Scanned pages/files
Request | Server response | Status |
http://faith1stprinting.com/ | 200 OK Content-Length: 584 Content-Type: text/html | clean |
http://faith1stprinting.com/404.shtml | 200 OK Content-Length: 2674 Content-Type: text/html | clean |
http://cdn.dsultra.com/js/registrar.js | 200 OK Content-Length: 1688 Content-Type: application/x-javascript | clean |
http://faith1stprinting.com/test404page.js | 404 Not Found Content-Length: 2674 Content-Type: text/html | clean |
http://faith1stprinting.com/500.shtml | 200 OK Content-Length: 94 Content-Type: text/html | clean |
http://faith1stprinting.com/cgi-bin/ | 403 Forbidden Content-Length: 399 Content-Type: text/html | clean |
http://faith1stprinting.com/favicon.ico | 200 OK Content-Length: 198 Content-Type: image/vnd.microsoft.icon | clean |
http://faith1stprinting.com/indonesia.htm | 200 OK Content-Length: 3415 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: hacked by Hmei7 ...[1265 bytes skipped]... >i§ZH¶9g ªçv}ØJæbe9 9)¬Ùöè2Bi¦^BhçqJi§6ÖXj«Ê¦>ꩬ3ö9Ôm뮼âõa¯ÀÛÕ¯Âkìī첪&Ëì³ËZ í´ÔVkíµØf«í¶Üvëí·à ; <!------------------------------------------ owned by Hmei7 4ever only mail, n1cedre4m[at]yahoo[dot]com no fb, no tweet, and also no other 2006 - now, indonesia -------------------------------------------> <title>hacked by Hmei7</title><script>var g=35,f=new Array("#AAAACC","#DDDDFF","#CCCCDD","#F3F3F3","#F0FFFF"),e=new Array("Arial Black","Arial Narrow","Times","Comic Sans MS"),d="*",m=0.6,a=22,b=8,c=1,j=new Array(),k,l,x,n=new Array(),o=new Array(),p=new Array(),q=navigator.userAgent,r=document.all&&document.getElementById&&!q.match(/Opera/),s=document.getElementById&&!document.all,u=q.match(/Opera/),t=r||s||u;function y(z){return Math.floor(z*Math.random())}fu ...[1429 bytes skipped]... | ||
http://faith1stprinting.com/joomla/ | 200 OK Content-Length: 34595 Content-Type: text/html | clean |
http://faith1stprinting.com/joomla/media/system/js/caption.js | 200 OK Content-Length: 1963 Content-Type: text/javascript | clean |
http://faith1stprinting.com/joomla/templates/ja_purity/js/ja.script.js | 200 OK Content-Length: 3207 Content-Type: text/javascript | clean |
http://faith1stprinting.com/joomla/templates/ja_purity/js/ja.rightcol.js | 200 OK Content-Length: 1695 Content-Type: text/javascript | clean |
http://faith1stprinting.com/joomla/index.php | 200 OK Content-Length: 34686 Content-Type: text/html | clean |
http://faith1stprinting.com/joomla/index.php?option=com_mailto&tmpl=component&link=ee30621b0110c089a2210a78820e42607bc5e309 | 200 OK Content-Length: 2612 Content-Type: text/html | clean |
http://faith1stprinting.com/joomla/index.php?view=article&catid=1:latest-news&id=45:joomla-community-portal&tmpl=component&print=1&layout=default&page= | 200 OK Content-Length: 2956 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: faith1stprinting.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 27 Jan 2015 21:20:31 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 584
Content-Type: text/html;charset=ISO-8859-1
...584 bytes of data.
GET / HTTP/1.1
Host: faith1stprinting.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 27 Jan 2015 21:20:31 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 584
Content-Type: text/html;charset=ISO-8859-1
...584 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: faith1stprinting.com
Referer: http://www.google.com/search?q=faith1stprinting.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: faith1stprinting.com
Referer: http://www.google.com/search?q=faith1stprinting.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=faith1stprinting.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://faith1stprinting.com/
Result: faith1stprinting.com is not infected or malware details are not published yet.
Result: faith1stprinting.com is not infected or malware details are not published yet.