Scanned pages/files
Request | Server response | Status |
http://ultracanvas.com/ | 200 OK Content-Length: 8479 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By S0l4ris ...[10182 bytes skipped]... sp; </pre> </b> </font> <font style="font-family:Arial; color:white; font-size:49px; display:block;bold;text-shadow: 0px 0px 6px rgb(255, 255, 255), 0px 0px 5px rgb(300, 255, 255), 0px 0px 5px rgb(255, 255,255)"> Hacked By S0l4ris </font> <font style="font-family:Arial; color:white; font-size:13px; display:block;bold;text-shadow: 0px 0px 6px rgb(255, 255, 255), 0px 0px 5px rgb(300, 255, 255), 0px 0px 5px rgb(255, 255,255)"> ######- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -###### </font> </center> <div style="position:relative;left:320px;"> <font style="font-family:Arial; ...[1682 bytes skipped]... | ||
http://mihantools.net/tools/click-l/click-l.js | 200 OK Content-Length: 460 Content-Type: application/javascript | clean |
http://ultracanvas.com/test404page.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ultracanvas.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 13 Oct 2015 04:20:24 GMT
Server: Apache
Content-Type: text/html
X-Powered-By: PHP/5.4.44
GET / HTTP/1.1
Host: ultracanvas.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 13 Oct 2015 04:20:24 GMT
Server: Apache
Content-Type: text/html
X-Powered-By: PHP/5.4.44
Second query (visit from search engine):
GET / HTTP/1.1
Host: ultracanvas.com
Referer: http://www.google.com/search?q=ultracanvas.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ultracanvas.com
Referer: http://www.google.com/search?q=ultracanvas.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ultracanvas.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ultracanvas.com/
Result: ultracanvas.com is not infected or malware details are not published yet.
Result: ultracanvas.com is not infected or malware details are not published yet.