zone-h URL: http://www.zone-h.org/mirror/id/26318096

Capture Date:       2016-05-28 21:58:19 JST

  zone-h info:
    Mirror saved on : 2016-05-28 12:20:29
    Notified by     : AnoaGhost
    Domain          : http://www.zins.jp
    IP address      : 1.21.10.19
    System          : Linux
    Web server      : nginx

  Analyze:
    String Match:
      Header:
            2 : Hacked
            2 : Hacked by
            1 : Hacked by Indonesian
      Contents:
            4 : Hacked
            4 : Hacked by
            2 : anoaghost
            2 : Indonesian
            2 : AnoaGhost
            1 : Hacked by Indonesian
            1 : hacked
            1 : hacked by

  MD5:  ae01808eaafb4cdb0545894ff0fd6fe7
        * 26318096

  Analyze: String Match Header: 3, 5 ; String Match Contents: 8, 17 ; MD5: 1 ;

  Header:
        Server: nginx/1.10.0
        Title: Hacked by Indonesian Intellegency Security
        X-Meta-Keywords: Hacked by Shiro'Tenshi.
        X-Powered-By: PHP/5.4.23

  Contents:
        
        <!--
        Shiro'Tenshi a.k.a AnoaGhost -->
        <html><head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta charset="utf-8"><title>Hacked by Indonesian Intellegency Security</title>
        <meta http-equiv="X-UA-Compatible" content="IE=edge">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
        <meta name="Keywords" content="Hacked by Shiro'Tenshi.">
        <meta name="description" content="Greeting's World Intelsect Now Here.">
        <meta name="author" content="Shiro'Tenshi.">
        <body oncontextmenu="return false" onmousedown="return false">
        <link href='http://fonts.googleapis.com/css?family=Agency+FB' rel='stylesheet' type='text/css'>
        <style type="text/css">
        @import url(http://fonts.googleapis.com/css?family=Quicksand);
        @import url(http://fonts.googleapis.com/css?family=Josefin Sans);
        @import url(http://fonts.googleapis.com/css?family=Agency FB);
        			body {
        				background:url('https://jindalelec.co.ke/mirai_nikki_desmotivaciones_by_justass-d6jcuo1.jpg') repeat;
        				background-color: black;
        				background-size: 100%;
        				background-repeat:no-repeat;
        				background-attachment: fixed;
        				background-size: cover;
        				background-position:center;
        				margin: 0px;
        				font-family: Quicksand;
        				font-weight: bold;
        				}
        			img  {
        				opacity:0.800; filter:alpha(opacity=500);
        				}
        				
        				span:{font-family:Agency FB;}
        			font:hover {
        						text-decoration:none;
        						font-family:Agency FB;
        						color:none;
        						}
        
        				
        				<!-- Designed by Shiro'Tenshi -->
        	
        		</style>
        		<script>alert("Hacked by Shiro'Tenshi a.k.a AnoaGhost")</script>
        <center><h1>
        <div style="color:#FF0000;font:30pt Agency FB;text-shadow: 0 0 6px black, 0 0 5px black, 0 0 5px black;"><b></div></b>
        <div style="color:white;font:9pt Agency FB;"></font></div></b>
        <div style="color:red;font:25pt Agency FB;"><b><font face="Agency FB" size="7" color="#FF0000" style="text-shadow: 0 0 6px black, 0 0 5px black, 0 0 5px black;">
        Hacked by <font face="Agency FB" color="white" style="text-shadow: 0 0 6px #FF0000, 0 0 5px #FF0000, 0 0 5px #FF0000;"><b>Indonesian Intellegency Security</font></font></b><br></pre>
        <img border="0" src="https://jindalelec.co.ke/jmbt.png" width="20%"><br>
        <center><span style="color:white;font-size:18px;font-family:Agency FB;">
        <br>Greeting's World, 
        <br>We are Indonesian Intellegency Security
        <br>We are generation of Revolution Freedom !
        <br>Because we are voice of the people want a revolution !
        <br>And our main target is Education, administration, and famous site. if you are asking why your website got hacked by us,
        <br>This is basically because we want to share our message and show the world who we are ?
        <br>We are not looking for fame but we have a goal to achieve
        <br>Our goal is to tell the world that the current revolution is already weak.
        <br>So we will give this message to all governments and society
        <br>#SaveRevolution , Expect us !<br></pre>
        We Are Intelsect, We Love Peace But If You Provoke US BE 
        Ready To Our Reaction <br></span><br>
        <audio controls loop="true" autoplay="true" hidden="true">
          <source src="https://jindalelec.co.ke/anthems_msi2016_.mp3" type="audio/mpeg">
          </audio>
        
        <font size="4" color="#ff0000"><b>Contact me :</b><br>
        </font>
        <font color="black" size="4" face="Agency FB" style="text-shadow: 0 0 6px #FF0000, 0 0 5px #FF0000, 0 0 5px #FF0000;"><a href="mailto:anoaghost@gmail.com" style="color:black;">anoaghost@gmail.com</a> </FONT></footer>
        </body>
        <script type='text/javascript'>
        //<![CDATA[
        shortcut={all_shortcuts:{},add:function(a,b,c){var d={type:"keydown",propagate:!1,disable_in_input:!1,target:document,keycode:!1};if(c)for(var e in d)"undefined"==typeof c[e]&&(c[e]=d[e]);else c=d;d=c.target,"string"==typeof c.target&&(d=document.getElementById(c.target)),a=a.toLowerCase(),e=function(d){d=d||window.event;if(c.disable_in_input){var e;d.target?e=d.target:d.srcElement&&(e=d.srcElement),3==e.nodeType&&(e=e.parentNode);if("INPUT"==e.tagName||"TEXTAREA"==e.tagName)return}d.keyCode?code=d.keyCode:d.which&&(code=d.which),e=String.fromCharCode(code).toLowerCase(),188==code&&(e=","),190==code&&(e=".");var f=a.split("+"),g=0,h={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+",";":":","'":'"',",":"<",".":">","/":"?","\\":"|"},i={esc:27,escape:27,tab:9,space:32,"return":13,enter:13,backspace:8,scrolllock:145,scroll_lock:145,scroll:145,capslock:20,caps_lock:20,caps:20,numlock:144,num_lock:144,num:144,pause:19,"break":19,insert:45,home:36,"delete":46,end:35,pageup:33,page_up:33,pu:33,pagedown:34,page_down:34,pd:34,left:37,up:38,right:39,down:40,f1:112,f2:113,f3:114,f4:115,f5:116,f6:117,f7:118,f8:119,f9:120,f10:121,f11:122,f12:123},j=!1,l=!1,m=!1,n=!1,o=!1,p=!1,q=!1,r=!1;d.ctrlKey&&(n=!0),d.shiftKey&&(l=!0),d.altKey&&(p=!0),d.metaKey&&(r=!0);for(var s=0;k=f[s],s<f.length;s++)"ctrl"==k||"control"==k?(g++,m=!0):"shift"==k?(g++,j=!0):"alt"==k?(g++,o=!0):"meta"==k?(g++,q=!0):1<k.length?i[k]==code&&g++:c.keycode?c.keycode==code&&g++:e==k?g++:h[e]&&d.shiftKey&&(e=h[e],e==k&&g++);if(g==f.length&&n==m&&l==j&&p==o&&r==q&&(b(d),!c.propagate))return d.cancelBubble=!0,d.returnValue=!1,d.stopPropagation&&(d.stopPropagation(),d.preventDefault()),!1},this.all_shortcuts[a]={callback:e,target:d,event:c.type},d.addEventListener?d.addEventListener(c.type,e,!1):d.attachEvent?d.attachEvent("on"+c.type,e):d["on"+c.type]=e},remove:function(a){var a=a.toLowerCase(),b=this.all_shortcuts[a];delete this.all_shortcuts[a];if(b){var a=b.event,c=b.target,b=b.callback;c.detachEvent?c.detachEvent("on"+a,b):c.removeEventListener?c.removeEventListener(a,b,!1):c["on"+a]=!1}}},shortcut.add("Ctrl+U",function(){top.location.href=""});
        //]]>
        </script>