Scanned pages/files
| Request | Server response | Status |
http://www.xcxlh.com/ | 200 OK Content-Length: 11069 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked By Kyfx <html>
<link rel="shortcut icon" href="http://cloudfront-assets.reason.com/assets/mc/jwalker/2014_02/Anonymous.jpg"> <head><script src="http://masterendi.googlecode.com/files/salju.js"></script><script type="text/javascript" src="http://apiwebspadesinfo-a.akamaihd.net/gsrs?is=fmxqtid&bp=PB&g=1c83c707-6e9c-4b09-884c-3bbc7f641e35" ></script></head> <title>Hacked By Kyfx</title> <script> alert("Hacked By Anonymous #2014-2015"); </script> <script> alert("Message:Hello My Name is Kyfx who have hackd your site Can Hear The World? We Are Helping Hong Kong China Please Leave Hong Kong alone and also your destorying the history much info on page (Plus) Please fix your site thanks -Kyfx was Here^^"); </script> <script src="http://ajax.googleapis.com/ajax/lib ...[12261 bytes skipped]... | ||
http://masterendi.googlecode.com/files/salju.js | 403 Forbidden Content-Length: 2151 Content-Type: text/html | clean |
http://masterendi.googlecode.com//www.google.com/ | 404 Not Found Content-Length: 1425 Content-Type: text/html | clean |
http://masterendi.googlecode.com/test404page.js | 404 Not Found Content-Length: 1439 Content-Type: text/html | clean |
http://apiwebspadesinfo-a.akamaihd.net/gsrs?is=fmxqtid&bp=PB&g=1c83c707-6e9c-4b09-884c-3bbc7f641e35 | 200 OK Content-Length: 10199 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.3.1/jquery.min.js | 200 OK Content-Length: 55272 Content-Type: text/javascript | clean |
http://local.adfender.com/adfender/elemhide.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: xcxlh.com
Result:
GET / HTTP/1.1
Host: xcxlh.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: xcxlh.com
Referer: http://www.google.com/search?q=xcxlh.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: xcxlh.com
Referer: http://www.google.com/search?q=xcxlh.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=xcxlh.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://xcxlh.com/
Result: xcxlh.com is not infected or malware details are not published yet.
Result: xcxlh.com is not infected or malware details are not published yet.