Scanned pages/files
Request | Server response | Status |
http://masralan.com/ | 200 OK Content-Length: 174613 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By ...[12140 bytes skipped]... br/><p align="center"><b><font color="#FF0000" size="4">والباقي اما فراعنة او يهود</font></b></p> <p align="center"><b><font face="Tahoma" size="2">Hacked By <span lang="en-us"> awras</span></font></b></p> <p align="center"><span lang="en-us"><b><font face="Tahoma" size="2">IRAQ</font></b></span><b><font face="Tahoma" size="2"> <font color="#FF0000">Hacker</font></font></b></p> <p align="center"><b><font face="Tahoma" size="2">root-server<font color="#FF0000">@</font>Hotma ...[229741 bytes skipped]... | ||
http://masralan.com/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://masralan.com/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://masralan.com/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
http://masralan.com/plugins/system/imagesizer/lbscripts/slimbox/slimbox.js | 200 OK Content-Length: 4644 Content-Type: application/javascript | clean |
http://masralan.com/media/system/js/modal.js | 200 OK Content-Length: 9732 Content-Type: application/javascript | clean |
http://masralan.com//ajax.googleapis.com/ajax/libs/jquery/1.8/jquery.min.js/ | 404 Not Found Content-Length: 372 Content-Type: text/html | clean |
http://masralan.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://masralan.com/media/k2/assets/js/k2.noconflict.js | 200 OK Content-Length: 347 Content-Type: application/javascript | clean |
http://masralan.com/components/com_k2/js/k2.js | 200 OK Content-Length: 7323 Content-Type: application/javascript | clean |
http://masralan.com/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://masralan.com/modules/mod_sj_content_cool_showcase/assets/js/jquery-1.5.min.js | 200 OK Content-Length: 84376 Content-Type: application/javascript | clean |
http://masralan.com/modules/mod_sj_content_cool_showcase/assets/js/jsmart.noconflict.js | 200 OK Content-Length: 273 Content-Type: application/javascript | clean |
http://masralan.com/modules/mod_sj_content_cool_showcase/assets/js/jquery.procycle.js | 200 OK Content-Length: 16505 Content-Type: application/javascript | clean |
http://masralan.com/modules/mod_sj_content_cool_showcase/assets/js/jquery_mousewheel.js | 200 OK Content-Length: 2410 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: masralan.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Sat, 20 Sep 2014 16:16:29 GMT
Pragma: no-cache
Server: Apache
Content-Length: 174613
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: f6e2a433569369b7d055bfc32c9fd7eb=35b52fe294e6d4360a4e50839a802037; path=/
X-Logged-In: False
...174613 bytes of data.
GET / HTTP/1.1
Host: masralan.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Sat, 20 Sep 2014 16:16:29 GMT
Pragma: no-cache
Server: Apache
Content-Length: 174613
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: f6e2a433569369b7d055bfc32c9fd7eb=35b52fe294e6d4360a4e50839a802037; path=/
X-Logged-In: False
...174613 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: masralan.com
Referer: http://www.google.com/search?q=masralan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: masralan.com
Referer: http://www.google.com/search?q=masralan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=masralan.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://masralan.com/
Result: masralan.com is not infected or malware details are not published yet.
Result: masralan.com is not infected or malware details are not published yet.