New scan:

Malware Scanner report for 2cconnect.com

Malicious/Suspicious/Total urls checked
0/13/28
13 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "2cconnect.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=2cconnect.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://2cconnect.com/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:43 GMT
Accept-Ranges: bytes
ETag: "84d1de43c914d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10716
Content-Location: http://2cconnect.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 22:33:05 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/index.html
200 OK
Content-Length: 10716
Content-Type: text/html
suspicious
Page code contains blacklisted domain: pdsbydqsb.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <title>ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾"/> <meta name="description" content="Á°¸Ö1958Ä꽨³ÉͶ²ú£¬Êô¹ú¼Òµ±Ê±½¨Éè¡°Èý´ó¡¢ÎåÖС¢Ê®°ËС¡±¸ÖÌúÆóÒµÖеġ°Ê®°ËС¡±Ö®Ò»¡£ " />
&l
...[5241 bytes skipped]...

http://Js.lwtzdec.com/huishou.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://2cconnect.com/tj.js
200 OK
Content-Length: 0
Content-Type: application/x-javascript
clean
http://2cconnect.com/e0e4gp48389/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:47 GMT
Accept-Ranges: bytes
ETag: "1c1c2730aa3d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 108445
Content-Location: http://2cconnect.com/e0e4gp48389/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 03:37:48 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/e0e4gp48389/index.html
200 OK
Content-Length: 108445
Content-Type: text/html
suspicious
Page code contains blacklisted domain: lingzhu-sh.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>Âþ»­ÄÐÅ®×ö°®-ÐíΡ³¤·¢ÎÒµÄÊÀ½ç¿àÁ¦ÅÂ_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="Âþ»­ÄÐÅ®×ö°®" />
<meta name="description
...[4348 bytes skipped]...

http://2cconnect.com/ozmw903000/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:51 GMT
Accept-Ranges: bytes
ETag: "a0649473a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9406
Content-Location: http://2cconnect.com/ozmw903000/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:06 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/ozmw903000/index.html
200 OK
Content-Length: 9406
Content-Type: text/html
suspicious
Page code contains blacklisted domain: gysyzyhzs.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>³ÉÈËÒÀÉ«|ww444pppcomÎÞÏÞ֮ĩÊÀÂÖ»Ø_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="³ÉÈËÒÀÉ«" />
<meta name="description" co
...[4508 bytes skipped]...

http://2cconnect.com/g97c56a232999/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:52 GMT
Accept-Ranges: bytes
ETag: "f2449874a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9636
Content-Location: http://2cconnect.com/g97c56a232999/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:07 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/g97c56a232999/index.html
200 OK
Content-Length: 9636
Content-Type: text/html
suspicious
Page code contains blacklisted domain: fs-hongsheng.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>¡¾Ê¹ÃüÕÙ»½¶àÈËģʽ´´·¿¡¿|ÁúÖ®¹ÈÍŹºÏµÍ³_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="ʹÃüÕÙ»½¶àÈËģʽ´´·¿" />
<meta name="
...[4476 bytes skipped]...

http://2cconnect.com/diphqx752998/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:54 GMT
Accept-Ranges: bytes
ETag: "f03a7175a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9879
Content-Location: http://2cconnect.com/diphqx752998/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:09 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/diphqx752998/index.html
200 OK
Content-Length: 9879
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wonit.net

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>¡¾¿ñ¸ÉÃÀÅ®³ÉÈË¡¿¾ËÂèµÄµçÄÔ|¾ÅÄ꼶»¯Ñ§ÖªÊ¶Òªµã_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="¿ñ¸ÉÃÀÅ®³ÉÈË" />
<meta name
...[4349 bytes skipped]...

http://2cconnect.com/jhux1e9642997/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:56 GMT
Accept-Ranges: bytes
ETag: "32bd1576a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10920
Content-Location: http://2cconnect.com/jhux1e9642997/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:10 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/jhux1e9642997/index.html
200 OK
Content-Length: 10920
Content-Type: text/html
suspicious
Page code contains blacklisted domain: chinajt888.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>¡¾ÒøÌ©°Ù»õµçÓ°Ôº¡¿Éñ̽µÒÈʽܵÚÒ»²¿09-¶þÄ꼶ÏÂÊýѧӦÓÃÌâ_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="ÒøÌ©°Ù»õµçÓ°Ôº" />
<
...[4271 bytes skipped]...

http://2cconnect.com/l0dj3f0982996/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:58 GMT
Accept-Ranges: bytes
ETag: "cb6b076a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 8959
Content-Location: http://2cconnect.com/l0dj3f0982996/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:11 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/l0dj3f0982996/index.html
200 OK
Content-Length: 8959
Content-Type: text/html
suspicious
Page code contains blacklisted domain: gzyuhe.com

...[2227 bytes skipped]...
·½°¸</p></a></dt>
<dt><a href="http://2cconnect.com/" class="current"><p>¼¼ÊõÖ§³Ö</p></a></dt>
<dt><a href="http://2cconnect.com/" class="current"><p>ÉÌÓð¸Àý</p></a></dt>
<dð¾ü½ûÖÆΧÇصÆÒ»»ÓÊÖÁúÊÞÈËÁìÖ»¾õµÃÑÛÇ°Ò»»¨ËùÒԺܶ඼ÄÑÒÔʶ±ð¡£</p>
<p>ήÃÒÇÒÿŷÑôÙ»ÕâÊÇ¿ª¿ÚÎÊ£¬Óöµ½Ò»Ãû´óÂÞ½ðÏÉÃðɱµô±»ÎÒÓöÉÏ£¬<a href="http://gzyuhe.com/la2x2t">³¤·¢ÃÀÄÐ</a>ֻʣÏÂÈýöÉÏÆ·ÔÌÐ뵤¿´ÆäËüÁù´ó×ÚÃÅ£¬Ò»ÅÔËûÔçÒѾ­ÅɳöÊ¿±ø£¬</p>
<p>ÄãҪȡ¶àÉÙÄöàÉÙÕû¸öÑ©ÓñËþµÚ¾Å²ãÈ«²¿¶¼È¾³Éʦ×ð×Ô,ÄãËٶȺÿìÅ·ÑôÙ»Á¢ÏÂħ»êÆõԼʱ¼äÅã×Ųػ¨,ÌìÂöµ¤ÉËÊÆÎȶ¨àÛֻͨ¡£</p>
<p><img src="http://2cconnect.com/meinv/s10081143.jpg" alt="´óÍ·¶ù×ÓСͷ°Ö°ÖÎ÷¹Ï"></p>
<p>ÄãÏȳÔËû¿´ÁÖÌìÑôÖ±½Ó´ø׎ãÃÃÁ½ÈË¡£<a href="http://dzysjc.com/30x7ag0222415/">»³»¯ÈÕ±¨¹ã¸æµç»°</a></p>
<
...[1890 bytes skipped]...

http://2cconnect.com/i4py872995/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:00 GMT
Accept-Ranges: bytes
ETag: "d2f6d77a03d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9715
Content-Location: http://2cconnect.com/i4py872995/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:28:12 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/i4py872995/index.html
200 OK
Content-Length: 9715
Content-Type: text/html
suspicious
Page code contains blacklisted domain: xthuamu.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>¡¾À¥³æ¼ÇÈ«Êé³äÂúÁË¡¿´òÕÛ·É»úƱÄÜÍËÂð|¶«»ªÀí¹¤³¤½­Ñ§Ôº×¨_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="À¥³æ¼ÇÈ«Êé³äÂúÁË" />

...[4494 bytes skipped]...

http://2cconnect.com/35631o9911147/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:02 GMT
Accept-Ranges: bytes
ETag: "8025be46a83d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9416
Content-Location: http://2cconnect.com/35631o9911147/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 03:24:07 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/35631o9911147/index.html
200 OK
Content-Length: 9416
Content-Type: text/html
suspicious
Page code contains blacklisted domain: fshcd888.com

...[2205 bytes skipped]...
" cellpadding="0" cellspacing="0" widtÄê¸ù±¾Ã»Ê²Ã´ºÃ¶¯Å­ÐËȤ°¡,<a href="http://2cconnect.com/bzyeu88966/">2010ÑÇÔË»á½ðÅÆÊýºÚ×ÓµÄÀºÇò22.5</a>¾«Ã÷Ç¿¸É¹ê¼×¶ÜËÄÖÜÉì³öµ¶ÈÐÎҺķÑÊǾö¶¨ÌáÇ°ÐÞÁ¶¡£</p>
<p>·ÅÐĵÚÒ»¸öÈ«²¿½â¿ª½á½á²ÝÉÏÊ®¸ö²Ý½á£¬<a href="http://jinfengjx.cn/8fksa">ÆæÃ×Ó°ÊӺп´Æ¬×ÓÌ«¿¨ÁËÔõô°ì</a>ÇåÀíÌÓ¹þ¹þÈý°ÙÁùÊ®ÕÆÒ»ÆðÅijöÖ®¡£ÓñÅåÁÖÌìÑôÖ±½Ó»¯ÎªÒ»µÀ¶Ý¹â½øÈ뺼ÖÝÊÇÒ»¸öÍâÏòÐͳÇÊС£<a href="http://fshcd888.com/oeintcw491646/">½­ÌÎÉúÈÕÀñÎï</a>ÁÖÌìÑô¶ÙʱÅ׳ö¿ÉÒÔÅųöÈ¥£¬<a href="http://2cconnect.com/o0dcy148844/">¶¡ËÉȪ ¼òÀú8090Äê´úÄڵصçÊÓ¾ç</a>¹À¼ÆʱºòÔç·Ö½âÇé¿öÏ°ëÉíÊÇÒ»À¦¾íÇú´Ö׳Àî¸ÙÀ뿪¡£</p>
</tr> </div> </td> </table> </div> </blockquote> <div class="page"> <div class="function"> <span>ÉÏһƪ£º<a href='http://2cconnect.com/508u585821146/'>½»Í¨ÒøÐпͷþµç»°-Ñîǧ‹ÃÅĹýµÄµçÓ°</a
...[1616 bytes skipped]...

http://2cconnect.com/ppmsf6512235/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:04 GMT
Accept-Ranges: bytes
ETag: "40512057a43d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9435
Content-Location: http://2cconnect.com/ppmsf6512235/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 02:55:56 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/ppmsf6512235/index.html
200 OK
Content-Length: 9435
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jysdgq.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>Ðþ¹Ø×ßÀȵõ¶¥-̸ÂÛµÄÓ¢Îı´Í߶ù¸èÁ½Ö»ÀÏ»¢_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="Ðþ¹Ø×ßÀȵõ¶¥" />
<meta name="descr
...[4647 bytes skipped]...

http://2cconnect.com/pz324z531000/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:06 GMT
Accept-Ranges: bytes
ETag: "ae48cf93a83d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 7383
Content-Location: http://2cconnect.com/pz324z531000/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 03:26:16 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/pz324z531000/index.html
200 OK
Content-Length: 7383
Content-Type: text/html
suspicious
Page code contains blacklisted domain: sztxhd.com

...[1816 bytes skipped]...
0/">ÀíÂÛƬµ¼º½</a></h1></td> </tr>
</table>
<div id="iwrapper_bg"> <div id="iwrapper_bg01"> <div id="iwrapper"> <div id="iheader"> <div class="iheader_left"></div> <div class="iheader_right" style="background:url(/sogou/images/bgimg0100.jpg) no-repeat left top;"> <table border="0" cellpadding="0" cellspacing="0" width="100%"> <tr> <td vttp://sztxhd.com/j74so">°ÙÐÔ¸óÊ×Ò³ÍøÕ¾</a>ÀòÀò˿˵µÀÁíÍâצ×ÓÀÎÀιǵ¶ËäÈ»¿´ÉÏȥΪǿ׳,¶ÙʱÖÚÈËÒ»ÆðÀ뿪Õâ´ÎÒ»¶¨Òª¸ÉµôËûÓªµØËûÃÇ°ë¸öÔ²»µ½¸ãÕâЩÈÕ¡£</p>
<p><img src="http://2cconnect.com/meinv/074133548_2013-04-07.jpg" alt="ÀíÂÛƬµ¼º½"></p>
<p>³õ¶Ô¸¶×ÏÅÛÈËÒ»ÏÂãêÁº³Ç³à½¬Ïɵ¤ÄÃ,<a href="http://winhone.net/f41811686/">½û¼É5ÃÀ¹úƬÔÚÏß¹Û¿´</a>ÄÐÈËÁÖÌìÑô,ÎÒµ«ºÜºÃ³ÔºÜºÃ³ÔÖ¦·±Ö§Ö§ÎáÎáµÀ¡£</p>
<p>Ðíð¿×ߺÃËÆ´Ìâ¬×¢¶¨Ö»ÊÇÃλÿջ¨,ÇصÆÖªµÀ
...[2044 bytes skipped]...

http://2cconnect.com/4ef4cc64999/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:07 GMT
Accept-Ranges: bytes
ETag: "6af0c712152d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 9222
Content-Location: http://2cconnect.com/4ef4cc64999/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 03:17:52 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/4ef4cc64999/index.html
200 OK
Content-Length: 9222
Content-Type: text/html
suspicious
Page code contains blacklisted domain: fxdszx.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>¹úÒ©×¼×Ö׳ÑôÒ©-×ÛÒÕÂúÌìÐÇÅɶԵڶþ_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="¹úÒ©×¼×Ö׳ÑôÒ©" />
<meta name="descripti
...[4569 bytes skipped]...

http://2cconnect.com/0l6xo3512000/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:18:09 GMT
Accept-Ranges: bytes
ETag: "fed39bcba53d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10342
Content-Location: http://2cconnect.com/0l6xo3512000/index.html
Content-Type: text/html
Last-Modified: Wed, 19 Nov 2014 03:06:21 GMT
X-Powered-By: ASP.NET
clean
http://2cconnect.com/0l6xo3512000/index.html
200 OK
Content-Length: 10342
Content-Type: text/html
suspicious
Page code contains blacklisted domain: ptsftz.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta content="text/html; charset=gb2312" http-equiv="Content-Type" />
<title>ÌÁÆܹÅÕòºÍÎÚÕòÄĸöºÃ-±±¾©Õ¾´ò³µ°®ÌïÓÉÓÎÏ·_ºþÄÏ»ªÁâÁ°Ô´¸ÖÌúÓÐÏÞ¹«Ë¾</title> <meta name="keywords" content="ÌÁÆܹÅÕòºÍÎÚÕòÄĸöºÃ" />
<meta n
...[4567 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: 2cconnect.com

Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:43 GMT
Accept-Ranges: bytes
ETag: "84d1de43c914d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10716
Content-Location: http://2cconnect.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 22:33:05 GMT
X-Powered-By: ASP.NET

...10716 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 2cconnect.com
Referer: http://www.google.com/search?q=2cconnect.com

Result:
The result is similar to the first query. There are no suspicious redirects found.