Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: hacamd.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 09 Oct 2014 14:18:06 GMT
Pragma: no-cache
Server: Apache
Content-Length: 28175
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 88ab906a66bd86237dbba844b2afab29=687103e220a27400996acbd5a4420e74; path=/
X-Powered-By: PHP/5.2.17
...28175 bytes of data.
GET / HTTP/1.1
Host: hacamd.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 09 Oct 2014 14:18:06 GMT
Pragma: no-cache
Server: Apache
Content-Length: 28175
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 88ab906a66bd86237dbba844b2afab29=687103e220a27400996acbd5a4420e74; path=/
X-Powered-By: PHP/5.2.17
...28175 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: hacamd.org
Referer: http://www.google.com/search?q=hacamd.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: hacamd.org
Referer: http://www.google.com/search?q=hacamd.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://hacamd.org/ | 200 OK Content-Length: 28175 Content-Type: text/html | clean |
http://hacamd.org/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://hacamd.org/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://hacamd.org/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://hacamd.org/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
http://hacamd.org/plugins/content/attachments/attachments_refresh.js | 200 OK Content-Length: 1835 Content-Type: application/javascript | clean |
http://hacamd.org/plugins/system/rokbox/rokbox.js | 200 OK Content-Length: 21801 Content-Type: application/javascript | clean |
http://hacamd.org/plugins/system/rokbox/themes/clean/rokbox-config.js | 200 OK Content-Length: 2598 Content-Type: application/javascript | clean |
http://hacamd.org/libraries/gantry/js/gantry-totop.js | 200 OK Content-Length: 378 Content-Type: application/javascript | clean |
http://hacamd.org/libraries/gantry/js/gantry-smartload.js | 200 OK Content-Length: 2815 Content-Type: application/javascript | clean |
http://hacamd.org/libraries/gantry/js/gantry-buildspans.js | 200 OK Content-Length: 698 Content-Type: application/javascript | clean |
http://hacamd.org/libraries/gantry/js/gantry-inputs.js | 200 OK Content-Length: 3831 Content-Type: application/javascript | clean |
http://hacamd.org/libraries/gantry/js/browser-engines.js | 200 OK Content-Length: 1186 Content-Type: application/javascript | clean |
http://hacamd.org/templates/rt_clarion/js/load-transition.js | 200 OK Content-Length: 708 Content-Type: application/javascript | clean |
http://hacamd.org/index.php/about-us | 200 OK Content-Length: 24672 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=hacamd.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://hacamd.org/
Result: hacamd.org is not infected or malware details are not published yet.
Result: hacamd.org is not infected or malware details are not published yet.