Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcurarfibromas.com%2Fredirect.php%3Fhop%3Dpromopubli&hstr=1412784517779%7Cpromopubli%7C%7Cd3d2e7k764%7Cfibromas&code=%7B0%7D&key=17D0B355&parms=&s=default&ds=2 (imitation of visitor from search engine) GET /hop/?CBRehoppp2=http%3A%2F%2Fcurarfibromas.com%2Fredirect.php%3Fhop%3Dpromopubli&hstr=1412784517779%7Cpromopubli%7C%7Cd3d2e7k764%7Cfibromas&code=%7B0%7D&key=17D0B355&parms=&s=default&ds=2 HTTP/1.1 Host: a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 16:08:38 GMT Pragma: no-cache Location: http://curarfibromas.com/redirect.php?hop=promopubli Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" | suspicious |
Scanned pages/files
Request | Server response | Status |
http://a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net/
Result: a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net is not infected or malware details are not published yet.
Result: a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net is not infected or malware details are not published yet.