Scanned pages/files
Request | Server response | Status |
http://nigerianmilitaryschool.net/ | 200 OK Content-Length: 11352 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Your website has been hacked by #Hackdee ...[53 bytes skipped]... itional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Nigerian Military School: <html> <head> <body> <title>Hackdee et' net razer</title> <body bgcolor="#000000"/> <center><font face="Lucida Handwriting" size="6" color="black"/>Your website has been hacked by #Hackdee</center> <center><img src="http://i01.i.aliimg.com/wspho</title> <meta name="Keywords" content="Nigerian Military School,nms,nigerian schools,schools in nigeria,colleges in nigeria,language school,home school,high school,school, public schools,school closings,nursing school,school girl,business school,law school,schools alumnus,test your skills,school supply, private schools, diploma, elementary schools,boarding school,school unifor ...[12521 bytes skipped]... | ||
http://nigerianmilitaryschool.net/index.php | 200 OK Content-Length: 11352 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/ | 200 OK Content-Length: 152 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/index.php&rs= | 200 OK Content-Length: 9768 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../index.php | 200 OK Content-Length: 9771 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../index.php | 200 OK Content-Length: 9774 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../index.php | 200 OK Content-Length: 9777 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../index.php | 200 OK Content-Length: 9780 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../index.php | 200 OK Content-Length: 9783 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../index.php | 200 OK Content-Length: 9786 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../../index.php | 200 OK Content-Length: 9789 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../../../index.php | 200 OK Content-Length: 9792 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../../../../index.php | 200 OK Content-Length: 9795 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../../../../../index.php | 200 OK Content-Length: 9798 Content-Type: text/html | clean |
http://nigerianmilitaryschool.net/apply/login.php?redirect=/apply/../../../../../../../../../../../index.php | 200 OK Content-Length: 9801 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: nigerianmilitaryschool.net
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 24 Jan 2015 22:13:27 GMT
Pragma: no-cache
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=b2a62a99e9f3e035374142440beba1d7; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: nigerianmilitaryschool.net
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 24 Jan 2015 22:13:27 GMT
Pragma: no-cache
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=b2a62a99e9f3e035374142440beba1d7; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: nigerianmilitaryschool.net
Referer: http://www.google.com/search?q=nigerianmilitaryschool.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: nigerianmilitaryschool.net
Referer: http://www.google.com/search?q=nigerianmilitaryschool.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=nigerianmilitaryschool.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://nigerianmilitaryschool.net/
Result: nigerianmilitaryschool.net is not infected or malware details are not published yet.
Result: nigerianmilitaryschool.net is not infected or malware details are not published yet.