Scanned pages/files
Request | Server response | Status |
http://vogati.ro/ | 200 OK Content-Length: 596 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by Said-Verde-Rosso <center><img src="http://zonehmirrors.org/defaced/2014/11/27/www.fssm.ucam.ac.ma/www9.0zz0.com/2012/03/15/19/237440624.gif" width="900" height="450"><p><br>
<style>body{overflow:hidden;background-color:black}#q{font:40px impact;color:white;position:absolute;left:0;right:0;top:43%}</style><title>Hacked by Said-Verde-Rosso </title><center><div id=q>Hacked by Said-Verde-Rosso<br>Algerian Hacker<br> <a target="_blank" href="https://www.facebook.com/said.dz.hacker"> <img border="0" src="http://www.wata.cc/up/2015/04/images/w-4b09ddaa79.png" width="46" height="51"> <p align="center"> <br> | ||
http://vogati.ro/test404page.js | 404 Not Found Content-Length: 1148 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: vogati.ro
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 25 Dec 2015 01:49:33 GMT
Accept-Ranges: bytes
ETag: "254-5650ffba-7f5597f20a24bccb"
Server: LiteSpeed
Content-Length: 596
Content-Type: text/html
Last-Modified: Sat, 21 Nov 2015 23:35:22 GMT
...596 bytes of data.
GET / HTTP/1.1
Host: vogati.ro
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 25 Dec 2015 01:49:33 GMT
Accept-Ranges: bytes
ETag: "254-5650ffba-7f5597f20a24bccb"
Server: LiteSpeed
Content-Length: 596
Content-Type: text/html
Last-Modified: Sat, 21 Nov 2015 23:35:22 GMT
...596 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: vogati.ro
Referer: http://www.google.com/search?q=vogati.ro
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: vogati.ro
Referer: http://www.google.com/search?q=vogati.ro
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=vogati.ro
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://vogati.ro/
Result: vogati.ro is not infected or malware details are not published yet.
Result: vogati.ro is not infected or malware details are not published yet.