Scanned pages/files
Request | Server response | Status |
http://www.hong-ta.com.tw/ | 200 OK Content-Length: 14517 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HACKED BY MR.BM ...[4702 bytes skipped]... <div align="right"><a href="time.php" class="link-10-item">æåæµç¨</a><span class="s4">â£</span></div></td> <td><img src="../images/spacer.gif" alt="" width="1" height="66" border="0"/></td> </tr> <tr> <td colspan="11"><p style="text-align: center;"> <strong><span style="font-size:72px;">HACKED BY MR.BM</span></strong></p> </td> <td><img src="../images/spacer.gif" alt="" width="1" height="200" border="0"/></td> </tr> <tr> <td><img src="../images/00_index_r3_c1.jpg" alt="" name="n00_index_r3_c1" width="120" height="57" id="n00_index_r3_c1" border="0"/></td> <td><a href="../news.php" onmouseout="MM_swapImgRestore();" onmouseover="MM_swapImage('n00_index_r3_c ...[11901 bytes skipped]... | ||
http://www.hong-ta.com.tw/../mm_css_menu.js | 400 Bad Request Content-Length: 310 Content-Type: text/html | clean |
http://www.hong-ta.com.tw/test404page.js | 404 Not Found Content-Length: 791 Content-Type: text/html | clean |
http://www.hong-ta.com.tw/../Scripts/AC_RunActiveContent.js | 400 Bad Request Content-Length: 310 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: hong-ta.com.tw
Result:
GET / HTTP/1.1
Host: hong-ta.com.tw
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: hong-ta.com.tw
Referer: http://www.google.com/search?q=hong-ta.com.tw
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: hong-ta.com.tw
Referer: http://www.google.com/search?q=hong-ta.com.tw
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=hong-ta.com.tw
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://hong-ta.com.tw/
Result: hong-ta.com.tw is not infected or malware details are not published yet.
Result: hong-ta.com.tw is not infected or malware details are not published yet.