New scan:

Malware Scanner report for madam-fonova.ucoz.ru

Malicious/Suspicious/Total urls checked
1/0/15
1 page has malicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/2
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://madam-fonova.ucoz.ru/
200 OK
Content-Length: 80894
Content-Type: text/html
clean
http://s55.ucoz.net/src/jquery-1.7.2.js
200 OK
Content-Length: 94840
Content-Type: text/javascript
clean
http://s55.ucoz.net/src/ulightbox/ulightbox.js
200 OK
Content-Length: 39848
Content-Type: text/javascript
clean
http://s55.ucoz.net/src/uwnd.js?2
200 OK
Content-Length: 228798
Content-Type: text/javascript
clean
http://weatherandtime.net/swfobject.js
200 OK
Content-Length: 25482
Content-Type: application/javascript
clean
http://odnaknopka.ru/ok2.js
200 OK
Content-Length: 6105
Content-Type: text/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

function NewOdnaknopka2() {
this.domain=location.href+'/';
this.domain=this.domain.substr(this.domain.indexOf('://')+3);
this.domain=this.domain.substr(0,this.domain.indexOf('/'));
this.location=false;
this.selection=function() {
var sel;
if (window.getSelection) sel=window.getSelection();
else if (document.selection) sel=document.selection.createRange();
else sel='';
if (sel.text) sel=sel.text;
return encodeURIComponent(sel);
}
th
... 5939 bytes are skipped ...
dth="136" height="16" alt="&#1054;&#1076;&#1085;&#1072;&#1050;&#1085;&#1086;&#1087;&#1082;&#1072;" title="&#1054;&#1076;&#1085;&#1072;&#1050;&#1085;&#1086;&#1087;&#1082;&#1072;" style="border:0;margin:0;padding:0" onmouseover="odnaknopka2.show(this);" onmouseout="odnaknopka2.timeout=setTimeout(\'odnaknopka2.hide()\',500);"></a>');
}
}
odnaknopka2=new NewOdnaknopka2();
odnaknopka2.init();

Antivirus reports:

VIPRE
Malware.JS.Generic (JS)

http://madam-fonova.ucoz.ru/widget/?8;2011|7|21|%D0%A1%D0%B0%D0%B9%D1%82%20%D1%81%D1%83%D1%89%D0%B5%D1%81%D1%82%D0%B2%D1%83%D0%B5%D1%82%20%3Cb%3E%25N%25%3C%2Fb%3E%20%D0%B4%D0%BD%D0%B5%D0%B9
200 OK
Content-Length: 523
Content-Type: text/javascript
clean
http://madam-fonova.ucoz.ru/index/informacija_o_sajte/0-28
200 OK
Content-Length: 54698
Content-Type: text/html
clean
http://um-razum.ru/widget.txt
200 OK
Content-Length: 25964
Content-Type: text/plain
clean
http://um-razum.ru/test404page.js
404 Not Found
Content-Length: 6869
Content-Type: text/html
clean
http://um-razum.ru/
200 OK
Content-Length: 40494
Content-Type: text/html
clean
http://s38.ucoz.net/src/jquery-1.7.2.js
200 OK
Content-Length: 94840
Content-Type: text/javascript
clean
http://s38.ucoz.net/src/ulightbox/ulightbox.js
200 OK
Content-Length: 39848
Content-Type: text/javascript
clean
http://s38.ucoz.net/src/uwnd.js?2
200 OK
Content-Length: 228798
Content-Type: text/javascript
clean
http://pagead2.googlesyndication.com/pagead/show_ads.js
200 OK
Content-Length: 19916
Content-Type: text/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: madam-fonova.ucoz.ru

Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 02 Jun 2014 09:20:17 GMT
Server: uServ/3.2.2
Content-Length: 80894
Content-Type: text/html; charset=UTF-8

...80894 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: madam-fonova.ucoz.ru
Referer: http://www.google.com/search?q=madam-fonova.ucoz.ru

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=madam-fonova.ucoz.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://madam-fonova.ucoz.ru/

Result: madam-fonova.ucoz.ru is not infected or malware details are not published yet.