Scanned pages/files
Request | Server response | Status |
http://aman-matanot.com/ | 200 OK Content-Length: 43145 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by SAUDI HITLER ...[9326 bytes skipped]... UDI HITLER <<img src="http://i61.tinypic.com/34tcyrl.jpg" ><br>SAUDI HITLER<br> ></object> SAUDI HITLER <style> body{ background:#000; margin:0; padding:0; } </style> <script> window.location="http://pagebin.com/3QxS9sHH" ; </script></a> <h1 style="margin-top:10%;font:60px comic sans ms;text-align:center;text-shadow:0 2px 6px;color:#fff">Hacked by SAUDI HITLER </h1> <embed src="https://youtube.googleapis.com/v/8PfhO8s2oLQ?version=3&th">199999</a></td><td><img src="pics/separator.gif"></td><td align="center"><a href="index.php?<title> Hacked SAUDI HITLER </title> SAUDI HITLER <<img src="http://i61.tinypic.com/34tcyrl.jpg" ><br>SAUDI HITLER<br> ></object> SAUDI HITLER <style> body{ background:#000; margin: ...[46832 bytes skipped]... | ||
http://aman-matanot.com/swfobject.js | 404 Not Found Content-Length: 329 Content-Type: text/html | clean |
http://aman-matanot.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://aman-matanot.com/gradient.js | 404 Not Found Content-Length: 328 Content-Type: text/html | clean |
http://aman-matanot.com/jquery-1.2.6.pack.js | 200 OK Content-Length: 31033 Content-Type: application/javascript | clean |
http://aman-matanot.com/js/prototype.js | 404 Not Found Content-Length: 332 Content-Type: text/html | clean |
http://aman-matanot.com/js/scriptaculous.js?load=effects,builder | 404 Not Found Content-Length: 336 Content-Type: text/html | clean |
http://aman-matanot.com/js/jquery.lightbox-0.5.js | 200 OK Content-Length: 19604 Content-Type: application/javascript | clean |
http://aman-matanot.com/jquery.tooltip.js | 200 OK Content-Length: 8087 Content-Type: application/javascript | clean |
http://aman-matanot.com/ddsmoothmenu.js | 200 OK Content-Length: 7626 Content-Type: application/javascript | clean |
http://aman-matanot.com/stepcarousel.js | 200 OK Content-Length: 18069 Content-Type: application/javascript | clean |
http://aman-matanot.com/js/jquery.datepick.js | 200 OK Content-Length: 95451 Content-Type: application/javascript | clean |
http://aman-matanot.com/js/jquery.datepick-he.js | 200 OK Content-Length: 1268 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: aman-matanot.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 31 Jul 2015 09:45:07 GMT
Pragma: no-cache
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=6009fa959adf2b97d2ea99af69b0f220; path=/
GET / HTTP/1.1
Host: aman-matanot.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 31 Jul 2015 09:45:07 GMT
Pragma: no-cache
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=6009fa959adf2b97d2ea99af69b0f220; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: aman-matanot.com
Referer: http://www.google.com/search?q=aman-matanot.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: aman-matanot.com
Referer: http://www.google.com/search?q=aman-matanot.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=aman-matanot.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://aman-matanot.com/
Result: aman-matanot.com is not infected or malware details are not published yet.
Result: aman-matanot.com is not infected or malware details are not published yet.