Scanned pages/files
Request | Server response | Status |
http://ghevanphongdep.com/ | 200 OK Content-Length: 11564 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Ayyýldýz Tim Intenational Force | Sessizce Nöbetteyiz! <!DOCTYPE html>
<html lang="tr"> <head> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <!-- PAGE TITLE --> <title>Hacked By Ayyýldýz Tim Intenational Force | Sessizce Nöbetteyiz!</title> <!-- GOOGLE FONTS --> <link href='http://fonts.googleapis.com/css?family=Lato:300,400,700|Raleway:300,400,500|Open+Sans:300,400,600,700,800' rel='stylesheet' type='text/css'> <!-- STYLESHEETS --> <link href="http://ayt-wgt.hostingsiteforfree.com/assets/css/bootstrap.min.css" rel="st ...[12939 bytes skipped]... | ||
http://ayt-wgt.hostingsiteforfree.com/assets/js/jquery-1.11.1.min.js | 200 OK Content-Length: 95788 Content-Type: application/javascript | clean |
http://ayt-wgt.hostingsiteforfree.com/assets/js/bootstrap.min.js | 200 OK Content-Length: 34653 Content-Type: application/javascript | clean |
http://ayt-wgt.hostingsiteforfree.com/assets/js/jquery.cycle.min.js | 200 OK Content-Length: 24150 Content-Type: application/javascript | clean |
http://ayt-wgt.hostingsiteforfree.com/assets/js/jquery.parallax.min.js | 200 OK Content-Length: 9449 Content-Type: application/javascript | clean |
http://ayt-wgt.hostingsiteforfree.com/assets/js/jquery.backstretch.min.js | 200 OK Content-Length: 4238 Content-Type: application/javascript | clean |
http://ayt-wgt.hostingsiteforfree.com/resimler/scripts.js | 200 OK Content-Length: 18495 Content-Type: application/javascript | clean |
http://ghevanphongdep.com/test404page.js | 404 Not Found Content-Length: 12839 Content-Type: text/html | clean |
http://code.jquery.com/jquery-1.9.1.js | 200 OK Content-Length: 268381 Content-Type: application/javascript | clean |
http://suspended.hostgator.com/js/simple-expand.min.js | 200 OK Content-Length: 2782 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ghevanphongdep.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 26 Sep 2015 12:45:28 GMT
Server: nginx/1.8.0
Content-Type: text/html
GET / HTTP/1.1
Host: ghevanphongdep.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 26 Sep 2015 12:45:28 GMT
Server: nginx/1.8.0
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: ghevanphongdep.com
Referer: http://www.google.com/search?q=ghevanphongdep.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ghevanphongdep.com
Referer: http://www.google.com/search?q=ghevanphongdep.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ghevanphongdep.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ghevanphongdep.com/
Result: ghevanphongdep.com is not infected or malware details are not published yet.
Result: ghevanphongdep.com is not infected or malware details are not published yet.