Scanned pages/files
Request | Server response | Status |
http://verhuurbedrijf.nl/ | 200 OK Content-Length: 10053 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: HACKED BY SyR!4N M43STR0 <html><head>
<title>HACKED BY SyR!4N M43STR0</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="description" content="HACKED BY SyR!4N M43STR0"> <meta name="keywords" content="HACKED,BY,SyR!4N,M43STR0,hacker,new,sirya,army,elctronic,news,done,israel,usa,egypt,palstin,iraq,sudan,libya,uk,video,php,toutrial"> <style type="text/css"> .page{ background: # ...[10593 bytes skipped]... | ||
http://apienterdigitali-a.akamaihd.net/gsrs?is=isgiwhSY&bp=PB3&g=d02d032a-cbc7-4d21-a134-44deeaf7d767 | 200 OK Content-Length: 11214 Content-Type: application/javascript | clean |
http://jj.revolvermaps.com/2/1.js?i=9zhsj7n7be6&s=220&m=0&v=false&r=false&b=444444&n=false&c=444444 | 200 OK Content-Length: 2146 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/?msg | 200 OK Content-Length: 10053 Content-Type: text/html | clean |
http://verhuurbedrijf.nl/?img | 200 OK Content-Length: 10053 Content-Type: text/html | clean |
http://verhuurbedrijf.nl/?vid | 200 OK Content-Length: 10053 Content-Type: text/html | clean |
http://verhuurbedrijf.nl/?abt | 200 OK Content-Length: 10053 Content-Type: text/html | clean |
http://verhuurbedrijf.nl/</a> from Syria , we are not a governmental organization nor follow political institution . we are youth live in Syria , we were forced to break in and hack your site as other many websites to deliver to you a message from the Syrian Arab people : to tell the truth that occur in our country Syria and that your governments hide from you with the help of false hypocrite <span>...99 symbols skipped</span> | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 16 Jun 2015 16:30:53 GMT Location: http://verhuurbedrijf.nl/%3C/a%3E%20from%20Syria%20,%20we%20are%20not%20a%20governmental%20organization%20nor%20follow%20political%20institution%20.%20we%20are%20youth%20%20live%20in%20%20Syria%20,%20we%20were%20forced%20to%20break%20in%20and%20%20hack%20your%20site%20as%20other%20many%20websites%20%20to%20deliver%20to%20you%20a%20message%20from%20the%20Syrian%20Arab%20people%20:%20to%20tell%20the%20truth%20that%20occur%20in%20our%20country%20Syria%20and%20that%20your%20governments%20hide%20from%20you%20with%20the%20help%20of%20false%20hypocrite%20media%20as%20Al-Jazeera%20and%20Al-Arabiya%20tv%20channel%20and%20the%20BBC%20...%20in%20fact%20in%20Syria%20there%20is%20%20not%20people/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Set-Cookie: wfvt_4229403209=55804f3e4b3fd; expires=Tue, 16-Jun-2015 17:00:54 GMT; path=/; httponly X-Pingback: http://verhuurbedrijf.nl/xmlrpc.php X-Powered-By: PHP/5.4.34 | clean |
http://verhuurbedrijf.nl/%3c/a%3e%20from%20syria%20,%20we%20are%20not%20a%20governmental%20organization%20nor%20follow%20political%20institution%20.%20we%20are%20youth%20%20live%20in%20%20syria%20,%20we%20were%20forced%20to%20break%20in%20and%20%20hack%20your%20site%20as%20other%20many%20websites%20%20to%20deliver%20to%20you%20a%20message%20from%20the%20syrian%20arab%20people%20:%20to%20tell%20the <span>...292 symbols skipped</span> | 200 OK Content-Length: 23430 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js | 200 OK Content-Length: 95786 Content-Type: text/javascript | clean |
http://verhuurbedrijf.nl/wp-content/themes/bakkerverhuur/js/pace.js | 200 OK Content-Length: 12284 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ajax.js?ver=4.1.5 | 200 OK Content-Length: 33 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 95807 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/persist.js?ver=4.1.5 | 200 OK Content-Length: 24995 Content-Type: application/javascript | clean |
http://verhuurbedrijf.nl/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/store.js?ver=4.1.5 | 200 OK Content-Length: 5337 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: verhuurbedrijf.nl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Jun 2015 16:30:52 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 10053
Content-Type: text/html
Last-Modified: Wed, 03 Jun 2015 17:41:23 GMT
...10053 bytes of data.
GET / HTTP/1.1
Host: verhuurbedrijf.nl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Jun 2015 16:30:52 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 10053
Content-Type: text/html
Last-Modified: Wed, 03 Jun 2015 17:41:23 GMT
...10053 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: verhuurbedrijf.nl
Referer: http://www.google.com/search?q=verhuurbedrijf.nl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: verhuurbedrijf.nl
Referer: http://www.google.com/search?q=verhuurbedrijf.nl
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=verhuurbedrijf.nl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://verhuurbedrijf.nl/
Result: verhuurbedrijf.nl is not infected or malware details are not published yet.
Result: verhuurbedrijf.nl is not infected or malware details are not published yet.