Scanned pages/files
Request | Server response | Status |
http://christmasgiftsspecials.com/ | 200 OK Content-Length: 4901 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by Harimau Malaya Cyber Army <!-- 100% Coded by Luffy HMCA. Copy-Pasters are gays because they don't even know how to code. Copyright HARIMAU MALAYA CYBER ARMY 2011-2014. All Rights Reserved Fuck Those Who Steal This Script and Make It Their Own! Official Only! --> <title>Hacked by Harimau Malaya Cyber Army</title><link href='http://i.imgur.com/dPUJiFx.png ' rel='shortcut icon'/> <head> <meta name="description" content="You Have Been Hacked by Harimau Malaya Cyber Army"> <meta name="keywords" content="HMCA, Harimau, Malaya, Cyber, Army, Luffy"> <meta name="author" content="D4rk Shadow"> <meta charset="UTF-8"> <link rel="stylesheet" type="text/css" href="ht ...[5077 bytes skipped]... | ||
https://www.blogger.com/static/v1/common/js/1912144495-csitail.js | 200 OK Content-Length: 2306 Content-Type: text/javascript | clean |
http://christmasgiftsspecials.com/test404page.js | 200 OK Content-Length: 4901 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: christmasgiftsspecials.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 10 Jun 2014 21:07:07 GMT
Server: Apache
Content-Length: 4901
Content-Type: text/html
X-Powered-By: PHP/5.3.28
...4901 bytes of data.
GET / HTTP/1.1
Host: christmasgiftsspecials.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 10 Jun 2014 21:07:07 GMT
Server: Apache
Content-Length: 4901
Content-Type: text/html
X-Powered-By: PHP/5.3.28
...4901 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: christmasgiftsspecials.com
Referer: http://www.google.com/search?q=christmasgiftsspecials.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: christmasgiftsspecials.com
Referer: http://www.google.com/search?q=christmasgiftsspecials.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=christmasgiftsspecials.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://christmasgiftsspecials.com/
Result: christmasgiftsspecials.com is not infected or malware details are not published yet.
Result: christmasgiftsspecials.com is not infected or malware details are not published yet.