Scanned pages/files
Request | Server response | Status |
http://www.nightlifemusic.co.nz/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 24 Jan 2015 18:03:30 GMT Location: http://www.nightlifemusic.co.nz/site Server: Apache/2.2.3 (CentOS) Content-Length: 244 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.nightlifemusic.co.nz/site | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 24 Jan 2015 18:03:30 GMT Location: http://www.nightlifemusic.co.nz/site/ Server: Apache/2.2.3 (CentOS) Content-Length: 245 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.nightlifemusic.co.nz/site/ | 200 OK Content-Length: 5604 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: --==[[Hacked by Lebanese Legends Team ]]==-- ...[575 bytes skipped]... 80;x++){ window.resizeTo(10,scrH*x/80) } for(y=0;y<80;y++){ window.resizeTo(scrW*y/80,scrH) } window.resizeTo(scrW,scrH) } document.oncontextmenu=new Function("muter2();return false"); function keypressed(){alert("Sorry _!_");} document.onkeydown=keypressed; function kasih_tau(){ alert('Sorry _!_'); } </script> <title>--==[[Hacked by Lebanese Legends Team ]]==--</title><link rel="SHORTCUT ICON" href="http://www.byemre.8m.com/ip-logo.gif"> </head> <body background = "http://3.bp.blogspot.com/- p9Gpy4D9Fdk/Tkp7TcNp1KI/AAAAAAAAAH0/h9IFTpZMcCE/s1600/wido2.gif" style="cursor: crosshair"> <center><br><br> <div style="width:900px;height:1250px;border:2px solid lime;background- color:#000000"><br /> ...[5940 bytes skipped]... | ||
http://www.nightlifemusic.co.nz/test404page.js | 404 Not Found Content-Length: 403 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: nightlifemusic.co.nz
Result:
GET / HTTP/1.1
Host: nightlifemusic.co.nz
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: nightlifemusic.co.nz
Referer: http://www.google.com/search?q=nightlifemusic.co.nz
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: nightlifemusic.co.nz
Referer: http://www.google.com/search?q=nightlifemusic.co.nz
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=nightlifemusic.co.nz
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://nightlifemusic.co.nz/
Result: nightlifemusic.co.nz is not infected or malware details are not published yet.
Result: nightlifemusic.co.nz is not infected or malware details are not published yet.