Scanned pages/files
Request | Server response | Status |
http://herbalpesoforma.it/ | 200 OK Content-Length: 4559 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: !-- *//hacked By K4C3 Undetected, ./hacked by K4C3 Undetected, h4ck3d K4C3 Undetected, owned K4C3 Un ...[3219 bytes skipped]... "+d+"</span>")}if(t){window.onload=v}</script> <script type="text/javascript" src="http://exploitlabz.ml/js/snow1.js"></script> <script type="text/javascript" src="http://exploitlabz.ml/js/snow2.js"></script> <script type="text/javascript" src="http://exploitlabz.ml/js/snow_3.js"></script> </head> <!-- *//hacked By K4C3 Undetected, ./hacked by K4C3 Undetected, h4ck3d K4C3 Undetected, owned K4C3 Undetected, 0wn3d K4C3 Undetected, defaced K4C3 Undetected, d3f4c3d K4C3 Undetected, attacked by K4C3 Undetected , hacked by K4C3 Undetected hacker,hacked by K4C3 Undetected ./hacked by K4C3 Undetected, h4ck3d by K4C3 Undetected, owned by K4C3 Undetected, 0wn3d by K4C3 Undetected, defaced by K4C3 Undetected, K4C3 Undetected , attack by K4C3 Undetected --> </head> </h1> <h1 style='text-shadow: ...[1036 bytes skipped]... | ||
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/test404page.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/rocket.htm | 200 OK Content-Length: 4559 Content-Type: text/html | clean |
http://herbalpesoforma.it/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/%7BCoNtrollEd%20bY%20Death%7D_files/cloudflare.js | 404 Not Found Content-Length: 978 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: herbalpesoforma.it
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Connection: close
Date: Mon, 01 Sep 2014 23:03:31 GMT
Server: Apache/2.2.3 (CentOS)
Content-Type: text/html
Expires: Tue, 02 Sep 2014 23:03:31 GMT
X-Powered-By: PleskLin
GET / HTTP/1.1
Host: herbalpesoforma.it
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Connection: close
Date: Mon, 01 Sep 2014 23:03:31 GMT
Server: Apache/2.2.3 (CentOS)
Content-Type: text/html
Expires: Tue, 02 Sep 2014 23:03:31 GMT
X-Powered-By: PleskLin
Second query (visit from search engine):
GET / HTTP/1.1
Host: herbalpesoforma.it
Referer: http://www.google.com/search?q=herbalpesoforma.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: herbalpesoforma.it
Referer: http://www.google.com/search?q=herbalpesoforma.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=herbalpesoforma.it
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://herbalpesoforma.it/
Result: herbalpesoforma.it is not infected or malware details are not published yet.
Result: herbalpesoforma.it is not infected or malware details are not published yet.