Scanned pages/files
Request | Server response | Status |
http://www.marocakhbar.net/ | 200 OK Content-Length: 289 Content-Type: text/html | clean |
http://www.marocakhbar.net/.htpasswds/ | 403 Forbidden Content-Length: 564 Content-Type: text/html | clean |
http://www.marocakhbar.net/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://www.marocakhbar.net/cgi-bin/ | 403 Forbidden Content-Length: 329 Content-Type: text/html | clean |
http://www.marocakhbar.net/maroc/ | 200 OK Content-Length: 4036 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Lion 187 ...[430 bytes skipped]... ÇáÏÓÊæÑ¡ ÇáÈÑáãÇä¡ ÇáÍßæãÉ¡ ÇáÞÖÇÁ¡ ÇáãÓÇæÇÉ¡ ÇáãäÇÕÝÉ," name="keywords"> <META content="ÇáÈæÇÈÉ ÇáÚÑÈíÉ -Powered by: Arab Portal v2.2, Copyright© 2008 " name="description"> <META NAME="COPYRIGHT" CONTENT="Copyright© by ArabPortal"> <META content="ALL" name="ROBOTS"> <META NAME="REVISIT-AFTER" CONTENT="1 DAYS"> <META NAME="RATING" CONTENT="GENERAL"> <title>Hacked By Lion 187</title> <link rel="shortcut icon" href="favicon.ico" type="image/x-icon"> <link rel="alternate" type="application/rss+xml" title="Hacked By Lion 187 RSS" href="index.php?action=rss"> <link rel="stylesheet" type="text/css" href="html/css/bleu.css"> <script language="javascript"> function mail(user, domain){window.location = 'mailto:'+user+'@'+domain;} </script><script language=JavaScript> function rafiaw ...[3752 bytes skipped]... |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: marocakhbar.net
Result:
GET / HTTP/1.1
Host: marocakhbar.net
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: marocakhbar.net
Referer: http://www.google.com/search?q=marocakhbar.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: marocakhbar.net
Referer: http://www.google.com/search?q=marocakhbar.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=marocakhbar.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://marocakhbar.net/
Result: marocakhbar.net is not infected or malware details are not published yet.
Result: marocakhbar.net is not infected or malware details are not published yet.