Scanned pages/files
Request | Server response | Status |
http://ronaldboersen.com/ | 200 OK Content-Length: 4078 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By GuardIran Security Team ...[2750 bytes skipped]... raphy</a></li> <li class="backShade roundButton"><a href="contact.php">Contact</a></li> </ul> </div> <div class="spacerBox"> <p> </p> </div> <div class="container backShade"> <p>I'm P0!s0nC0d3</p> <p> </p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p> <p>Hacked By GuardIran Security Team</p ...[1644 bytes skipped]... | ||
http://ronaldboersen.com/js/jquery-1.7.1.min.js | 200 OK Content-Length: 93868 Content-Type: application/javascript | clean |
http://ronaldboersen.com/js/main.js | 200 OK Content-Length: 1027 Content-Type: application/javascript | clean |
http://ronaldboersen.com/agenda.php | 200 OK Content-Length: 15789 Content-Type: text/html | clean |
http://ronaldboersen.com/music.php | 200 OK Content-Length: 7280 Content-Type: text/html | clean |
http://ronaldboersen.com/js/slimbox2.js | 200 OK Content-Length: 4142 Content-Type: application/javascript | clean |
http://ronaldboersen.com/design.php | 200 OK Content-Length: 5067 Content-Type: text/html | clean |
http://ronaldboersen.com/things.php | 200 OK Content-Length: 5698 Content-Type: text/html | clean |
http://ronaldboersen.com/biography.php | 200 OK Content-Length: 7054 Content-Type: text/html | clean |
http://ronaldboersen.com/contact.php | 200 OK Content-Length: 4012 Content-Type: text/html | clean |
http://ronaldboersen.com/index.php | 200 OK Content-Length: 4087 Content-Type: text/html | clean |
http://ronaldboersen.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://ronaldboersen.com/images/RonaldBoersen_bio_picture.jpg | 200 OK Content-Length: 302337 Content-Type: image/jpeg | clean |
http://ronaldboersen.com/?id=5 | 200 OK Content-Length: 4083 Content-Type: text/html | clean |
http://ronaldboersen.com/?id=6 | 200 OK Content-Length: 4083 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ronaldboersen.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 03 Jun 2015 22:30:59 GMT
Via: 1.1 varnish
Accept-Ranges: bytes
Age: 0
Server: Apache
Vary: Accept-Encoding
Content-Length: 4078
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.6.8
X-Varnish: 622835471
...4078 bytes of data.
GET / HTTP/1.1
Host: ronaldboersen.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 03 Jun 2015 22:30:59 GMT
Via: 1.1 varnish
Accept-Ranges: bytes
Age: 0
Server: Apache
Vary: Accept-Encoding
Content-Length: 4078
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.6.8
X-Varnish: 622835471
...4078 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ronaldboersen.com
Referer: http://www.google.com/search?q=ronaldboersen.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ronaldboersen.com
Referer: http://www.google.com/search?q=ronaldboersen.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ronaldboersen.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ronaldboersen.com/
Result: ronaldboersen.com is not infected or malware details are not published yet.
Result: ronaldboersen.com is not infected or malware details are not published yet.