New scan:

Malware Scanner report for secunda-online.co.za

Malicious/Suspicious/Total urls checked
0/0/16
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

HaCkeD By Moroccan Agent Secret  (186 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://secunda-online.co.za/
HTTP/1.1 200 OK
Date: Mon, 01 Jun 2015 11:28:07 GMT
Accept-Ranges: bytes
ETag: "19fe64cf5bc0cf1:1b1d78"
Server: Microsoft-IIS/6.0
Content-Length: 10878
Content-Location: http://secunda-online.co.za/index.html
Content-Type: text/html
Last-Modified: Mon, 25 Aug 2014 11:57:57 GMT
X-Powered-By: ASP.NET
clean
http://secunda-online.co.za/index.html
200 OK
Content-Length: 10878
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: HaCkeD By Moroccan Agent Secret

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>HaCkeD By Moroccan Agent Secret</title>

<head>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js"
type="text/javascript">
</script>
<script type="text/javascript">$(document).ready(function() {$(".facebookbox").hover(function() {$(this).stop().animate({right: "0"}, "medium");},
...[11344 bytes skipped]...


https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js
200 OK
Content-Length: 91342
Content-Type: text/javascript
clean
http://en.dnstools.ch/out/2.js
200 OK
Content-Length: 561
Content-Type: text/html
clean
http://en.dnstools.ch/test404page.js
404 Not Found
Content-Length: 3691
Content-Type: text/html
clean
http://en.dnstools.ch/js/system.js
200 OK
Content-Length: 3565
Content-Type: application/javascript
clean
http://pagead2.googlesyndication.com/pagead/show_ads.js
200 OK
Content-Length: 22091
Content-Type: text/javascript
clean
http://en.dnstools.ch/
200 OK
Content-Length: 4792
Content-Type: text/html
clean
http://en.dnstools.ch/show-my-ip.html
200 OK
Content-Length: 6765
Content-Type: text/html
clean
http://en.dnstools.ch/js/ipdetails.js
200 OK
Content-Length: 734
Content-Type: application/javascript
clean
http://maps.google.com/maps?file=api&v=2&key=ABQIAAAANNeLBTQ9koj9bL_pVnJsEBQh8MLnq4bOwYZ4yPR07zKZBCelohRJmUpMi7WEVo6xy8CaiYjC12RFwg
500 timeout
Content-Length: 30
Content-Type: text/plain
clean
http://maps.google.com/test404page.js
500 timeout
Content-Length: 30
Content-Type: text/plain
clean
http://en.dnstools.ch/visual-traceroute.html
200 OK
Content-Length: 6572
Content-Type: text/html
clean
http://en.dnstools.ch/js/tracemap.js
200 OK
Content-Length: 1978
Content-Type: application/javascript
clean
http://en.dnstools.ch/online-ping.html
200 OK
Content-Length: 6168
Content-Type: text/html
clean
http://en.dnstools.ch/dns-nameserver.html
200 OK
Content-Length: 7781
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: secunda-online.co.za

Result:
HTTP/1.1 200 OK
Date: Mon, 01 Jun 2015 11:28:07 GMT
Accept-Ranges: bytes
ETag: "19fe64cf5bc0cf1:1b1d78"
Server: Microsoft-IIS/6.0
Content-Length: 10878
Content-Location: http://secunda-online.co.za/index.html
Content-Type: text/html
Last-Modified: Mon, 25 Aug 2014 11:57:57 GMT
X-Powered-By: ASP.NET

...10878 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: secunda-online.co.za
Referer: http://www.google.com/search?q=secunda-online.co.za

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=secunda-online.co.za

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://secunda-online.co.za/

Result: secunda-online.co.za is not infected or malware details are not published yet.