Scanned pages/files
| Request | Server response | Status |
http://mlb-immobilien-berlin.de/ | 200 OK Content-Length: 2410 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: ---=={*Hacked By DZ-Z3R0*}==--- <html> <head> <title>---=={*Hacked By DZ-Z3R0*}==---</title> <script language="JavaScript"> var message="---=={*Hacked By DZ-Z3R0*}==---" var message=message+" " i="0" var temptitle="" var speed="100" function titler() { if (!document.all&&!document.getElementById) return document.title=temptitle+message.charAt(i) temptitle=temptitle+message. ...[2576 bytes skipped]... | ||
http://mlb-immobilien-berlin.de/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mlb-immobilien-berlin.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 27 Dec 2014 01:07:28 GMT
Accept-Ranges: bytes
ETag: "200fb811-96a-48d75419aedae"
Server: Apache
Vary: Accept-Encoding
Content-Length: 2410
Content-Type: text/html
Last-Modified: Tue, 10 Aug 2010 10:04:18 GMT
...2410 bytes of data.
GET / HTTP/1.1
Host: mlb-immobilien-berlin.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 27 Dec 2014 01:07:28 GMT
Accept-Ranges: bytes
ETag: "200fb811-96a-48d75419aedae"
Server: Apache
Vary: Accept-Encoding
Content-Length: 2410
Content-Type: text/html
Last-Modified: Tue, 10 Aug 2010 10:04:18 GMT
...2410 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: mlb-immobilien-berlin.de
Referer: http://www.google.com/search?q=mlb-immobilien-berlin.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mlb-immobilien-berlin.de
Referer: http://www.google.com/search?q=mlb-immobilien-berlin.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mlb-immobilien-berlin.de
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://mlb-immobilien-berlin.de/
Result: mlb-immobilien-berlin.de is not infected or malware details are not published yet.
Result: mlb-immobilien-berlin.de is not infected or malware details are not published yet.
