Scanned pages/files
Request | Server response | Status |
http://pheuthai.net/ | 200 OK Content-Length: 6012 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: ++HaCkEd By x3o-1337++ <HTML><TITLE>++HaCkEd By x3o-1337++</TITLE>
<STYLE type=text/css> BODY { SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; SCROLLBAR-BASE-COLOR: #000000; background-image: url(http://pedalares.com/wp-content/plugins/wordpress-thread-comment/blue-matrix-background-587.jpg); } </STYLE> <META http-equiv=Cont ...[7498 bytes skipped]... | ||
http://pheuthai.net/test404page.js | 404 Not Found Content-Length: 370 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: pheuthai.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 28 Apr 2014 05:50:04 GMT
Server: Apache
Content-Type: text/html
X-Powered-By: PHP/4.4.4
GET / HTTP/1.1
Host: pheuthai.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 28 Apr 2014 05:50:04 GMT
Server: Apache
Content-Type: text/html
X-Powered-By: PHP/4.4.4
Second query (visit from search engine):
GET / HTTP/1.1
Host: pheuthai.net
Referer: http://www.google.com/search?q=pheuthai.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: pheuthai.net
Referer: http://www.google.com/search?q=pheuthai.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=pheuthai.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://pheuthai.net/
Result: pheuthai.net is not infected or malware details are not published yet.
Result: pheuthai.net is not infected or malware details are not published yet.