Scanned pages/files
Request | Server response | Status |
http://torchablaze.com/ | 200 OK Content-Length: 5440 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: +ADw-/title+AD4-Hacked By Badi+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4- <!DOCTYPE html> <html dir="ltr" lang="en-US"> <head> <meta charset="UTF-7" /> <title>+ADw-/title+AD4-Hacked By Badi+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4-</title> <link rel="profile" href="http://gmpg.org/xfn/11" /> <link rel="stylesheet" type="text/css" media="all" href="http://torchablaze.com/wp-content/themes/twentyten/style.css" /> <link rel="pingback" href="http://torchablaze.com/xmlrpc.php" /> <link rel="alternate" type="application/rss+xml" title="+ADw-/title+AD4-Hacked By Badi+ADw-DIV style+AD0AIg-D ...[6149 bytes skipped]... | ||
http://torchablaze.com/?page_id=2 | 200 OK Content-Length: 7869 Content-Type: text/html | clean |
http://torchablaze.com/wp-includes/js/l10n.js?ver=20101110 | 200 OK Content-Length: 308 Content-Type: application/x-javascript | clean |
http://torchablaze.com/wp-includes/js/comment-reply.js?ver=20090102 | 200 OK Content-Length: 786 Content-Type: application/x-javascript | clean |
http://torchablaze.com/wp-admin/ | HTTP/1.1 302 Found Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Fri, 18 Apr 2014 10:14:11 GMT Pragma: no-cache Location: http://torchablaze.com/wp-login.php?redirect_to=http%3A%2F%2Ftorchablaze.com%2Fwp-admin%2F&reauth=1 Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Fri, 18 Apr 2014 10:14:11 GMT X-Powered-By: PHP/5.2.17 | clean |
http://torchablaze.com/wp-login.php?redirect_to=http%3a%2f%2ftorchablaze.com%2fwp-admin%2f&reauth=1 | 200 OK Content-Length: 2337 Content-Type: text/html | clean |
http://torchablaze.com/wp-login.php?action=lostpassword | 200 OK Content-Length: 1981 Content-Type: text/html | clean |
http://torchablaze.com/wp-login.php | 200 OK Content-Length: 2337 Content-Type: text/html | clean |
http://torchablaze.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://torchablaze.com/?m=201106 | 200 OK Content-Length: 5510 Content-Type: text/html | clean |
http://torchablaze.com/?p=1 | 200 OK Content-Length: 9260 Content-Type: text/html | clean |
http://torchablaze.com/?author=1 | 200 OK Content-Length: 5823 Content-Type: text/html | clean |
http://torchablaze.com/?category_name=uncategorized | 200 OK Content-Length: 5781 Content-Type: text/html | clean |
http://torchablaze.com/?p=1&replytocom=1 | 200 OK Content-Length: 9279 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: torchablaze.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Apr 2014 10:14:09 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-7
X-Pingback: http://torchablaze.com/xmlrpc.php
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: torchablaze.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Apr 2014 10:14:09 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-7
X-Pingback: http://torchablaze.com/xmlrpc.php
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: torchablaze.com
Referer: http://www.google.com/search?q=torchablaze.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: torchablaze.com
Referer: http://www.google.com/search?q=torchablaze.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=torchablaze.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://torchablaze.com/
Result: torchablaze.com is not infected or malware details are not published yet.
Result: torchablaze.com is not infected or malware details are not published yet.