Scanned pages/files
Request | Server response | Status |
http://steampunkfetish.com/ | 200 OK Content-Length: 7270 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Aghiles Ip <html> <HEAD>
<title>Hacked By Aghiles Ip </title> <meta content='Hacked By Aghiles Ip' name='subject'/> <meta content='Hacked By Aghiles Ip' name='Abstract'/> <meta content='Hacked By Aghiles Ipr' name='description'/> <meta content='Aghiles Ip' name='copyright'/> <meta content='Aghiles Ip' name='author'/> <link rel="SHORTCUT ICON" href="http://im87.gulfup.com/HIEO9W.png" type="image/x-icon"/> ...[7940 bytes skipped]... | ||
http://steampunkfetish.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: steampunkfetish.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 28 Mar 2015 23:16:13 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: clusterBAK=R1564866025; path=/; expires=Sun, 29-Mar-2015 00:27:20 GMT
Set-Cookie: cluster=R1649411802; path=/; expires=Sun, 29-Mar-2015 00:24:07 GMT
X-Powered-By: PHP/5.4.38
GET / HTTP/1.1
Host: steampunkfetish.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 28 Mar 2015 23:16:13 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: clusterBAK=R1564866025; path=/; expires=Sun, 29-Mar-2015 00:27:20 GMT
Set-Cookie: cluster=R1649411802; path=/; expires=Sun, 29-Mar-2015 00:24:07 GMT
X-Powered-By: PHP/5.4.38
Second query (visit from search engine):
GET / HTTP/1.1
Host: steampunkfetish.com
Referer: http://www.google.com/search?q=steampunkfetish.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: steampunkfetish.com
Referer: http://www.google.com/search?q=steampunkfetish.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=steampunkfetish.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://steampunkfetish.com/
Result: steampunkfetish.com is not infected or malware details are not published yet.
Result: steampunkfetish.com is not infected or malware details are not published yet.