Scanned pages/files
Request | Server response | Status |
http://celandinecards.com/ | 200 OK Content-Length: 3495 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By HeLL48 - Pasuruan Hacker Team <style type="text/css">img{opacity:0.5;-webkit-transition:all 250ms ease;-moz-transition:all 250ms ease;-o-
transition:all 250ms ease;transition:all 250ms ease;}img:hover{opacity:1;}textarea{resize:none;}</style> <body bgcolor='black'> <center> <title>Hacked By HeLL48 - Pasuruan Hacker Team </title> <HEAD> <meta name="description" content="Hacked By HeLL48 - Pasuruan Hacker Team"> <meta name="keywords" content="Hacked by HeLL48,Hacked by HeLL48 , HeLL48, HeLL48 hacker, Hacked by , JKT48 Cyber Team, Indonesian Cybr Army, Pasuruan Hacker Team"> <a href="https://www.facebook.com/pages/Pasuruan-Hacker-Team/585476431465848" target="_blank"><img id ...[3472 bytes skipped]... | ||
http://celandinecards.com//www.blogger.com/static/v1/common/js/1851061575-csitail.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 06 Sep 2014 11:10:22 GMT Pragma: no-cache Location: http://www.celandinecards.com/www.blogger.com/static/v1/common/js/1851061575-csitail.js/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=6c1798ff62bc4200635e2c0601f117ef; path=/ | clean |
http://www.celandinecards.com/www.blogger.com/static/v1/common/js/1851061575-csitail.js/ | 404 Not Found Content-Length: 8551 Content-Type: text/html | clean |
http://www.celandinecards.com/ | 200 OK Content-Length: 3495 Content-Type: text/html | clean |
http://www.celandinecards.com//www.blogger.com/static/v1/common/js/1851061575-csitail.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 06 Sep 2014 11:10:24 GMT Pragma: no-cache Location: http://www.celandinecards.com/www.blogger.com/static/v1/common/js/1851061575-csitail.js/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=285a203fe4bae045e1163cb1481d4a1e; path=/ | clean |
http://www.celandinecards.com/test404page.js | 404 Not Found Content-Length: 8504 Content-Type: text/html | clean |
http://www.celandinecards.com/aboutus/ | 200 OK Content-Length: 9820 Content-Type: text/html | clean |
http://www.celandinecards.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://www.celandinecards.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://www.celandinecards.com/contactus/ | 200 OK Content-Length: 10684 Content-Type: text/html | clean |
http://www.celandinecards.com/wp-content/themes/Emporium/library/js/jquery.js | 200 OK Content-Length: 55740 Content-Type: application/javascript | clean |
http://www.celandinecards.com/wp-content/themes/Emporium/library/js/contact_us_validation.js | 200 OK Content-Length: 3083 Content-Type: application/javascript | clean |
http://www.celandinecards.com/termsconditions/ | 200 OK Content-Length: 8702 Content-Type: text/html | clean |
http://www.celandinecards.com/privacypolicy/ | 200 OK Content-Length: 8685 Content-Type: text/html | clean |
http://www.celandinecards.com/?page=cart | 200 OK Content-Length: 3495 Content-Type: text/html | clean |
http://www.celandinecards.com/?page=login | 200 OK Content-Length: 3495 Content-Type: text/html | clean |
http://www.celandinecards.com/category/all-cards/ | 200 OK Content-Length: 20756 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: celandinecards.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 06 Sep 2014 11:10:21 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 3495
Content-Type: text/html
Last-Modified: Thu, 06 Jun 2013 14:11:14 GMT
...3495 bytes of data.
GET / HTTP/1.1
Host: celandinecards.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 06 Sep 2014 11:10:21 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 3495
Content-Type: text/html
Last-Modified: Thu, 06 Jun 2013 14:11:14 GMT
...3495 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: celandinecards.com
Referer: http://www.google.com/search?q=celandinecards.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: celandinecards.com
Referer: http://www.google.com/search?q=celandinecards.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=celandinecards.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://celandinecards.com/
Result: celandinecards.com is not infected or malware details are not published yet.
Result: celandinecards.com is not infected or malware details are not published yet.