See:
ISSUE DETECTED DEFINITION INFECTED URL
Defacement MW:DEFACED:01 htxp://wazzubnotizie.com ( View Payload )
Defacement MW:DEFACED:01 htxp://wazzubnotizie.com/404testpage4525d2fdc ( View Payload )
Defacement MW:DEFACED:01 htxp://wazzubnotizie.com/404javascript.js ( View Payload )
Defacement MW:DEFACED:01 htxp://wazzubnotizie.com/404javascript.js ( View Payload )
Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html> <head> <link rel="shortcut icon" href="htxp://www.iconj.com/ico/z/p/zpsi90lfc7.ico" type="image/x-icon" /> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Hacked by AnonGhost</title> <style type="text/css"> <!-- body { background-color: #000000; margin-left: 0px; margin-top: 0px; text-align: center; background-repeat: repeat-x;} --> <!-- Made By Virusa Worm --> </style> </head> <body bgColor="#000000" onload="teclear();"oncontextmenu='return false;' onkeydown='return false;' onmousedown='return false;'> <table width="781" border="0" align="center" cellpadding="0" cellspacing="0"> <tr> <td> <img src="htxp://www11.0zz0.com/2013/11/26/11/555767151.jpg" width="780" height="355" border="0" /> </td> </tr> <tr></tr> <tr> <td> <table width="781" border="0" cellspacing="0" cellpadding="0"> <tr> <tr> <td style="font-size: 12px; color: #58FAF4; font-family: gothic; face: shadow; text-align: center;"> We are watching you </td> </tr> <tr> <td style="font-size: 19px; color: #58FAF4; font-family: gothic; face: shadow; text-align: center;"> "Don't close your eyes." </td> </tr> <td> <center> <img src="htxp://24.media.tumblr.com/tumblr_mbsnukN6GJ1ru442eo1_500.gif" name="navcomout" width="780" height="406" border="0" /> </center> </td> </tr> </table> </td> <tr> <td style="font-size: 10px; color: #FFF; font-family: Arial, Helvetica, sans-serif; text-align: center;"> </td> </tr> <td style="font-size: 9px; color: #58FAF4; font-family: Arial, Helvetica, sans-serif; text-align: center;"> Copyright 2013 <span style="color: #666"> | </span> Powered By AnonGhost </td> </tr> </table>
<embed src="htxp://youtube.googleapis.com/v/JzD4OZnG-mc&hl=en_US&loop=1&feature=related&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed> <footer id="det" style="position:fixed; left:0px; right:0px; bottom:0px; background:rgb(0,0,0); text-align:center; border-top: 1px solid #58FAF4; border-bottom: 1px solid #58FAF4"> <font color=#ff0000 size=2 face="Tahoma"> <font color="58FAF4"> <b> Official Members : </b> </font> <marquee scrollamount="5" scrolldelay="50" width="80%"> <b> Mauritania Attacker - Virusa Worm - Deto Beiber - Dr.SaM!M_008 - Extazy007 - PhObia_PhOneyz - Mr Domoz - Tak Dikenal - AnonxoxTN - Raka 3r00t - PirateX - Bl4ck Jorozz - Younes Lmaghribi - Indonesian r00t - BlackBase Hacker - CoderSec - h4shcr4ck - Mrlele - Donnazmi - TheGame Attacker - SaccaFrazi - Egy Eagle - Mr.Ajword - HusseiN98D - Pr3d4T0r - THE GREATEST - Chahid InjectOr - HoLaKo - Man Rezpector - Don Maverick RevCrew - Black Cracker - rummykhan - Root Max - VINUX - TITO_SFAXSIANO - Mr.Domoz Ps - Mauritania K!ll3r - BillGate - M-c0d3r - xIdontknow - w4s! h4x0r - Hamzah Uygun </b> </marquee> </font> </footer> </body> </html
links broken by me, pol
Quttera misses it completely: http://quttera.com/detailed_report/wazzubnotizie.com
Nothing here either: http://zulu.zscaler.com/submission/show/95f03e1f33c5a78c87f005c4d6b98542-1430668360
External link with Netcraft risk status: http://toolbar.netcraft.com/site_report?url=http://www.0zz0.com
Secure login (1)
Password will be transmited securely to https://www.0zz0.com/
Encryption (HTTPS) (1)
Communication is NOT encryptedPossible Frontend SPOF from:
pagead2.googlesyndication.com - Whitelist
(84%) -
See earlier reports on same IP - missed here: http://urlquery.net/report.php?id=1430668381979
polonus (volunteer website security analyst and website error-hunter)