Scanned pages/files
Request | Server response | Status |
http://hemorivabasurseti.com/ | 200 OK Content-Length: 10354 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By 1337 h@x0r <title>Hacked By 1337 h@x0r</title> <body> <link rel="shortcut icon" href="http://focsoft.blogspot.com/favicon.ico"> <div align="center"> <audio loop autoplay><source src="http://p1.bcbits.com/download/track/67ad74567036f981b3614a4e3c6154e1/mp3-128/2537649749?fsig=64becd0a7fbdb6e58294590fb62ee18a&id=2537649749&stream=1&ts=1434643200.0&e=1434643260&rs=32&ri=960&h=51a6b14382b64fc59f83839af4115c70" ...[11219 bytes skipped]... | ||
http://hemorivabasurseti.com/test404page.js | 200 OK Content-Length: 10354 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: hemorivabasurseti.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 21 Jul 2015 02:03:11 GMT
Server: nginx/1.8.0
Content-Type: text/html
X-Cacheable: YES
X-Served-From-Cache: Yes
GET / HTTP/1.1
Host: hemorivabasurseti.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 21 Jul 2015 02:03:11 GMT
Server: nginx/1.8.0
Content-Type: text/html
X-Cacheable: YES
X-Served-From-Cache: Yes
Second query (visit from search engine):
GET / HTTP/1.1
Host: hemorivabasurseti.com
Referer: http://www.google.com/search?q=hemorivabasurseti.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: hemorivabasurseti.com
Referer: http://www.google.com/search?q=hemorivabasurseti.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=hemorivabasurseti.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://hemorivabasurseti.com/
Result: hemorivabasurseti.com is not infected or malware details are not published yet.
Result: hemorivabasurseti.com is not infected or malware details are not published yet.