Scanned pages/files
Request | Server response | Status |
http://mod.gov.ps/ | 200 OK Content-Length: 24938 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HaCked By Nofawkx Al ...[12129 bytes skipped]... t; <tr><td> </head> <body text="#FF0000" bgcolor="#000000"> <p align="center"> <img border="0" src="http://upload.wikimedia.org/wikipedia/commons/1/1b/Animated-Flag-Albania.gif" width="350" height="200"></p> <html> <head> <!-- Deface page was created by Virus--> <title>HaCked By Nofawkx Al</title> </head><center> <body onLoad="type_text()" ; bgColor=#000000"> <a href=><img src=http://www.upload-pictures.de/bild.php/57658,alL3264.png></a> <center><B><Big><font color=#FF3030>HaCked By Nofawkx Al</script> <SCRIPT> alert("HaCked By Nofawkx Al")</SCRIPT> </body> </html> </script><br><embed src="http://www.youtube. ...[20477 bytes skipped]... | ||
http://ajax.googleapis.com/ajax/libs/jquery/1.8/jquery.min.js | 200 OK Content-Length: 93637 Content-Type: text/javascript | clean |
http://mod.gov.ps/js/ddsmoothmenu.js | 200 OK Content-Length: 30206 Content-Type: application/x-javascript | clean |
http://mod.gov.ps/js/jquery.js | 200 OK Content-Length: 57254 Content-Type: application/x-javascript | clean |
http://mod.gov.ps/?action=view&p=0 | 200 OK Content-Length: 24938 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=1 | 200 OK Content-Length: 14740 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=2 | 200 OK Content-Length: 25188 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=3 | 200 OK Content-Length: 14744 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=4 | 200 OK Content-Length: 15384 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=6 | 200 OK Content-Length: 18279 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=7 | 200 OK Content-Length: 15268 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=8 | 200 OK Content-Length: 16407 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=220 | 200 OK Content-Length: 17434 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=245 | 200 OK Content-Length: 17521 Content-Type: text/html | clean |
http://mod.gov.ps/?action=view&p=221 | 200 OK Content-Length: 18078 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mod.gov.ps
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 28 Aug 2014 00:37:25 GMT
Server: Apache
Content-Length: 24938
Content-Type: text/html
X-Powered-By: PHP/5.3.10
...24938 bytes of data.
GET / HTTP/1.1
Host: mod.gov.ps
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 28 Aug 2014 00:37:25 GMT
Server: Apache
Content-Length: 24938
Content-Type: text/html
X-Powered-By: PHP/5.3.10
...24938 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: mod.gov.ps
Referer: http://www.google.com/search?q=mod.gov.ps
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mod.gov.ps
Referer: http://www.google.com/search?q=mod.gov.ps
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mod.gov.ps
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://mod.gov.ps/
Result: mod.gov.ps is not infected or malware details are not published yet.
Result: mod.gov.ps is not infected or malware details are not published yet.