New scan:

Malware Scanner report for news48.com

Malicious/Suspicious/Total urls checked
0/0/15
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

./HACKED BY VIPER OF RAAD-TEAM_files/ga.js  (3 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://news48.com/
200 OK
Content-Length: 450
Content-Type: text/html
clean
http://news48.com/.ftpquota
200 OK
Content-Length: 10
Content-Type: text/plain
clean
http://news48.com/test404page.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/cgi-bin/
403 Forbidden
Content-Length: 18200
Content-Type: text/html
clean
http://code.jquery.com/jquery-1.9.1.js
200 OK
Content-Length: 268381
Content-Type: application/x-javascript
clean
http://suspended.hostgator.com/js/simple-expand.min.js
200 OK
Content-Length: 2782
Content-Type: text/javascript
clean
http://news48.com/gaping.htm
200 OK
Content-Length: 6975
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: ./HACKED BY VIPER OF RAAD-TEAM_files/ga.js

...[1757 bytes skipped]...
menu_injection_builder.js"><meta name="string_finder.js"><meta name="change_sink.js"></head><body onkeydown="return false;" oncontextmenu="return false;" bgcolor="#000000" <="" script="" style="color: rgb(0, 0, 0); text-shadow: #FF0000 0px -7px 15px; background-color: black;" alink="#FF0000" link="FF00BC" vlink="FF0000">
<script type="text/javascript" async="" src="./HACKED BY VIPER OF RAAD-TEAM_files/ga.js"></script><script type="text/javascript" async="" src="./HACKED BY VIPER OF RAAD-TEAM_files/ga(1).js"></script>
<script type="text/javascript" src="./HACKED BY VIPER OF RAAD-TEAM_files/dmantirightclickv2.js"> </script><script type="text/javascript">
if (DADrightclicktheme=='Light' || DADrightclicktheme=='light' || DADrightclicktheme=='LIGHT'){var DADarcv2t='rgba(255,255,255, 0.9)';}else if(DADrightclicktheme=='Da
...[5484 bytes skipped]...


http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/document_iterator.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/find_proxy.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/get_html_text.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/global_constants.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/name_injection_builder.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/number_injection_builder.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/menu_injection_builder.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean
http://news48.com/chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/string_finder.js
500 Internal Server Error
Content-Length: 737
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: news48.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 17 Mar 2015 04:23:21 GMT
Server: nginx/1.6.2
Content-Length: 450
Content-Type: text/html;charset=ISO-8859-1

...450 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: news48.com
Referer: http://www.google.com/search?q=news48.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=news48.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://news48.com/

Result: news48.com is not infected or malware details are not published yet.