Scanned pages/files
Request | Server response | Status |
http://cooperandchand.com/ | 200 OK Content-Length: 7605 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Ayyıldız Tim Intenational Force | Sessizce Nöbetteyiz! <!DOCTYPE html> <html prefix="og: http://ogp.me/ns#" lang=tr> <head> <meta name=apple-mobile-web-app-capable content=yes> <meta name=viewport content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset=utf-8> <title>Hacked By Ayyıldız Tim Intenational Force | Sessizce Nöbetteyiz!</title> <link href='http://fonts.googleapis.com/css?family=Lato:300,400,700|Raleway:300,400,500|Open+Sans:300,400,600,700,800' rel=stylesheet type='text/css'> <link href="http://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css" rel=stylesheet> <link href="http://www.uploadhosting.co/uploads/81.17.23.197/bootstrap.min.css" rel=stylesheet type="text/css"/& ...[8073 bytes skipped]... | ||
http://www.uploadhosting.co/uploads/81.17.23.197/jquery-1.11.1.min.js | 200 OK Content-Length: 95788 Content-Type: text/javascript | clean |
http://www.uploadhosting.co/uploads/81.17.23.197/bootstrap.min.js | 200 OK Content-Length: 34653 Content-Type: text/javascript | clean |
http://www.uploadhosting.co/uploads/81.17.23.197/jquery.cycle.min.js | 200 OK Content-Length: 24150 Content-Type: text/javascript | clean |
http://www.uploadhosting.co/uploads/81.17.23.197/jquery.parallax.min.js | 200 OK Content-Length: 9449 Content-Type: text/javascript | clean |
http://www.uploadhosting.co/uploads/81.17.23.197/jquery.backstretch.min.js | 200 OK Content-Length: 4238 Content-Type: text/javascript | clean |
http://www.uploadhosting.co/uploads/81.17.18.205/script_IM5Wt0.js | 200 OK Content-Length: 18188 Content-Type: text/javascript | clean |
http://cooperandchand.com/test404page.js | 404 Not found Content-Length: 151 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cooperandchand.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sun, 01 Feb 2015 10:25:01 GMT
Pragma: no-cache
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4
Vary: Accept-Encoding
Content-Length: 7605
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 7711731787b9cf523404de97d576b727=93fb5745ae0485f735508acdd16a2805; path=/
X-Logged-In: False
X-Mod-Pagespeed: 1.7.30.4-3847
X-Powered-By: PHP/5.3.28
...7605 bytes of data.
GET / HTTP/1.1
Host: cooperandchand.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sun, 01 Feb 2015 10:25:01 GMT
Pragma: no-cache
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4
Vary: Accept-Encoding
Content-Length: 7605
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 7711731787b9cf523404de97d576b727=93fb5745ae0485f735508acdd16a2805; path=/
X-Logged-In: False
X-Mod-Pagespeed: 1.7.30.4-3847
X-Powered-By: PHP/5.3.28
...7605 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cooperandchand.com
Referer: http://www.google.com/search?q=cooperandchand.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cooperandchand.com
Referer: http://www.google.com/search?q=cooperandchand.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cooperandchand.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cooperandchand.com/
Result: cooperandchand.com is not infected or malware details are not published yet.
Result: cooperandchand.com is not infected or malware details are not published yet.