Scanned pages/files
Request | Server response | Status |
http://cza-ba.pl/ | 200 OK Content-Length: 6231 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by ...[1939 bytes skipped]... > </head> <center> <div id="menu"> <b> <font><p> </b> </div> <img alt="Indonesia Corporation Cyber" src="http://41.media.tumblr.com/b5a6e3711ec8a75957ba85ecd44cfbbc/tumblr_mpxuu75B0U1r907jzo3_1280.jpg" height="442" width="442" /> <center><font color="White" face="courier new" size="2">Hacked by </font><font color="White" face="courier new" size="7"> Mr.Crazyxx </font><br><br></center> <br> <center><font color="White" face="courier new" size="4">We Are : </font><font color="gold" face="courier new" size="4" class="neon"> Indonesia Corporation Cyber</font><br><br></center> <center><font color="White" face="This is Comic Sans MS" size="4">Official Member : &l ...[4419 bytes skipped]... | ||
http://cza-ba.pl/test404page.js | 200 OK Content-Length: 6231 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cza-ba.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 25 Dec 2015 20:34:31 GMT
Server: Apache/2
Vary: Accept-Encoding
Content-Length: 6231
Content-Type: text/html
...6231 bytes of data.
GET / HTTP/1.1
Host: cza-ba.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 25 Dec 2015 20:34:31 GMT
Server: Apache/2
Vary: Accept-Encoding
Content-Length: 6231
Content-Type: text/html
...6231 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cza-ba.pl
Referer: http://www.google.com/search?q=cza-ba.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cza-ba.pl
Referer: http://www.google.com/search?q=cza-ba.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cza-ba.pl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cza-ba.pl/
Result: cza-ba.pl is not infected or malware details are not published yet.
Result: cza-ba.pl is not infected or malware details are not published yet.