New scan:

Malware Scanner report for wchoa.com

Malicious/Suspicious/Total urls checked
0/0/10
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
Found
Probably the website is defaced. The following signature was found:

HaCkEd By Mr.HAiL  (12 websites defaced)

See details below

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://wchoa.com/
200 OK
Content-Length: 10483
Content-Type: text/html
suspicious
Deface/Content modification. The following signature was found: HaCkEd By Mr.HAiL

<html>
<head>
<link rel="SHORTCUT ICON"
href="http://www.kace-undetected.com/mp3/resources/images/iblis.gif">
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type"
content="text/html; charset=windows-1252">
<title>HaCkEd By Mr.HAiL</title>
<meta name="keywords" content=" Mr.HAiL ">
<meta content="K4C3 Undetected" name="author">
<script src="http://www.google-analytics.com/ga.js"
type="text/javascript"></script>
<script src="http://www.google-analytics.com/ga.js"
type="text/javascript"></script>
<script src="http://www.google-analytics.com/ga.js"
type="text/javascript">&l
...[12658 bytes skipped]...


http://www.google-analytics.com/ga.js
200 OK
Content-Length: 40903
Content-Type: text/javascript
clean
http://K4C3-Undetected.googlecode.com/files/K4C3%20Undetected.js
404 Not Found
Content-Length: 1451
Content-Type: text/html
clean
http://K4C3-Undetected.googlecode.com//www.google.com/
404 Not Found
Content-Length: 1425
Content-Type: text/html
clean
http://K4C3-Undetected.googlecode.com/test404page.js
404 Not Found
Content-Length: 1439
Content-Type: text/html
clean
http://www.kace-undetected.com/snow.js
500 Can't connect to www.kace-undetected.com:80 (Bad hostname)
Content-Length: 178
Content-Type: text/plain
clean
http://www.kace-undetected.com/snow2.js
500 Can't connect to www.kace-undetected.com:80 (Bad hostname)
Content-Length: 178
Content-Type: text/plain
clean
http://tuyulz-blogspot.googlecode.com/files/Anti%20Klik.js
403 Forbidden
Content-Length: 2157
Content-Type: text/html
clean
http://tuyulz-blogspot.googlecode.com//www.google.com/
404 Not Found
Content-Length: 1425
Content-Type: text/html
clean
http://wchoa.com//www.google.com/
404 Not Found
Content-Length: 1546
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: wchoa.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 10:31:27 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Mon, 15 Sep 2014 10:31:27 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 53f94ae28286625d467fde6c991deb78=co8jvou017j35oeoi4ns0jfkq0; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: wchoa.com
Referer: http://www.google.com/search?q=wchoa.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=wchoa.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wchoa.com/

Result: wchoa.com is not infected or malware details are not published yet.