Scanned pages/files
Request | Server response | Status |
http://www.47sp.com/ | 200 OK Content-Length: 2134 Content-Type: text/html | clean |
http://www.47sp.com/p.php | 200 OK Content-Length: 21166 Content-Type: text/html | clean |
http://lib.sinaapp.com/js/jquery/1.7/jquery.min.js | 200 OK Content-Length: 94020 Content-Type: application/javascript | clean |
http://www.47sp.com/p.php?act=phpinfo | 200 OK Content-Length: 51347 Content-Type: text/html | clean |
http://www.47sp.com/p.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 | 200 OK Content-Length: 13308 Content-Type: text/html | clean |
http://www.47sp.com/test404page.js | 404 Not Found Content-Length: 571 Content-Type: text/html | clean |
http://www.47sp.com/p.php?act=Function | 200 OK Content-Length: 106944 Content-Type: text/html | clean |
http://www.47sp.com/phpinfo.php | 200 OK Content-Length: 51244 Content-Type: text/html | clean |
http://www.47sp.com/phpinfo.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 | 200 OK Content-Length: 13308 Content-Type: text/html | clean |
http://www.47sp.com/phpmyadmin/ | 200 OK Content-Length: 3300 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By n4h1d From CyBER-71 <html>
<script>alert("Hacked By n4h1d From CyBER-71")</script> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1252"><title>Hacked By n4h1d From CyBER-71</title> <meta name="description" content="Hacked By n4h1d from CyBER-71"> <style> html{display:table;height:100%;width:100%;}body{display:table-row;}body{display:table-cell;vertical-align:middle;text-align:center;}a:link{text-decor ...[3583 bytes skipped]... |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 47sp.com
Result:
GET / HTTP/1.1
Host: 47sp.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: 47sp.com
Referer: http://www.google.com/search?q=47sp.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 47sp.com
Referer: http://www.google.com/search?q=47sp.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=47sp.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://47sp.com/
Result: 47sp.com is not infected or malware details are not published yet.
Result: 47sp.com is not infected or malware details are not published yet.