New scan:

Malware Scanner report for nk-apteka.ru

Malicious/Suspicious/Total urls checked
0/0/15
Blacklists
OK
Malicious redirects
Found
The website redirects visitors from search engines to the 3rd-party URL. The chain of malicious redirects found:
->http://alfsystem.com.my/includes/domit/1.php
655 websites infected.
->http://www.csra.de/includes/domit/1.php
346 websites infected.
->http://jbtconsultinggroup.com/components/com_user/views/login/tmpl/1/all3.php
56 websites infected.
->http://google.ru
42 websites infected.

The website "nk-apteka.ru" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Malicious/Suspicious Redirects

RequestServer responseStatus
URL: http://nk-apteka.ru/
(imitation of visitor from search engine)


GET / HTTP/1.1
Host: nk-apteka.ru
Referer: http://www.google.com/search?q=redirect+check1
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Fri, 11 Jul 2014 16:02:10 GMT
Location: http://alfsystem.com.my/includes/domit/1.php
Server: nginx/0.7.67
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.2.17
malicious
URL: http://alfsystem.com.my/includes/domit/1.php
(imitation of visitor from search engine)


GET /includes/domit/1.php HTTP/1.1
Host: alfsystem.com.my
Referer: http://www.google.com/search?q=redirect+check2
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Fri, 11 Jul 2014 16:02:10 GMT
Location: http://www.csra.de/includes/domit/1.php
Server: Apache
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.3.23
malicious
URL: http://www.csra.de/includes/domit/1.php
(imitation of visitor from search engine)


GET /includes/domit/1.php HTTP/1.1
Host: www.csra.de
Referer: http://www.google.com/search?q=redirect+check3
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Fri, 11 Jul 2014 16:02:13 GMT
Location: http://jbtconsultinggroup.com/components/com_user/views/login/tmpl/1/all3.php
Server: Apache
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.4.30
malicious
URL: http://jbtconsultinggroup.com/components/com_user/views/login/tmpl/1/all3.php
(imitation of visitor from search engine)


GET /components/com_user/views/login/tmpl/1/all3.php HTTP/1.1
Host: jbtconsultinggroup.com
Referer: http://www.google.com/search?q=redirect+check4
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Fri, 11 Jul 2014 16:02:14 GMT
Location: http://google.ru
Server: Apache
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
malicious

Scanned pages/files

RequestServer responseStatus
http://nk-apteka.ru/
200 OK
Content-Length: 68357
Content-Type: text/html
clean
http://nk-apteka.ru/components/com_jcomments/js/jcomments-v2.1.js?v=2
200 OK
Content-Length: 26818
Content-Type: application/javascript
clean
http://nk-apteka.ru/components/com_jcomments/libraries/joomlatune/ajax.js
200 OK
Content-Length: 3978
Content-Type: application/javascript
clean
http://nk-apteka.ru/media/system/js/caption.js
200 OK
Content-Length: 1721
Content-Type: application/javascript
clean
http://nk-apteka.ru/modules/mod_rokajaxsearch/js/rokajaxsearch.js
200 OK
Content-Length: 15933
Content-Type: application/javascript
clean
http://nk-apteka.ru/modules/mod_rokvirtuemart_categories/js/rokvm_categories.js
200 OK
Content-Length: 1677
Content-Type: application/javascript
clean
http://nk-apteka.ru/modules/mod_roktabs/tmpl/roktabs.js
200 OK
Content-Length: 12126
Content-Type: application/javascript
clean
http://nk-apteka.ru/components/com_virtuemart/themes/vm_mynxx/theme.js
200 OK
Content-Length: 12381
Content-Type: application/javascript
clean
http://nk-apteka.ru/templates/rt_mynxx_j15/js/rokutils.js
200 OK
Content-Length: 3166
Content-Type: application/javascript
clean
http://nk-apteka.ru/templates/rt_mynxx_j15/js/rokmoomenu.js
200 OK
Content-Length: 5040
Content-Type: application/javascript
clean
http://nk-apteka.ru/templates/rt_mynxx_j15/js/mootools.bgiframe.js
200 OK
Content-Length: 964
Content-Type: application/javascript
clean
http://nk-apteka.ru/jquery-1.4.2.min.js
200 OK
Content-Length: 72326
Content-Type: application/javascript
clean
http://nk-apteka.ru/plugins/system/rokbox/rokbox.js
200 OK
Content-Length: 20276
Content-Type: application/javascript
clean
http://nk-apteka.ru/plugins/system/rokbox/themes/mynxx/rokbox-config.js
200 OK
Content-Length: 2689
Content-Type: application/javascript
clean
http://nk-apteka.ru/index.php?option=com_content&view=section&id=10&Itemid=98
200 OK
Content-Length: 26749
Content-Type: text/html
clean

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=nk-apteka.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://nk-apteka.ru/

Result: nk-apteka.ru is not infected or malware details are not published yet.