Scanned pages/files
Request | Server response | Status |
http://tehransighe.cf/ | 200 OK Content-Length: 2707 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: hacked. Notified by darkshadow-tn,,hacked by darkshadow-tn <html> <head> <META NAME="Description" CONTENT="hacked. Notified by darkshadow-tn,,hacked by darkshadow-tn"> <META NAME="Keywords" CONTENT="darkshadow-tn,hacked,defaced,hacker,hacked by darkshadow-tn,hacking ,defaced,defacement,hacking, darkshadow-tn,defacer"> <title>Hacked By darkshadow-tn</title> <script type="text/javascript" src="" ></script></head> <body bgcolor="#fffff0"> <font color="#000000"> <center> <img src="ht ...[2748 bytes skipped]... | ||
http://www.serversfree.com/ | 200 OK Content-Length: 8761 Content-Type: text/html | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/jquery.min.js?ver=1.4.2 | 200 OK Content-Length: 72174 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/login.js?ver=4.2.2 | 200 OK Content-Length: 679 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/cufon.js?ver=4.2.2 | 200 OK Content-Length: 18258 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/Aller_400-Aller_700.font.js?ver=4.2.2 | 200 OK Content-Length: 34162 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/jquery.tipsy.js?ver=4.2.2 | 200 OK Content-Length: 4371 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/facebox.js?ver=4.2.2 | 200 OK Content-Length: 9337 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/bxslider.js?ver=4.2.2 | 200 OK Content-Length: 6040 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/custom.js?ver=4.2.2 | 200 OK Content-Length: 2361 Content-Type: text/javascript | clean |
http://www.serversfree.com/wp-content/themes/serversfree/js/scripts.js?ver=4.2.2 | 200 OK Content-Length: 2652 Content-Type: text/javascript | clean |
http://www.serversfree.com/register.html | 200 OK Content-Length: 5170 Content-Type: text/html | clean |
https://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js | 200 OK Content-Length: 91342 Content-Type: text/javascript | clean |
http://www.serversfree.com/test404page.js | 404 Not Found Content-Length: 14346 Content-Type: text/html | clean |
http://www.serversfree.com/server-features/ | 200 OK Content-Length: 35309 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tehransighe.cf
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 25 Jul 2015 01:59:09 GMT
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html
X-Powered-By: PHP/5.4.41
GET / HTTP/1.1
Host: tehransighe.cf
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 25 Jul 2015 01:59:09 GMT
Server: nginx
Vary: Accept-Encoding
Content-Type: text/html
X-Powered-By: PHP/5.4.41
Second query (visit from search engine):
GET / HTTP/1.1
Host: tehransighe.cf
Referer: http://www.google.com/search?q=tehransighe.cf
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tehransighe.cf
Referer: http://www.google.com/search?q=tehransighe.cf
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tehransighe.cf
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tehransighe.cf/
Result: tehransighe.cf is not infected or malware details are not published yet.
Result: tehransighe.cf is not infected or malware details are not published yet.