Scanned pages/files
Request | Server response | Status |
http://sunflowerspa.vn/ | 200 OK Content-Length: 32938 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by d3b~X ...[9445 bytes skipped]... .wpcf7-display-none{display:none}div.wpcf7 img.ajax-loader{border:none;vertical-align:middle;margin-left:4px}div.wpcf7 div.ajax-error{display:none}div.wpcf7 .placeheld{color:#888}</style> <link rel='stylesheet' id='rs-settings-css' href='http://sunflowerspa.vn/wp-content/plugins/revslider/rs-plugin/css/settings.css?ver=4.2.5' type='text/css' media='all'/> <style id='rs-captions-css' media='all'>Hacked by d3b~X</style> <link rel='stylesheet' id='tt-easy-google-fonts-css' href='http://fonts.googleapis.com/css?family=Noticia+Text%3Aregular&subset=latin%2Cvietnamese&ver=4.2.5' type='text/css' media='all'/> <style id='style_login_widget-css' media='all'>.error_wid_login{background-color:#ffebe8;border:1px dashed red;color:red;float:left;font-family:Verdana,Arial,Helvetica,sans-serif;font-weight:500;padding:6px;width:97%;clear:both!important} ...[26860 bytes skipped]... | ||
http://sunflowerspa.vn/wp-includes/js/jquery/jquery.js,qver=1.11.2.pagespeed.jm.0kUhGt7Mm3.js | 200 OK Content-Length: 95864 Content-Type: application/javascript | clean |
http://sunflowerspa.vn/wp-includes,_js,_jquery,_jquery-migrate.min.js,qver==1.2.1+wp-content,_themes,_spatreats,_framework,_js,_public,_jquery.smartresize.js,qver==4.2.5+wp-content,_plugins,_LayerSlider,_js,_layerslider.kreaturamedia.jquery.js,qver==4.6.0+wp-content,_plugins,_LayerSlider,_js,_jquery-easing-1.3.js,qver==1.3.0+wp-content,_plugins,_LayerSlider,_js,_jquerytransit.js,qver==0.9.9.pagespeed.jc.__H3ggfENz.js | 200 OK Content-Length: 70039 Content-Type: application/javascript | clean |
http://sunflowerspa.vn/wp-content/plugins/LayerSlider/js/layerslider.transitions.js,qver=4.6.0.pagespeed.jm.8dnlXmmpAZ.js | 200 OK Content-Length: 20819 Content-Type: application/javascript | clean |
http://sunflowerspa.vn/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=4.2.5 | 200 OK Content-Length: 83792 Content-Type: application/javascript | clean |
http://sunflowerspa.vn//assets.pinterest.com/js/pinit.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 19 Dec 2015 00:22:48 GMT Pragma: no-cache Location: http://sunflowerspa.vn/assets.pinterest.com/js/pinit.js/ Server: Apache/2 Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=9a812cld94p5fk8amgp0chik71; path=/ X-Powered-By: PHP/5.3.29 | clean |
http://sunflowerspa.vn/assets.pinterest.com/js/pinit.js/ | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
http://sunflowerspa.vn/test404page.js | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
http://sunflowerspa.vn/wp-content/themes/spatreats/framework/js/public/jquery.tipTip.minified.js | 200 OK Content-Length: 5251 Content-Type: application/javascript | clean |
http://sunflowerspa.vn/wp-content/themes/spatreats/framework/js/public/jquery.inview.js | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
http://sunflowerspa.vn/wp-content/themes,_spatreats,_framework,_js,_public,_jquery.donutchart.js+themes,_spatreats,_framework,_js,_public,_jquery.viewport.js+themes,_spatreats,_framework,_js,_public,_jquery.arctext.js+themes,_spatreats,_framework,_js,_public,_animatedcollapse.js+themes,_spatreats,_framework,_js,_public,_organictabs.jquery.js+themes,_spatreats,_framework,_js,_public,_jquery.jcarous <span>...174 symbols skipped</span> | 200 OK Content-Length: 57197 Content-Type: application/javascript | clean |
http://sunflowerspa.vn/wp-content/plugins/contact-form-7/includes/js/scripts.js,qver=4.2.2.pagespeed.jm.KFUoiSQRr9.js | 200 OK Content-Length: 9382 Content-Type: application/javascript | clean |
http://sunflowerspa.vn//sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_add-to-cart.min.js,qver==2.1.9+jquery-blockui,_jquery.blockUI.min.js,qver==2.60.pagespeed.jc.vMDNBjy2zr.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 19 Dec 2015 00:22:56 GMT Pragma: no-cache Location: http://sunflowerspa.vn/sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_add-to-cart.min.js,qver==2.1.9+jquery-blockui,_jquery.blockUI.min.js,qver==2.60.pagespeed.jc.vMDNBjy2zr.js/ Server: Apache/2 Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=17usrqqu6bgne4o1qne812b2o0; path=/ X-Powered-By: PHP/5.3.29 | clean |
http://sunflowerspa.vn/sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_add-to-cart.min.js,qver==2.1.9+jquery-blockui,_jquery.blockui.min.js,qver==2.60.pagespeed.jc.vmdnbjy2zr.js/ | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
http://sunflowerspa.vn//sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_woocommerce.min.js,qver==2.1.9+jquery-cookie,_jquery.cookie.min.js,qver==1.3.1.pagespeed.jc.0NY6v6j6qF.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 19 Dec 2015 00:22:58 GMT Pragma: no-cache Location: http://sunflowerspa.vn/sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_woocommerce.min.js,qver==2.1.9+jquery-cookie,_jquery.cookie.min.js,qver==1.3.1.pagespeed.jc.0NY6v6j6qF.js/ Server: Apache/2 Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=vmfuanecijd9s5jferf5ov1gu0; path=/ X-Powered-By: PHP/5.3.29 | clean |
http://sunflowerspa.vn/sunflowerspa.vn/wp-content/plugins/woocommerce/assets/js/frontend,_woocommerce.min.js,qver==2.1.9+jquery-cookie,_jquery.cookie.min.js,qver==1.3.1.pagespeed.jc.0ny6v6j6qf.js/ | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sunflowerspa.vn
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sat, 19 Dec 2015 00:22:38 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding,User-Agent
Content-Length: 32938
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Link: <http://sunflowerspa.vn/>; rel=shortlink
Set-Cookie: PHPSESSID=26k7ldnpq4lmcbvjevs1ajfgq0; path=/
X-Mod-Pagespeed: 1.9.32.3-4448
X-Powered-By: PHP/5.3.29
...32938 bytes of data.
GET / HTTP/1.1
Host: sunflowerspa.vn
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Cache-Control: max-age=0, no-cache
Connection: close
Date: Sat, 19 Dec 2015 00:22:38 GMT
Pragma: no-cache
Server: Apache/2
Vary: Accept-Encoding,User-Agent
Content-Length: 32938
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Link: <http://sunflowerspa.vn/>; rel=shortlink
Set-Cookie: PHPSESSID=26k7ldnpq4lmcbvjevs1ajfgq0; path=/
X-Mod-Pagespeed: 1.9.32.3-4448
X-Powered-By: PHP/5.3.29
...32938 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: sunflowerspa.vn
Referer: http://www.google.com/search?q=sunflowerspa.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sunflowerspa.vn
Referer: http://www.google.com/search?q=sunflowerspa.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sunflowerspa.vn
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://sunflowerspa.vn/
Result: sunflowerspa.vn is not infected or malware details are not published yet.
Result: sunflowerspa.vn is not infected or malware details are not published yet.