Scanned pages/files
| Request | Server response | Status |
http://chowsan.com/ | 200 OK Content-Length: 2511 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By_DAVACI ...[1293 bytes skipped]... esash.jpg');background-repeat: repeat-x;background-position: center center;height: 266px;width: 100%;}/* Coding by: unique2world */</style></head><body><center><div class="wrapper"><P style="MARGIN-TOP: -1px; MARGIN-BOTTOM: -1px; WORD-SPACING: -1px" align=center><img src="http://www.resimsakla.com/data/media/7/Turk_Bayragi%20(8).png" width="800" height="200" ></P><h6>Hacked By_DAVACI</h6><h6> SLYHACKER & Beyaz_Hacker & DEATH_K1NG & Tra!ner & Bozodayi</h6>r<p> </p><p id="box">Soykirim yok demek o zaman bizde simdi sanal soykirima baslayalim..</p><br><p id="ashiyane">God Damn Murderer France and Israel and USA</p><p id="">Copyright 2006 Turk HACKER Tum Haklari saklidir taklit edilemez.<br> No War<br /></p><div class="image"> <p> ...[699 bytes skipped]... | ||
http://chowsan.com/test404page.js | 404 Not Found Content-Length: 392 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: chowsan.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 20 Jan 2014 07:21:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
GET / HTTP/1.1
Host: chowsan.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 20 Jan 2014 07:21:24 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: chowsan.com
Referer: http://www.google.com/search?q=chowsan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: chowsan.com
Referer: http://www.google.com/search?q=chowsan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=chowsan.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://chowsan.com/
Result: chowsan.com is not infected or malware details are not published yet.
Result: chowsan.com is not infected or malware details are not published yet.
