See: http://killmalware.com/besthealthtips.co/# existing abuse at hostgator
https://oscarotero.com/embed/demo/index.php?url=http://besthealthtips.co/
See: http://toolbar.netcraft.com/site_report?url=https://scontent-b-ams.xx.fbcdn.net
and http://toolbar.netcraft.com/site_report?url=http://besthealthtips.co
and http://toolbar.netcraft.com/site_report?url=http://gator3153.hostgator.com
code: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fbesthealthtips.co%2F
see: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Fbesthealthtips.co%2F&useragent=Fetch+useragent&accept_encoding=
WARNING: Name servers software versions are exposed:
192.254.185.143: “9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.5”
50.87.144.188: “9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.5”
and several other issues, see: http://www.dnsinspect.com/besthealthtips.co/1454277490
Referenced content () (i.e. css, rss)
link type rel
-https://scontent-b-ams.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/10405350_1545005189078990_8498386338203523746_n.jpg?oh=2e22e1d5d1e616ca16c7ecbc9e481770&oe=550A787D
Embedded content, images
-https://youtube.googleapis.com/v/vDHBe1BA-Nk%26autoplay=1 (htxps://youtube.googleapis.com/v/vDHBe1BA-Nk%26autoplay=1)
-http://besthealthtips.co/../scontent-b-ams.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/10405350_1545005189078990_8498386338203523746_n.jpg?oh=2e22e1d5d1e616ca16c7ecbc9e481770&oe=550A787D (…/scontent-b-ams.xx.fbcdn.net/hphotos-xpf1/v/t1.0-9/10405350_1545005189078990_8498386338203523746_n.jpg?oh=2e22e1d5d1e616ca16c7ecbc9e481770&oe=550A787D)
script:
link type
-http://besthealthtips.co/ → http://www.domxssscanner.com/scan?url=http%3A%2F%2Fbesthealthtips.co%2F<inline>
Hack code
<head> </head><body style="background-color: rblanc; color: blanc; position: relative; min-height: 100%; top: 0px;" onkeydown="return false;" oncontextmenu="alert('FUCK YOUR, STOP NIGGA');return false;" alink="#ee0000" link="#0000ee" vlink="#551a8b"><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center><center> <title> Hacked By S@NT3T3 *</title>
non-malicous per-se. This signature * was found in 95 websites.
polonus (volunteer website security analyst and website error-hunter)