New scan:

Malware Scanner report for bursaormuh.org

Malicious/Suspicious/Total urls checked
0/0/15
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/2
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

Hacked By Yaramazadam  (52 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://bursaormuh.org/
200 OK
Content-Length: 4030
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: Hacked By Yaramazadam

...[3844 bytes skipped]...
<h2>Orman Mühendisleri Odası Bursa Şubesine Hoş Geldiniz.</h2>
<div class="fl">
<h2>Haberler & Duyurular & Etkinlikler</h2>
<div id="featured" >
<ul class="ui-tabs-nav">
<li class="ui-tabs-nav-item" id="nav-fragment-1"><a href="#fragment-25"><img src="upload/news/asd" width="80" height="50" alt="" /><span>Hacked By Yaramazadam</span></a></li>
</ul>
<div id="fragment-25" class="ui-tabs-panel" style="">
<img src="upload/news/asd" alt="" />
<div class="info" >
<h2><a href="?p=news&a=25" >Hacked By Yaramazadam</a></h2>
<p>
Hacked By Yaramazadam
<a href="?p=news&a=25" >devamı...</a></p>
</div>
</
...[890 bytes skipped]...


http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
200 OK
Content-Length: 57254
Content-Type: text/javascript
clean
http://ajax.googleapis.com/ajax/libs/jqueryui/1.5.3/jquery-ui.min.js
200 OK
Content-Length: 183557
Content-Type: text/javascript
clean
http://bursaormuh.org/main
404 Not Found
Content-Length: 1148
Content-Type: text/html
clean
http://bursaormuh.org/test404page.js
404 Not Found
Content-Length: 1148
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=main
200 OK
Content-Length: 4030
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=4&m=1
200 OK
Content-Length: 3431
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=5&m=1
200 OK
Content-Length: 3360
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=3&m=1
200 OK
Content-Length: 3427
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=9&m=1
200 OK
Content-Length: 45546
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=10&m=1
200 OK
Content-Length: 69411
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=11&m=1
200 OK
Content-Length: 31907
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=12&m=1
200 OK
Content-Length: 68983
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=13&m=1
200 OK
Content-Length: 69352
Content-Type: text/html
clean
http://bursaormuh.org/index.php?p=content&a=14&m=1
200 OK
Content-Length: 69458
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: bursaormuh.org

Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 02 Dec 2015 19:50:42 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Content-Length: 4030
Content-Type: text/html
X-Powered-By: PHP/5.3.29

...4030 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: bursaormuh.org
Referer: http://www.google.com/search?q=bursaormuh.org

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=bursaormuh.org

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://bursaormuh.org/

Result: bursaormuh.org is not infected or malware details are not published yet.