Scanned pages/files
Request | Server response | Status |
http://savoycaraircon.co.za/ | 200 OK Content-Length: 24344 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: +ADw-/title+AD4-hacked by matrix dz+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4- ...[138 bytes skipped]... ; <html class="ie ie8" lang="en-US"> <![endif]--> <!--[if !(IE 7) | !(IE 8) ]><!--> <html lang="en-US"> <!--<![endif]--> <head> <meta charset="UTF-7" /> <meta http-equiv="X-UA-Compatible" content="IE=9; IE=8; IE=7; IE=EDGE" /> <title>+ADw-/title+AD4-hacked by matrix dz+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4-</title> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="profile" href="http://gmpg.org/xfn/11" /> <link rel="pingback" href="http://savoycaraircon.co.za/xmlrpc.php" /> <!-- Icons font support for IE6-7 --> <!--[if lt IE 8]> <script src="http://savoycaraircon.co.za/wp-content/them ...[27277 bytes skipped]... | ||
http://savoycaraircon.co.za/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-includes/js/underscore.min.js?ver=1.6.0 | 200 OK Content-Length: 14424 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-includes/js/backbone.min.js?ver=1.1.2 | 200 OK Content-Length: 19253 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/plugins/page-views-count/assets/js/pvc.backbone.min.js?ver=1.0.0 | 200 OK Content-Length: 1513 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/themes/customizr/inc/assets/js/modernizr.min.js | 200 OK Content-Length: 10990 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/plugins/background-manager/resources/js/functions.js?ver=1.2.5.2 | 200 OK Content-Length: 3457 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/plugins/background-manager/resources/js/flux.js?ver=1.2.5.2 | 200 OK Content-Length: 23605 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/plugins/background-manager/resources/js/pub.js?ver=1.2.5.2 | 200 OK Content-Length: 11066 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-includes/js/comment-reply.min.js?ver=3.9.9 | 200 OK Content-Length: 757 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.4 | 200 OK Content-Length: 4289 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/themes/customizr/inc/assets/js/bootstrap.min.js | 200 OK Content-Length: 28953 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/themes/customizr/inc/assets/js/tc-scripts.min.js | 200 OK Content-Length: 4243 Content-Type: application/javascript | clean |
http://savoycaraircon.co.za/wp-content/themes/customizr/inc/assets/js/holder.js | 200 OK Content-Length: 7386 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: savoycaraircon.co.za
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 22 Dec 2015 05:19:33 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_jk/1.2.37 mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-7
Link: <http://savoycaraircon.co.za/>; rel=shortlink
X-Pingback: http://savoycaraircon.co.za/xmlrpc.php
X-Powered-By: PHP/5.4.33
GET / HTTP/1.1
Host: savoycaraircon.co.za
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 22 Dec 2015 05:19:33 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_jk/1.2.37 mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-7
Link: <http://savoycaraircon.co.za/>; rel=shortlink
X-Pingback: http://savoycaraircon.co.za/xmlrpc.php
X-Powered-By: PHP/5.4.33
Second query (visit from search engine):
GET / HTTP/1.1
Host: savoycaraircon.co.za
Referer: http://www.google.com/search?q=savoycaraircon.co.za
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: savoycaraircon.co.za
Referer: http://www.google.com/search?q=savoycaraircon.co.za
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=savoycaraircon.co.za
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://savoycaraircon.co.za/
Result: savoycaraircon.co.za is not infected or malware details are not published yet.
Result: savoycaraircon.co.za is not infected or malware details are not published yet.