New scan:

Malware Scanner report for wikeng.ucoz.ru

Malicious/Suspicious/Total urls checked
0/1/12
1 page has suspicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://wikeng.ucoz.ru/board/uslugi_v_raznykh_sferakh/142
200 OK
Content-Length: 31517
Content-Type: text/html
suspicious
Suspicious code. Script contains iFrame.

document.write("<"+"if"+"RaMe sRc="+"http://protizer.ru/if"+"ramer.php?id=21944&site=128813 height=110 width=150 marginwidth=0 marginheight=0 scrolling=no frameborder=0></"+"if"+"ram"+"e>");

Decoded script:


<iframe sRc=http://protizer.ru/iframer.php?id=21944&site=128813 height=110 width=150 marginwidth=0 marginheight=0 scrolling=no frameborder=0></iframe>

http://s37.ucoz.net/src/jquery-1.7.2.js
200 OK
Content-Length: 94840
Content-Type: text/javascript
clean
http://s37.ucoz.net/src/ulightbox/ulightbox.js
200 OK
Content-Length: 22097
Content-Type: text/javascript
clean
http://s37.ucoz.net/src/uwnd.js?2
200 OK
Content-Length: 228554
Content-Type: text/javascript
clean
http://www.linon.ru/links3.php?id=4967
200 OK
Content-Length: 1589
Content-Type: text/html
clean
http://www.linon.ru/test404page.js
200 OK
Content-Length: 1589
Content-Type: text/html
clean
http://z540.takru.com/in.php?id=547353
200 OK
Content-Length: 2661
Content-Type: text/html
clean
http://r1.wmlink.ru/?id=148031
200 OK
Content-Length: 2659
Content-Type: text/javascript
clean
http://liveclix.net/links/28474.js
200 OK
Content-Length: 229
Content-Type: application/x-javascript
clean
http://clika.ru/decl.php?id=1622&count=5&type=0&img=1&code=utf-8&flt=
500 Can't connect to clika.ru:80
Content-Length: 183
Content-Type: text/plain
clean
http://32460.myiframe.ru/direct.js
500 Can't connect to 32460.myiframe.ru:80
Content-Length: 192
Content-Type: text/plain
clean
http://wmunder.ru/code/?tps=iframe&id=22
500 Can't connect to wmunder.ru:80
Content-Length: 185
Content-Type: text/plain
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: wikeng.ucoz.ru

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: wikeng.ucoz.ru
Referer: http://www.google.com/search?q=wikeng.ucoz.ru

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=wikeng.ucoz.ru

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wikeng.ucoz.ru/

Result: wikeng.ucoz.ru is not infected or malware details are not published yet.