Scanned pages/files
Request | Server response | Status |
http://bestinternetsecuritynow.com/ | 200 OK Content-Length: 23271 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By L ...[622 bytes skipped]... 5445d59032a0899c846988-1420998211-1800",zone:"bestinternetsecuritynow.com",rocket:"a",apps:{}}];document.write('<script type="text/javascript" src="//ajax.cloudflare.com/cdn-cgi/nexp/dok2v=919620257c/cloudflare.min.js"><'+'\/script>');}}catch(e){}; //]]> </script> <style></style> <meta content="text/html; charset=ISO-8859-1" http-equiv="content-type"> <title>Hacked By L'APoca-Dz</title> </head> <body style="color: rgb(153, 0, 153); text-shadow: rgb(137, 191, 1) 0px -7px 15px; background-color: rgb(0, 0, 0);" alink="#990099" link="#990099" vlink="#990099"> <table height="100%" width="100%"> <tbody> <tr> <td align="center" valign="middle"> <div style="text-align: center;"> <pre><span style="color: rgb(181, 253, 3); font-weight: bold;"><br><sma ...[26082 bytes skipped]... | ||
http://bestinternetsecuritynow.com/test404page.js | 200 OK Content-Length: 23271 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: bestinternetsecuritynow.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sun, 11 Jan 2015 17:43:31 GMT
Server: cloudflare-nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
CF-RAY: 1a72eac5ec6305d5-WAW
Set-Cookie: __cfduid=d2af26bcc525509cf9ec2ea14ba63b6071420998211; expires=Mon, 11-Jan-16 17:43:31 GMT; path=/; domain=.bestinternetsecuritynow.com; HttpOnly
X-Mod-Pagespeed: 1.8.31.4-4056
X-Powered-By: PHP/5.3.3
GET / HTTP/1.1
Host: bestinternetsecuritynow.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sun, 11 Jan 2015 17:43:31 GMT
Server: cloudflare-nginx
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
CF-RAY: 1a72eac5ec6305d5-WAW
Set-Cookie: __cfduid=d2af26bcc525509cf9ec2ea14ba63b6071420998211; expires=Mon, 11-Jan-16 17:43:31 GMT; path=/; domain=.bestinternetsecuritynow.com; HttpOnly
X-Mod-Pagespeed: 1.8.31.4-4056
X-Powered-By: PHP/5.3.3
Second query (visit from search engine):
GET / HTTP/1.1
Host: bestinternetsecuritynow.com
Referer: http://www.google.com/search?q=bestinternetsecuritynow.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: bestinternetsecuritynow.com
Referer: http://www.google.com/search?q=bestinternetsecuritynow.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=bestinternetsecuritynow.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://bestinternetsecuritynow.com/
Result: bestinternetsecuritynow.com is not infected or malware details are not published yet.
Result: bestinternetsecuritynow.com is not infected or malware details are not published yet.