Scanned pages/files
Request | Server response | Status |
http://huaxinkj.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 11 Jul 2015 16:39:41 GMT Location: http://www.huaxinkj.com/ Server: nginx/1.2.9 Content-Length: 184 Content-Type: text/html | clean |
http://www.huaxinkj.com/ | 200 OK Content-Length: 625 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Johnson-7 <!--
Hacked By Johnson-7 --> <table style="left: 0px; top: 0px; position: fixed;z-index: 5000;position:absolute;width:100%;height:300%;background-color: black;"> <tbody><tr><td style="color:#FFFFFF;z-index: 6000;vertical-align:top;"> <title>Hacked by Johnson-7 ~</title> <h1> Hacked by Johnson-7 ~ <br><br> You this rubbish </h1></td></tr> </tbody></table> <object type="application/x-shockwave-flash" width="0" height="0" data="http://www.uploadmusic.org/musicplayer.swf?song_url=http://www.thissongissick.com/blog/wp-content/uploads/2012/05/Knife-Party-Bonfire-Original-Mix.mp3&autoplay=true"></object> | ||
http://www.huaxinkj.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: huaxinkj.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 11 Jul 2015 16:39:41 GMT
Location: http://www.huaxinkj.com/
Server: nginx/1.2.9
Content-Length: 184
Content-Type: text/html
...184 bytes of data.
GET / HTTP/1.1
Host: huaxinkj.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 11 Jul 2015 16:39:41 GMT
Location: http://www.huaxinkj.com/
Server: nginx/1.2.9
Content-Length: 184
Content-Type: text/html
...184 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: huaxinkj.com
Referer: http://www.google.com/search?q=huaxinkj.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: huaxinkj.com
Referer: http://www.google.com/search?q=huaxinkj.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=huaxinkj.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://huaxinkj.com/
Result: huaxinkj.com is not infected or malware details are not published yet.
Result: huaxinkj.com is not infected or malware details are not published yet.