Scanned pages/files
Request | Server response | Status |
http://oursongfolder.com/ | 200 OK Content-Length: 21091 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HACKED BY ORIONSHUNTER ...[12588 bytes skipped]... yle="background-color:#dbdbdb">Steve Miller </td></tr><tr style="color:black;font-size:11px;"><td style="background-color:Green"> </td><td valign="top" style="background-color:#FFFFFF"><a href="song.asp?songID=56" style="color:blue;font-size:11px;text-decoration:none"><p><span style="font-size:28px;"><span style="color: rgb(255, 0, 0);">HACKED BY ORIONSHUNTER </span></span><a href="https://www.facebook.com/BangladeshBlackHat" target="_blank"><span style="font-size:28px;"><span style="color: rgb(255, 0, 0);">OF BD BLACK</a></td><td valign="top" style="background-color:#FFFFFF"><p><span style="font-size:28px;"><span style="color: rgb(255, 0, 0);">HACKED BY ORIONSHUNTER </span></span><a href="https://www.facebook.com/BangladeshBlackHat" target="_bla ...[12430 bytes skipped]... | ||
http://oursongfolder.com/index.asp | 200 OK Content-Length: 21091 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=gig | 200 OK Content-Length: 7177 Content-Type: text/html | clean |
http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.7.1.js | 200 OK Content-Length: 248235 Content-Type: application/x-javascript | clean |
http://ajax.aspnetcdn.com/ajax/jquery.ui/1.8.18/jquery-ui.js | 200 OK Content-Length: 300207 Content-Type: application/x-javascript | clean |
http://ajax.aspnetcdn.com/ajax/jquery.dataTables/1.9.0/jquery.dataTables.min.js | 200 OK Content-Length: 69738 Content-Type: application/x-javascript | clean |
http://oursongfolder.com/admin.asp?mode=set | 200 OK Content-Length: 5630 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=song | 200 OK Content-Length: 35771 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=band | 200 OK Content-Length: 4821 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=sett | 200 OK Content-Length: 4813 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=myac | 200 OK Content-Length: 4606 Content-Type: text/html | clean |
http://oursongfolder.com/test404page.js | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://oursongfolder.com/admin.asp?mode=song&hidden=1 | 200 OK Content-Length: 14123 Content-Type: text/html | clean |
http://oursongfolder.com/songEdit.asp?mode=add | 200 OK Content-Length: 5642 Content-Type: text/html | clean |
http://oursongfolder.com/song.asp?songID=22 | 200 OK Content-Length: 4099 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: oursongfolder.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Wed, 16 Dec 2015 12:05:44 GMT
Server: Microsoft-IIS/7.0
Content-Length: 21091
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCCDCQDCQ=KHPBHJKANDLDCHFJFCHJBPGA; path=/
X-Powered-By: ASP.NET
...21091 bytes of data.
GET / HTTP/1.1
Host: oursongfolder.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Wed, 16 Dec 2015 12:05:44 GMT
Server: Microsoft-IIS/7.0
Content-Length: 21091
Content-Type: text/html
Set-Cookie: ASPSESSIONIDCCDCQDCQ=KHPBHJKANDLDCHFJFCHJBPGA; path=/
X-Powered-By: ASP.NET
...21091 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: oursongfolder.com
Referer: http://www.google.com/search?q=oursongfolder.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: oursongfolder.com
Referer: http://www.google.com/search?q=oursongfolder.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=oursongfolder.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://oursongfolder.com/
Result: oursongfolder.com is not infected or malware details are not published yet.
Result: oursongfolder.com is not infected or malware details are not published yet.