Scanned pages/files
Request | Server response | Status |
http://cheap-internetservices.com/ | 200 OK Content-Length: 4399 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By L0g4N H4x0R ...[3221 bytes skipped]... r="red"; } </script> <br /> <TITLE> Pak Cyber Hunter</TITLE> <BODY> <center> <h1><font color="red">Pak Cyber Hunter</font></h1></center> <center><img src="https://lh4.googleusercontent.com/-OxuqL3pTBeE/T0xk5_dcf5I/AAAAAAAAhIQ/Ug9ta3n0gwU/Annon-Animated.gif" /><br> <h2><font color="red">Hacked By L0g4N H4x0R</font></h2> <font color="black" size="3"><b> <p>We Are Pakistani's You Know Who Are Pakistani's?</p> <p>We Are That Nation Who Is Not Afraid Of Bombs Who Is Not Afraid Of Death Who Is Not Afraid Of Drone Attacks</p> <p></p><h2><font color="red">We Are That Nation</font></h2><p></p> <p>Who Defeated India Many ...[1236 bytes skipped]... | ||
http://code.jquery.com/jquery-1.6.4.js | 200 OK Content-Length: 238159 Content-Type: application/x-javascript | clean |
http://metwinx.com/js/cufon-yui.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:05 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/?f | 200 OK Content-Length: 2533 Content-Type: text/html | clean |
http://return.uk.domainnamesales.com/return_js.php?d=metwinx.com&s=1398980705 | 200 OK Content-Length: 31 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js | 200 OK Content-Length: 85925 Content-Type: text/javascript | clean |
http://metwinx.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:06 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/Yanone_Kaffeesatz_400-700.font.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:06 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.prettyPhoto.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:06 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.form.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:06 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.ufvalidator-1.0.5.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.easing.1.3.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.mousewheel.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.jscrollpane.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.progression.1.3.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/jquery.text-effects.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://metwinx.com/js/custom.js | HTTP/1.1 302 Found Connection: close Date: Thu, 01 May 2014 21:45:07 GMT Location: http://metwinx.com/?f Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: WEBUK=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.9 | clean |
http://fb-autoliker.ciki.me/v2/js/jquery-1.6.1.min.js | HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=1209600 Cache-Control: public, must-revalidate, proxy-revalidate Connection: close Date: Thu, 01 May 2014 21:45:08 GMT Pragma: public Location: http://announcement.2freehosting.com/ Server: nginx/1.4.1 Content-Length: 160 Content-Type: text/html Expires: Thu, 15 May 2014 21:45:08 GMT | clean |
http://announcement.2freehosting.com/ | 200 OK Content-Length: 16204 Content-Type: text/html | clean |
http://announcement.2freehosting.com//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | 404 Not Found Content-Length: 570 Content-Type: text/html | clean |
http://fb-autoliker.ciki.me//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 01 May 2014 21:45:09 GMT Location: http://announcement.2freehosting.com/ Server: nginx/1.4.1 Content-Length: 160 Content-Type: text/html | clean |
http://fb-autoliker.ciki.me/v2/js/facybox.js | HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=1209600 Cache-Control: public, must-revalidate, proxy-revalidate Connection: close Date: Thu, 01 May 2014 21:45:10 GMT Pragma: public Location: http://announcement.2freehosting.com/ Server: nginx/1.4.1 Content-Length: 160 Content-Type: text/html Expires: Thu, 15 May 2014 21:45:10 GMT | clean |
http://stats.hosting24.com/count.php | 200 OK Content-Length: 960 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cheap-internetservices.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 01 May 2014 21:45:03 GMT
Server: Apache
Content-Length: 4399
Content-Type: text/html
X-Powered-By: PHP/5.2.17
...4399 bytes of data.
GET / HTTP/1.1
Host: cheap-internetservices.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 01 May 2014 21:45:03 GMT
Server: Apache
Content-Length: 4399
Content-Type: text/html
X-Powered-By: PHP/5.2.17
...4399 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cheap-internetservices.com
Referer: http://www.google.com/search?q=cheap-internetservices.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cheap-internetservices.com
Referer: http://www.google.com/search?q=cheap-internetservices.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cheap-internetservices.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cheap-internetservices.com/
Result: cheap-internetservices.com is not infected or malware details are not published yet.
Result: cheap-internetservices.com is not infected or malware details are not published yet.