Scanned pages/files
Request | Server response | Status |
http://302hosting.com/ | 200 OK Content-Length: 7856 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HaCked By ...[4774 bytes skipped]... > <body> <div id="text-shadow-box"> <div id="tsb-box"></div> <p id="tsb-text">AnOnymous IraQ</p> <p id="tsb-link"><a href="#">AnOnYmous IraQ</a></p> <div id="tsb-wall"> <div id="tsb-ie"></div><br/></br> <p><center><b>HaCked By <u>Dr.TOovi</u></b><p><b> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-</b></p> <p style="text-align: center"><b>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-</b></p> <p>Greetz To :-==: SparrOw Baghdad - Mr.HareTh - Hell TormEnt - AnOny^PrinCe</p> </center> </p> </div> <div id="tsb-spot">&l ...[4107 bytes skipped]... | ||
http://302hosting.com//www.blogger.com/static/v1/common/js/1447355603-
csitail.js/ | 404 Not Found Content-Length: 377 Content-Type: text/html | clean |
http://302hosting.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 302hosting.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 27 Sep 2015 01:11:22 GMT
Server: nginx admin
Vary: Accept-Encoding
Content-Type: text/html
X-Cache: HIT from Backend
X-Powered-By: PHP/5.5.24
GET / HTTP/1.1
Host: 302hosting.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 27 Sep 2015 01:11:22 GMT
Server: nginx admin
Vary: Accept-Encoding
Content-Type: text/html
X-Cache: HIT from Backend
X-Powered-By: PHP/5.5.24
Second query (visit from search engine):
GET / HTTP/1.1
Host: 302hosting.com
Referer: http://www.google.com/search?q=302hosting.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 302hosting.com
Referer: http://www.google.com/search?q=302hosting.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=302hosting.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://302hosting.com/
Result: 302hosting.com is not infected or malware details are not published yet.
Result: 302hosting.com is not infected or malware details are not published yet.