Scanned pages/files
Request | Server response | Status |
http://sibaconstruction.com/ | 200 OK Content-Length: 2354 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HaCkEd By Naruto Hacker ...[1181 bytes skipped]... r: #FF0000; font-weight: bold; } .Style5 { color: #66CCCC; font-weight: bold; } .Style6 {color: #66FFFF} .Style7 { color: #00CCFF; font-weight: bold; } .Style8 {color: #00FFFF} .Style9 {color: #33FFFF} --> </style></head> <body> <div align="center" class="Style1"> <h1 class="Style5">HaCkEd By Naruto Hacker</h1> <p><img src="http://4.bp.blogspot.com/-GAJbptNvEIA/TkEXFigiIqI/AAAAAAAAAG8/jJL8Y-25uXI/s1600/550px-Coat_of_arms_of_Morocco.svg_-796423.png" /></p> <p align="center" class="Style7">Allah * Alwatan * Almalik</p> <p align="center" class="Style4">./ Moroccan HaCkeR ./ </p> <p align="center" class="Style3">Server Bypassed Successfully..</p> <p align="center" class="St ...[789 bytes skipped]... | ||
http://sibaconstruction.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sibaconstruction.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 13 Jul 2015 03:15:05 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 2354
Content-Type: text/html
Last-Modified: Sun, 09 Jun 2013 17:58:13 GMT
...2354 bytes of data.
GET / HTTP/1.1
Host: sibaconstruction.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 13 Jul 2015 03:15:05 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 2354
Content-Type: text/html
Last-Modified: Sun, 09 Jun 2013 17:58:13 GMT
...2354 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: sibaconstruction.com
Referer: http://www.google.com/search?q=sibaconstruction.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sibaconstruction.com
Referer: http://www.google.com/search?q=sibaconstruction.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sibaconstruction.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://sibaconstruction.com/
Result: sibaconstruction.com is not infected or malware details are not published yet.
Result: sibaconstruction.com is not infected or malware details are not published yet.