Scanned pages/files
Request | Server response | Status |
http://ipbn.eu/ | 200 OK Content-Length: 7709 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Hayate DevilzSec ...[1823 bytes skipped]... nt-size: 26; color: rgb(153, 153, 153); text-shadow: 1px 1px 1px red;} a { border-bottom:1px solid #4C83AF; color: white; font-family: 14px; text-shadow: 1px 2px 1px white; font-weight: bold; text-decoration: none;} img { border: 1 black; } .td2 {border-left:1px solid red;} </style> <h1><font color="#FF0000" face="Courier New"> Hacked By Hayate DevilzSec</font></h1><br> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="keywords" content="Hacked By Hayate DevilzSec" /> <meta name="title" content="Hacked By Hayate DevilzSec" /> <body oncontextmenu='return false;' onkeydown='return false;' onmousedown='return false;'> </head><body text="16777215"><center> <img alt= ...[7052 bytes skipped]... | ||
http://ipbn.eu/test404page.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ipbn.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 16 Jun 2014 22:03:18 GMT
Accept-Ranges: bytes
ETag: "882d458b-1e1d-4e3b0215f9e6d"
Server: Apache
Content-Length: 7709
Content-Type: text/html
Last-Modified: Sun, 11 Aug 2013 18:25:20 GMT
...7709 bytes of data.
GET / HTTP/1.1
Host: ipbn.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 16 Jun 2014 22:03:18 GMT
Accept-Ranges: bytes
ETag: "882d458b-1e1d-4e3b0215f9e6d"
Server: Apache
Content-Length: 7709
Content-Type: text/html
Last-Modified: Sun, 11 Aug 2013 18:25:20 GMT
...7709 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ipbn.eu
Referer: http://www.google.com/search?q=ipbn.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ipbn.eu
Referer: http://www.google.com/search?q=ipbn.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ipbn.eu
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ipbn.eu/
Result: ipbn.eu is not infected or malware details are not published yet.
Result: ipbn.eu is not infected or malware details are not published yet.