New scan:

Malware Scanner report for li2p.com

Malicious/Suspicious/Total urls checked
0/2/22
2 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "li2p.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=li2p.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://li2p.com/
200 OK
Content-Length: 6473
Content-Type: text/html
clean
http://ajax.googleapis.com/ajax/libs/jquery/1.3/jquery.min.js
200 OK
Content-Length: 57254
Content-Type: text/javascript
clean
http://li2p.com/img/handler.js
200 OK
Content-Length: 8095
Content-Type: application/x-javascript
clean
http://li2p.com/registration/
200 OK
Content-Length: 8497
Content-Type: text/html
clean
http://li2p.com/login/
200 OK
Content-Length: 4139
Content-Type: text/html
clean
http://li2p.com/events/
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 21 Sep 2014 18:13:15 GMT
Pragma: no-cache
Location: http://li2p.com/logout/
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=iul4e9q8j1pa7f42e9oqbquof6; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/logout/
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 21 Sep 2014 18:13:16 GMT
Pragma: no-cache
Location: index.php
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=91si4p5u092rdtadvan6kq2t34; path=/
Set-Cookie: idpolzovatelya=deleted; expires=Sat, 21-Sep-2013 18:13:15 GMT; path=/
Set-Cookie: sekretnyyparolpolzovatelya=deleted; expires=Sat, 21-Sep-2013 18:13:15 GMT; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/logout/index.php
HTTP/1.1 302 Found
Connection: close
Date: Sun, 21 Sep 2014 18:13:16 GMT
Location: http://li2p.com/
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Set-Cookie: visit=1; expires=Mon, 22-Sep-2014 18:13:16 GMT; path=/
Set-Cookie: visit=2; expires=Mon, 22-Sep-2014 18:13:16 GMT; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/test404page.js
HTTP/1.1 302 Found
Connection: close
Date: Sun, 21 Sep 2014 18:13:16 GMT
Location: http://li2p.com/
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Set-Cookie: visit=1; expires=Mon, 22-Sep-2014 18:13:16 GMT; path=/
Set-Cookie: visit=2; expires=Mon, 22-Sep-2014 18:13:16 GMT; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/howto/
200 OK
Content-Length: 3921
Content-Type: text/html
clean
http://li2p.com/faq/
200 OK
Content-Length: 9690
Content-Type: text/html
clean
http://li2p.com/img/highslide.js
200 OK
Content-Length: 44303
Content-Type: application/x-javascript
clean
http://li2p.com/rules/
200 OK
Content-Length: 8183
Content-Type: text/html
clean
http://li2p.com/feedback/
200 OK
Content-Length: 3517
Content-Type: text/html
suspicious
Page code contains blacklisted domain: forum.li2p.com

...[2160 bytes skipped]...
f="http://li2p.com/rules/" >Ïðàâèëà</a></li>
<li id="current"><a href="http://li2p.com/feedback/" id="current">Êîíòàêòû</a></li>
<li><a href="http://forum.picp2.com">Ôîðóì</a></li>
</ul>
</div>
<div id="text">
<h2>Îáðàòíàÿ ñâÿçü</h2>Åñëè ó Âàñ âîçíèêëè âîïðîñû,&mdash; ñîçäàéòå òåìó íà <a href="http://forum.li2p.com/">ôîðóìå</a> èëè âîñïîëüçóéòåñü ñèñòåìîé âíóòðåííåé ïî÷òû â àêêàóíòå ïîëüçîâàòåëÿ, åñëè âîïðîñ ëè÷íûé. <br /><br />
Åñëè Âû íå çàðåãèñòðèðîâàíû,&mdash; ïèøèòå â <b>ICQ</b> <img src="http://web.icq.com/whitepages/online?icq=2692245&img=5" alt="" />2692245 èëè íà e-mail: <a href="mailto:picprofit@gmail.com">picprofit@gmail.com</a></td>
<div id="footer">&copy;&nbsp;2009&nbsp;&mdash;&nb
...[1242 bytes skipped]...

http://li2p.com/cabinet/partners/
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 21 Sep 2014 18:13:19 GMT
Pragma: no-cache
Location: http://li2p.com/logout/
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=cbav9q16220aqur4a0nac3jgp5; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/howto1/
200 OK
Content-Length: 6723
Content-Type: text/html
clean
http://li2p.com/1/google.com
200 OK
Content-Length: 6821
Content-Type: text/html
clean
http://li2p.com/img/jquery-1.2.6.js
200 OK
Content-Length: 55774
Content-Type: application/x-javascript
clean
http://thegame.popunder.ru/out.php?sid=144707
403 Forbidden
Content-Length: 570
Content-Type: text/html
clean
http://li2p.com//mc.yandex.ru/metrika/watch.js/
HTTP/1.1 302 Found
Connection: close
Date: Sun, 21 Sep 2014 18:13:20 GMT
Location: http://li2p.com/
Server: nginx/0.8.55
Content-Length: 0
Content-Type: text/html; charset=CP1251
Set-Cookie: visit=1; expires=Mon, 22-Sep-2014 18:13:20 GMT; path=/
Set-Cookie: visit=2; expires=Mon, 22-Sep-2014 18:13:20 GMT; path=/
X-Powered-By: PHP/5.1.6
clean
http://li2p.com/l/7/
HTTP/1.1 302 Found
Connection: close
Date: Sun, 21 Sep 2014 18:13:21 GMT
Location: http://www.nwcod.com/2010/01/21/page/4/
Server: nginx/0.8.55
Content-Length: 6897
Content-Type: text/html; charset=CP1251
Set-Cookie: visit=1; expires=Mon, 22-Sep-2014 18:13:21 GMT; path=/
Set-Cookie: visit=2; expires=Mon, 22-Sep-2014 18:13:21 GMT; path=/
X-Powered-By: PHP/5.1.6
clean
http://www.nwcod.com/2010/01/21/page/4/
200 OK
Content-Length: 213636
Content-Type: text/html
suspicious
Suspicious code found

</span>


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: li2p.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sun, 21 Sep 2014 18:13:14 GMT
Pragma: no-cache
Server: nginx/0.8.55
Content-Length: 6473
Content-Type: text/html; charset=CP1251
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=94qusl2kvfhuep4h4117b4cv86; path=/
X-Powered-By: PHP/5.1.6

...6473 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: li2p.com
Referer: http://www.google.com/search?q=li2p.com

Result:
The result is similar to the first query. There are no suspicious redirects found.