Scanned pages/files
Request | Server response | Status |
http://sixmonthsmilesvancouver.ca/ | 200 OK Content-Length: 9303 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: :| Hacked By SHOZAB HAXOR ( Pakistan) |: <html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta charset="utf-8"> <title>:| Hacked By SHOZAB HAXOR ( Pakistan) |:</title> <link href="" rel="icon" type="image/x-icon"> </script></head><body oncontextmenu="return false;" onkeydown="return false;" onmousedown="return false;" bgcolor="grey" style="background-color:#000000;background> bgcolor=" #000000"="" background="http://i928.photobucket.com/albums/ad122/jalalkanaqdesa/Animasi/storm_zps9949f9a6.gif" jhjlijpomuhn_m="1" s81636546539 ...[10618 bytes skipped]... | ||
http://manage.htmlfreecodes.com/mg.js | 500 Can't connect to manage.htmlfreecodes.com:80 Content-Length: 199 Content-Type: text/plain | clean |
http://manage.htmlfreecodes.com/test404page.js | 500 Can't connect to manage.htmlfreecodes.com:80 Content-Length: 199 Content-Type: text/plain | clean |
http://htmlfreecodes.com/codes/rain.js | 200 OK Content-Length: 7113 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sixmonthsmilesvancouver.ca
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 20 Dec 2015 18:51:36 GMT
Accept-Ranges: bytes
Server: nginx/1.8.0
Content-Length: 9303
Content-Type: text/html
Last-Modified: Sun, 30 Aug 2015 12:47:59 GMT
...9303 bytes of data.
GET / HTTP/1.1
Host: sixmonthsmilesvancouver.ca
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 20 Dec 2015 18:51:36 GMT
Accept-Ranges: bytes
Server: nginx/1.8.0
Content-Length: 9303
Content-Type: text/html
Last-Modified: Sun, 30 Aug 2015 12:47:59 GMT
...9303 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: sixmonthsmilesvancouver.ca
Referer: http://www.google.com/search?q=sixmonthsmilesvancouver.ca
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sixmonthsmilesvancouver.ca
Referer: http://www.google.com/search?q=sixmonthsmilesvancouver.ca
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sixmonthsmilesvancouver.ca
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://sixmonthsmilesvancouver.ca/
Result: sixmonthsmilesvancouver.ca is not infected or malware details are not published yet.
Result: sixmonthsmilesvancouver.ca is not infected or malware details are not published yet.