Scanned pages/files
Request | Server response | Status |
http://www.reversemortgagecalculatorscript.org/ | 200 OK Content-Length: 23698 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 0x0 src: http://picosong.com/5r3c/ <iframe width="0" height="0" src="http://picosong.com/5r3c/" frameborder="0"> Deface/Content modification. The following signature was found: Hacked By Hunter Gujjar ...[2437 bytes skipped]... ODY{SCROLLBAR-ARROW-COLOR:#ffffff;SCROLLBAR-FACE-COLOR:#000000;SCROLLBAR-DARKSHADOW-COLOR:#ffffff;SCROLLBAR-HIGHLIGHT-COLOR:#000000;SCROLLBAR-SHADOW-COLOR:#000000;SCROLLBAR-TRACK-COLOR:#000000;SCROLLBAR-3DLIGHT-COLOR:#ffffff}BODY{}.style2{text-align:center;color:#FFFFFF;}.style11{color:#FFFFFF;}.style38{font-family:Tahoma;font-size:xx-large;color:rgb(192,192,192);}</style> <meta name="keywords" content="Hacked By Hunter Gujjar "> <meta name="description" content="[#]./Hunter Gujjar | Pak Cyber Attackers "> <meta name="GENERATOR" content="MSHTML 8.00.7600.16385"> <script language="JavaScript1.2"> /***************************************** * Visit our site at http://www.pakcyberattackers.com/ for more code * This notice must stay intact for use ***********************************************/ //change 1 to another integer to alter the scroll s ...[23624 bytes skipped]... | ||
http://www.reversemortgagecalculatorscript.org/Hack%20by%20Dark%20Shadow_files/AntiCopas.txt | 404 Not Found Content-Length: 3914 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js | 200 OK Content-Length: 57254 Content-Type: text/javascript | clean |
http://www.reversemortgagecalculatorscript.org/rmc/calculator.js | 200 OK Content-Length: 97285 Content-Type: application/javascript | clean |
http://www.reversemortgagecalculatorscript.org/calculator-algorithm | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 30 Mar 2015 09:51:32 GMT Location: http://www.reversemortgagecalculatorscript.org/calculator-algorithm/ Server: Apache Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.reversemortgagecalculatorscript.org/xmlrpc.php X-Powered-By: PHP/5.3.29 | clean |
http://www.reversemortgagecalculatorscript.org/calculator-algorithm/ | 200 OK Content-Length: 5753 Content-Type: text/html | clean |
http://www.reversemortgagecalculatorscript.org/free-code | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 30 Mar 2015 09:51:33 GMT Location: http://www.reversemortgagecalculatorscript.org/free-code/ Server: Apache Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.reversemortgagecalculatorscript.org/xmlrpc.php X-Powered-By: PHP/5.3.29 | clean |
http://www.reversemortgagecalculatorscript.org/free-code/ | 200 OK Content-Length: 5765 Content-Type: text/html | clean |
http://www.reversemortgagecalculatorscript.org/reverse-mortgage-formula | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 30 Mar 2015 09:51:35 GMT Location: http://www.reversemortgagecalculatorscript.org/reverse-mortgage-formula/ Server: Apache Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.reversemortgagecalculatorscript.org/xmlrpc.php X-Powered-By: PHP/5.3.29 | clean |
http://www.reversemortgagecalculatorscript.org/reverse-mortgage-formula/ | 200 OK Content-Length: 5850 Content-Type: text/html | clean |
http://www.reversemortgagecalculatorscript.org/reverse-mortgage-calculation/ | 200 OK Content-Length: 5751 Content-Type: text/html | clean |
http://www.reversemortgagecalculatorscript.org/test404page.js | 404 Not Found Content-Length: 3914 Content-Type: text/html | clean |
http://www.reversemortgagecalculatorscript.org/Hack%20by%20Dark%20Shadow_files/y | 404 Not Found Content-Length: 3914 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: reversemortgagecalculatorscript.org
Result:
GET / HTTP/1.1
Host: reversemortgagecalculatorscript.org
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: reversemortgagecalculatorscript.org
Referer: http://www.google.com/search?q=reversemortgagecalculatorscript.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: reversemortgagecalculatorscript.org
Referer: http://www.google.com/search?q=reversemortgagecalculatorscript.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=reversemortgagecalculatorscript.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://reversemortgagecalculatorscript.org/
Result: reversemortgagecalculatorscript.org is not infected or malware details are not published yet.
Result: reversemortgagecalculatorscript.org is not infected or malware details are not published yet.