Scanned pages/files
Request | Server response | Status |
http://pdf-plus.de/ | 200 OK Content-Length: 10426 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By SOli_Pro <html> <head> <title>Hacked By SOli_Pro</title> <link rel="SHORTCUT ICON" href="http://www.foxpic.com/V04Y86ae.png" type="image/png"> <meta charset="UTF-8"> <meta name="Author" content="Latino Saber & rami padzoo"/> <meta name="copyright" content="Latino Saber & rami padzoo"/> <meta name="description" content="Website Hacked by Latino Saber & rami padzoo."/> <link href='http://fonts. ...[12464 bytes skipped]... | ||
http://code.jquery.com/jquery.min.js | 200 OK Content-Length: 95821 Content-Type: application/javascript | clean |
http://pdf-plus.de/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: pdf-plus.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 03 Jun 2015 03:12:56 GMT
Server: Apache/2.2.29 (Unix)
Content-Type: text/html
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: pdf-plus.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 03 Jun 2015 03:12:56 GMT
Server: Apache/2.2.29 (Unix)
Content-Type: text/html
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: pdf-plus.de
Referer: http://www.google.com/search?q=pdf-plus.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: pdf-plus.de
Referer: http://www.google.com/search?q=pdf-plus.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=pdf-plus.de
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://pdf-plus.de/
Result: pdf-plus.de is not infected or malware details are not published yet.
Result: pdf-plus.de is not infected or malware details are not published yet.