Scanned pages/files
Request | Server response | Status |
http://betterclean.co.il/ | 200 OK Content-Length: 28314 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: hacked by SelHab ...[6114 bytes skipped]... nd"in twttr.events&&twttr.events.bind("tweet",function(a){if(a){var b;if(a.target&&a.target.nodeName=="IFRAME")a:{if(a=a.target.src){a=a.split("#")[0].match(/[^?=&]+=([^&]*)?/g);b=0;for(var c;c=a[b];++b)if(c.indexOf("url")===0){b=unescape(c.split("=")[1]);break a}}b=void 0}_gaq.push(["_trackSocial","twitter","tweet",b])}})})})(window); /* ]]> */ // ]]></script> <p>hacked by SelHab</p> <p align="center"> </p> <center> <script type="text/javascript">// <![CDATA[ window.scrollBy(0, 1) window.resizeTo(0,0) window.moveTo(0,0) //setInterval("move()",30); setTimeout("move()", 1); var mxm=50 var mym=25 var mx=0 var my=0 var sv=50 var status=1 var szx=0 var szy=0 var c=255 var n=0 var sm=30 var cy ...[27192 bytes skipped]... | ||
http://betterclean.co.il/%D7%94%D7%A9%D7%99%D7%A8%D7%95%D7%AA%D7%99%D7%9D-%D7%A9%D7%9C%D7%A0%D7%95/%D7%A9%D7%A8%D7%95%D7%AA%D7%99-%D7%A0%D7%A7%D7%99%D7%95%D7%9F/%D7%A0%D7%99%D7%A7%D7%99%D7%95%D7%9F-%D7%93%D7%99%D7%A8%D7%94-%D7%97%D7%93%D7%A9%D7%94 | 200 OK Content-Length: 9841 Content-Type: text/html | clean |
http://betterclean.co.il/N2/Resources/Js/jquery-1.6.1.min.js | 200 OK Content-Length: 91342 Content-Type: application/x-javascript | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× × | 200 OK Content-Length: 99581 Content-Type: text/html | clean |
http://betterclean.co.il/%D7%94%D7%A9%D7%99%D7%A8%D7%95%D7%AA%D7%99%D7%9D-%D7%A9%D7%9C%D7%A0%D7%95/%D7%90%D7%97%D7%96%D7%A7%D7%AA-%D7%9E%D7%91%D7%A0%D7%99%D7%9D | 200 OK Content-Length: 13850 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/×××קת-××× ×× | 200 OK Content-Length: 13850 Content-Type: text/html | clean |
http://betterclean.co.il/%D7%94%D7%A9%D7%99%D7%A8%D7%95%D7%AA%D7%99%D7%9D-%D7%A9%D7%9C%D7%A0%D7%95/%D7%90%D7%97%D7%96%D7%A7%D7%AA-%D7%9E%D7%91%D7%A0%D7%99%D7%9D/%D7%90%D7%97%D7%96%D7%A7%D7%95%D7%AA-%D7%9E%D7%91%D7%A0%D7%99%D7%9D-%D7%91%D7%A1%D7%99%D7%A1%D7%99%D7%AA | 200 OK Content-Length: 12787 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/×××קת-××× ××/×××ק×ת-××× ××-×ס×ס×ת | 200 OK Content-Length: 12787 Content-Type: text/html | clean |
http://betterclean.co.il/%D7%94%D7%A9%D7%99%D7%A8%D7%95%D7%AA%D7%99%D7%9D-%D7%A9%D7%9C%D7%A0%D7%95/%D7%94%D7%96%D7%9E%D7%A0%D7%95%D7%AA | 200 OK Content-Length: 8807 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/×××× ×ת | 200 OK Content-Length: 8807 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/שר×ת×-× ×§××× | 200 OK Content-Length: 10671 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/שר×ת×-× ×§×××/× ×ק×××-××ר×-×××©× | 200 OK Content-Length: 9841 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/שר×ת×-× ×§×××/× ×ק×××-××ר×-××¤× ×-×× ××¡× | 200 OK Content-Length: 9008 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/××××ר×-ש×ר×ת/××רת-× ×ק×××-××פר-ס×× | 200 OK Content-Length: 8458 Content-Type: text/html | clean |
http://betterclean.co.il/×ש×ר×ת××-ש×× ×/××××ר×-ש×ר×ת | 200 OK Content-Length: 9307 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: betterclean.co.il
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Fri, 21 Nov 2014 03:57:40 GMT
Server: Microsoft-IIS/7.5
Content-Length: 28314
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=nj1czfjwpbazv3agzjbn5gs1; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 2.0
X-Powered-By: ASP.NET
...28314 bytes of data.
GET / HTTP/1.1
Host: betterclean.co.il
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Fri, 21 Nov 2014 03:57:40 GMT
Server: Microsoft-IIS/7.5
Content-Length: 28314
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=nj1czfjwpbazv3agzjbn5gs1; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-AspNetMvc-Version: 2.0
X-Powered-By: ASP.NET
...28314 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: betterclean.co.il
Referer: http://www.google.com/search?q=betterclean.co.il
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: betterclean.co.il
Referer: http://www.google.com/search?q=betterclean.co.il
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=betterclean.co.il
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://betterclean.co.il/
Result: betterclean.co.il is not infected or malware details are not published yet.
Result: betterclean.co.il is not infected or malware details are not published yet.