Scanned pages/files
Request | Server response | Status |
http://pynthan.net/ | 200 OK Content-Length: 4136 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Totaled_Crixu <html xmlns="http://www.w3.org/1999/xhtml">
<!-- www.cyberizm.org --> <head><meta http-equiv="content-type" content="text/html; charset=UTF-8"> <title>Hacked By Totaled_Crixu</title> <script type="text/javascript"> <!-- document.write(unescape('%3c%6d%65%74%61%20%6e%61%6d%65%3d%22%6b%65%79%77%6f%72%64%73%22%20%63%6f%6e%74%65%6e%74%3d%22%77%77%77%2e%63%79%62%65%72%69%7a%6d%2e%6f%72%67%2c%20%63%79%62%65%72%69%7a%6d%2e%6f%72%67%2c%20%43%59%42%65%52%69%5a%4d%22%20%2f%3e%0d%0a%3c%6d%65%74%61%20%6e%61%6d%65%3d%22%64%65%73%63%72%69%70%74%69%6f%6e%22%20%63%6f%6e%74%65%6e%74%3d ...[4010 bytes skipped]... | ||
http://pynthan.net/test404page.js | 200 OK Content-Length: 4136 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: pynthan.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 12 Dec 2015 04:45:30 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 4136
Content-Type: text/html
...4136 bytes of data.
GET / HTTP/1.1
Host: pynthan.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 12 Dec 2015 04:45:30 GMT
Server: Apache
Vary: Accept-Encoding
Content-Length: 4136
Content-Type: text/html
...4136 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: pynthan.net
Referer: http://www.google.com/search?q=pynthan.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: pynthan.net
Referer: http://www.google.com/search?q=pynthan.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=pynthan.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://pynthan.net/
Result: pynthan.net is not infected or malware details are not published yet.
Result: pynthan.net is not infected or malware details are not published yet.