Scanned pages/files
Request | Server response | Status |
http://e-magsante.com/ | 200 OK Content-Length: 129841 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: +ADw-title+AD4-Hacked By Tuncay117 +ADw-/title+AD4 ...[2196 bytes skipped]... rel+AD0AIg-Shortcut Icon+ACI href+AD0AIg-http://i.hizliresim.com/eoLDm9.png+ACI type+AD0AIg-image/x-icon+ACIAPg +ADw-meta charset+AD0'utf-8'+AD4APA-/meta+AD4APA-html lang+AD0AIg-tr+ACIAPg +ADw-head+AD4 +ADw-meta http-equiv+AD0AIg-Content-Type+ACI content+AD0AIg-text/html+ADs charset+AD0-utf-8+ACIAPg +ADw-meta charset+AD0AIg-utf-8+ACIAPg +ADw-title+AD4-Hacked By Tuncay117 +ADw-/title+AD4 +ADw-script type+AD0AIg-text/javascript+ACI src+AD0AIg-https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js+ACIAPgA8-/script+AD4 +ADw-link rel+AD0AIg-stylesheet+ACI type+AD0AIg-text/css+ACI href+AD0AIg-fiddle.jshell.net/jonnyc/Ujz4P/3/show/css/normalize.css+ACIAPg +ADw-link rel+AD0AIg-stylesheet+ACI type+AD0AIg-text/css+ACI href+AD0AIg-fiddle.jshell.net/jonnyc/Ujz4P/3/show/css/result-light.css+ACIAPg +ADw-style ...[140279 bytes skipped]... | ||
http://e-magsante.com/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 95807 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/commentluv/js/commentluv.js?ver=2.93.5 | 200 OK Content-Length: 12613 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/cardoza-facebook-like-box/cardozafacebook.js?ver=4.0 | 200 OK Content-Length: 877 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/google-analyticator/external-tracking.min.js?ver=6.4.8 | 200 OK Content-Length: 1190 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-includes/js/tw-sack.min.js?ver=1.6.1 | 200 OK Content-Length: 3267 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/ajax-login/ajaxlogin.js | 404 Not Found Content-Length: 112138 Content-Type: text/html | clean |
http://w.sharethis.com/button/buttons.js | 200 OK Content-Length: 146914 Content-Type: application/x-javascript | clean |
http://e-magsante.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 200 OK Content-Length: 15248 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.9.3 | 200 OK Content-Length: 9658 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/themes/magazine-basic/library/js/harvey.min.js?ver=4.0 | 200 OK Content-Length: 4650 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/themes/magazine-basic/library/js/theme.js?ver=4.0 | 200 OK Content-Length: 2048 Content-Type: application/javascript | clean |
http://e-magsante.com/wp-content/plugins/ajax-login/ | 404 Not Found Content-Length: 112138 Content-Type: text/html | clean |
http://e-magsante.com/5-recettes | 200 OK Content-Length: 300270 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: e-magsante.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 16 Nov 2014 21:20:47 GMT
Server: Apache/2.4.10 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-7
X-Pingback: http://e-magsante.com/xmlrpc.php
X-Powered-By: PHP/5.3.29
GET / HTTP/1.1
Host: e-magsante.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 16 Nov 2014 21:20:47 GMT
Server: Apache/2.4.10 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-7
X-Pingback: http://e-magsante.com/xmlrpc.php
X-Powered-By: PHP/5.3.29
Second query (visit from search engine):
GET / HTTP/1.1
Host: e-magsante.com
Referer: http://www.google.com/search?q=e-magsante.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: e-magsante.com
Referer: http://www.google.com/search?q=e-magsante.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=e-magsante.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://e-magsante.com/
Result: e-magsante.com is not infected or malware details are not published yet.
Result: e-magsante.com is not infected or malware details are not published yet.