Connection: close
Date: Fri, 18 Jul 2014 19:33:12 GMT
Location: http://bitly.com/1kNQqvM
Server: nginx/1.0.15
Content-Length: 0
Content-Type: text/html; charset=CP1251
X-Powered-By: PHP/5.2.17
malicious
URL: http://bitly.com/1kNQqvM
(imitation of visitor from search engine)


GET /1kNQqvM HTTP/1.1
Host: bitly.com
Referer: http://www.google.com/search?q=redirect+check5
HTTP/1.1 301 Moved Permanently
Cache-Control: private; max-age=90
Connection: close
Date: Fri, 18 Jul 2014 19:33:32 GMT
Location: http://bongacams.com/track?c=18000
Server: nginx
Content-Length: 126
Content-Type: text/html; charset=utf-8
Mime-Version: 1.0
Set-Cookie: _bit=53c9768c-0034e-07d37-3c1cf10a;domain=.bitly.com;expires=Wed Jan 14 19:33:32 2015;path=/; HttpOnly
suspicious
URL: http://bongacams.com/track?c=18000
(imitation of visitor from search engine)


GET /track?c=18000 HTTP/1.1
Host: bongacams.com
Referer: http://www.google.com/search?q=redirect+check6
HTTP/1.1 302 Found
Cache-Control: no-cache
Connection: close
Date: Fri, 18 Jul 2014 19:33:32 GMT
Location: http://bongacash.com/tools/hit.php?c=18000
Server: nginx/1.6.0
Content-Length: 226
Content-Type: text/html; charset=iso-8859-1
Expires: Fri, 18 Jul 2014 19:33:31 GMT
suspicious

Scanned pages/files

RequestServer responseStatus
http://dm-samara.ru/
200 OK
Content-Length: 15502
Content-Type: text/html
clean
http://dm-samara.ru/bitrix/templates/apacnew/scripts/glow-1.7.2-core.js
200 OK
Content-Length: 95356
Content-Type: application/x-javascript
clean
http://dm-samara.ru/bitrix/templates/apacnew/scripts/glow-1.7.2-widgets.js
200 OK
Content-Length: 113817
Content-Type: application/x-javascript
clean
http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK
Content-Length: 72174
Content-Type: text/javascript
clean
http://dm-samara.ru/bitrix/templates/apacnew/scripts/apac.js
200 OK
Content-Length: 296
Content-Type: application/x-javascript
clean
http://dm-samara.ru/en/
200 OK
Content-Length: 10748
Content-Type: text/html
clean
http://dm-samara.ru/bitrix/templates/apacnew_en/scripts/glow-1.7.2-core.js
200 OK
Content-Length: 95356
Content-Type: application/x-javascript
clean
http://dm-samara.ru/bitrix/templates/apacnew_en/scripts/glow-1.7.2-widgets.js
200 OK
Content-Length: 113817
Content-Type: application/x-javascript
clean
http://dm-samara.ru/bitrix/templates/apacnew_en/scripts/jquery-1.4.1.min.js
200 OK
Content-Length: 70843
Content-Type: application/x-javascript
clean
http://dm-samara.ru/scripts/jquery-lightbox/js/jquery.lightbox.min.js
200 OK
Content-Length: 21338
Content-Type: application/x-javascript
clean
http://dm-samara.ru/bitrix/templates/apacnew_en/scripts/apac.js
200 OK
Content-Length: 296
Content-Type: application/x-javascript
clean
http://dm-samara.ru/en/about/
200 OK
Content-Length: 4809
Content-Type: text/html
clean
http://dm-samara.ru/en/about/partners/
200 OK
Content-Length: 4809
Content-Type: text/html
clean
http://dm-samara.ru/en/uch/
200 OK
Content-Length: 5126
Content-Type: text/html
clean
http://dm-samara.ru/en/uch/usl/
200 OK
Content-Length: 5126
Content-Type: text/html
clean

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=dm-samara.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://dm-samara.ru/

Result: dm-samara.ru is not infected or malware details are not published yet.