New scan:

Malware Scanner report for khotyn.net

Malicious/Suspicious/Total urls checked
0/5/17
5 pages have suspicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/1
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://khotyn.net/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 06 Apr 2014 10:44:44 GMT
Location: http://www.khotyn.net/
Server: nginx
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.khotyn.net/xmlrpc.php
clean
http://www.khotyn.net/
200 OK
Content-Length: 58272
Content-Type: text/html
clean
http://www.khotyn.net/wp-content/themes/khotyn_11/script.js
200 OK
Content-Length: 11004
Content-Type: application/x-javascript
clean
http://www.khotyn.net/wp-includes/js/jquery/jquery.js?ver=1.10.2
200 OK
Content-Length: 93085
Content-Type: application/x-javascript
clean
http://www.khotyn.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 7200
Content-Type: application/x-javascript
clean
http://www.khotyn.net/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ajax.js?ver=3.8.1
200 OK
Content-Length: 33
Content-Type: application/x-javascript
clean
http://www.meteoprog.ua/informers/?id=1335990896
200 OK
Content-Length: 3184
Content-Type: text/html
clean
http://www.meteoprog.ua/test404page.js
404 Not Found
Content-Length: 46925
Content-Type: text/html
suspicious
Suspicious code found

<div id="mp_banner_102" class="informer" ><!-- banner_place:footer_our_projects;
banner_id: 102;
banner_name:avtobazar UA;
banner_order:50;--><a rel="nofollow" class="informer" style="float:right; margin-top:13px;" href="http://auto.ria.ua/">Автобазар</a>
</div>

http://www.meteoprog.ua/js/adriver/adriver.core.2.js
200 OK
Content-Length: 5236
Content-Type: application/javascript
clean
http://www.meteoprog.ua/js/content_roll/adfox.asyn.code.ver3.js
200 OK
Content-Length: 3318
Content-Type: application/javascript
clean
http://www.meteoprog.ua/js/content_roll/adfox.asyn.code.scroll.js
200 OK
Content-Length: 2410
Content-Type: application/javascript
clean
http://www.meteoprog.ua/cache/js/bundle_5b96f45c5d4ba88b454326cba659808e.js?1391084307
200 OK
Content-Length: 195432
Content-Type: application/javascript
clean
http://www.meteoprog.ua/en/about/
200 OK
Content-Length: 39097
Content-Type: text/html
suspicious
Suspicious code found

<div id="mp_banner_102" class="informer" ><!-- banner_place:footer_our_projects;
banner_id: 102;
banner_name:avtobazar UA;
banner_order:50;--><a rel="nofollow" class="informer" style="float:right; margin-top:13px;" href="http://auto.ria.ua/">Автобазар</a>
</div>

http://www.meteoprog.ua/en/catalog/Ukraine
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 06 Apr 2014 10:41:12 GMT
Location: http://www.meteoprog.ua/en/catalog/Ukraine/
Server: nginx
Content-Length: 178
Content-Type: text/html
clean
http://www.meteoprog.ua/en/catalog/ukraine/
200 OK
Content-Length: 300499
Content-Type: text/html
suspicious
Suspicious code found

<div id="mp_banner_204" class="informer" ><!-- banner_place:before_all_notua;
banner_id: 204;
banner_name:top banner UA for zabugor;
banner_order:50;--><div id="top_banner" style="display:block;width:100%; min-height:89px; background: #f2f2f2; text-align:center; left: 50%; width: 728px; position: relative; margin: 0px 0px 0px -364px;" >
<!-- AdRiver code START.
... 437 bytes are skipped ...
ElementById('top_banner').style.background="url("+bg+")";

</script>
<script type="text/javascript"><!--
google_ad_client = "ca-pub-5337958802379722";
/* 728x90_Meteoprog_ua_world */
google_ad_slot = "6135672607";
google_ad_width = 728;
google_ad_height = 90;
//-->
</script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
</div></div>

http://www.meteoprog.ua/en/
200 OK
Content-Length: 108068
Content-Type: text/html
suspicious
Suspicious code found

<div id="mp_banner_102" class="informer" ><!-- banner_place:footer_our_projects;
banner_id: 102;
banner_name:avtobazar UA;
banner_order:50;--><a rel="nofollow" class="informer" style="float:right; margin-top:13px;" href="http://auto.ria.ua/">Автобазар</a>
</div>

http://www.meteoprog.ua/ru/uagreement/
200 OK
Content-Length: 92225
Content-Type: text/html
suspicious
Suspicious code found

<div id="mp_banner_102" class="informer" ><!-- banner_place:footer_our_projects;
banner_id: 102;
banner_name:avtobazar UA;
banner_order:50;--><a rel="nofollow" class="informer" style="float:right; margin-top:13px;" href="http://auto.ria.ua/">Автобазар</a>
</div>


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: khotyn.net

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 06 Apr 2014 10:44:44 GMT
Location: http://www.khotyn.net/
Server: nginx
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.khotyn.net/xmlrpc.php

...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: khotyn.net
Referer: http://www.google.com/search?q=khotyn.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=khotyn.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://khotyn.net/

Result: khotyn.net is not infected or malware details are not published yet.