Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ads.hillads.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ads.hillads.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ads.hillads.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Fri, 25 Apr 2014 09:57:03 GMT
Location: https://ads.hillads.com/
Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2
Content-Length: 208
Content-Type: text/html; charset=iso-8859-1
...208 bytes of data.
GET / HTTP/1.1
Host: ads.hillads.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Fri, 25 Apr 2014 09:57:03 GMT
Location: https://ads.hillads.com/
Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2
Content-Length: 208
Content-Type: text/html; charset=iso-8859-1
...208 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ads.hillads.com
Referer: http://www.google.com/search?q=ads.hillads.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ads.hillads.com
Referer: http://www.google.com/search?q=ads.hillads.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://ads.hillads.com/ | HTTP/1.1 302 Found Connection: close Date: Fri, 25 Apr 2014 09:57:03 GMT Location: https://ads.hillads.com/ Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2 Content-Length: 208 Content-Type: text/html; charset=iso-8859-1 | clean |
https://ads.hillads.com/ | HTTP/1.1 302 Found Connection: close Date: Fri, 25 Apr 2014 09:57:04 GMT Location: https://ads.hillads.com/www/admin/index.php Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2 Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.4.24 | clean |
https://ads.hillads.com/www/admin/index.php | 200 OK Content-Length: 4100 Content-Type: text/html | clean |
https://ads.hillads.com/www/admin/assets/min.php?g=oxp-js&v=2.8.11 | 200 OK Content-Length: 233288 Content-Type: application/x-javascript | clean |
https://ads.hillads.com/www/delivery/fl.js | 200 OK Content-Length: 6707 Content-Type: application/javascript | clean |
http://ads.hillads.com/password-recovery.php | HTTP/1.1 302 Found Connection: close Date: Fri, 25 Apr 2014 09:57:09 GMT Location: https://ads.hillads.com/password-recovery.php Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2 Content-Length: 229 Content-Type: text/html; charset=iso-8859-1 | clean |
https://ads.hillads.com/password-recovery.php | 404 Not Found Content-Length: 219 Content-Type: text/html | clean |
http://ads.hillads.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Fri, 25 Apr 2014 09:57:10 GMT Location: https://ads.hillads.com/test404page.js Server: Apache/2.2.26 (FreeBSD) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2 Content-Length: 222 Content-Type: text/html; charset=iso-8859-1 | clean |
https://ads.hillads.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |