Scanned pages/files
Request | Server response | Status |
http://globalarmour.com/ | 200 OK Content-Length: 18365 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HAcked By Kiky chiikall bassae & rioGCT-404 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <title>Global Armour Ballistic Protection</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <meta name="description" content="Global Armour Ballistic Protection, providing body armour, helmets, shields, gloves, and more for military and police worldwide ...[22554 bytes skipped]... | ||
http://globalarmour.com/about-us.php | 200 OK Content-Length: 18283 Content-Type: text/html | clean |
http://globalarmour.com/index.php | 200 OK Content-Length: 18365 Content-Type: text/html | clean |
http://globalarmour.com/products.php | 200 OK Content-Length: 22846 Content-Type: text/html | clean |
http://globalarmour.com/tradeshows.php | 200 OK Content-Length: 24004 Content-Type: text/html | clean |
http://globalarmour.com/anylink.js | 200 OK Content-Length: 3602 Content-Type: application/javascript | clean |
http://globalarmour.com/pressreleases.php | 200 OK Content-Length: 13939 Content-Type: text/html | clean |
http://globalarmour.com/advertisements.php | 200 OK Content-Length: 13858 Content-Type: text/html | clean |
http://globalarmour.com/testimonials.php | 200 OK Content-Length: 15243 Content-Type: text/html | clean |
http://globalarmour.com/armour-overview.php | 200 OK Content-Length: 25979 Content-Type: text/html | clean |
http://globalarmour.com/helmet-overview.php | 200 OK Content-Length: 24829 Content-Type: text/html | clean |
http://globalarmour.com/measurements.php | 200 OK Content-Length: 22252 Content-Type: text/html | clean |
http://globalarmour.com/products2.php?cid=13 | 200 OK Content-Length: 23579 Content-Type: text/html | clean |
http://globalarmour.com/products2.php?cid=14 | 200 OK Content-Length: 23514 Content-Type: text/html | clean |
http://globalarmour.com/products2.php?cid=15 | 200 OK Content-Length: 22993 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: globalarmour.com
Result:
HTTP/1.1 200 OK
Date: Mon, 25 Aug 2014 14:09:15 GMT
Server: Microsoft-IIS/8.0
Content-Length: 18365
Content-Type: text/html
X-Powered-By: PHP/5.5.8
X-Powered-By: ASP.NET
...18365 bytes of data.
GET / HTTP/1.1
Host: globalarmour.com
Result:
HTTP/1.1 200 OK
Date: Mon, 25 Aug 2014 14:09:15 GMT
Server: Microsoft-IIS/8.0
Content-Length: 18365
Content-Type: text/html
X-Powered-By: PHP/5.5.8
X-Powered-By: ASP.NET
...18365 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: globalarmour.com
Referer: http://www.google.com/search?q=globalarmour.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: globalarmour.com
Referer: http://www.google.com/search?q=globalarmour.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=globalarmour.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://globalarmour.com/
Result: globalarmour.com is not infected or malware details are not published yet.
Result: globalarmour.com is not infected or malware details are not published yet.