Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: alaingestin.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Jul 2014 09:34:31 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 1165
Content-Type: text/html
Set-Cookie: 60gpBAK=R1224193598; path=/; expires=Fri, 18-Jul-2014 10:40:10 GMT
Set-Cookie: 60gp=R1864130304; path=/; expires=Fri, 18-Jul-2014 10:41:22 GMT
...1165 bytes of data.
GET / HTTP/1.1
Host: alaingestin.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Jul 2014 09:34:31 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 1165
Content-Type: text/html
Set-Cookie: 60gpBAK=R1224193598; path=/; expires=Fri, 18-Jul-2014 10:40:10 GMT
Set-Cookie: 60gp=R1864130304; path=/; expires=Fri, 18-Jul-2014 10:41:22 GMT
...1165 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: alaingestin.com
Referer: http://www.google.com/search?q=alaingestin.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: alaingestin.com
Referer: http://www.google.com/search?q=alaingestin.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://alaingestin.com/ | 200 OK Content-Length: 1165 Content-Type: text/html | clean |
http://www.featurestone.com.au/blogs/.install/index.php?ahsus=123 | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://www.featurestone.com.au/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://www.metalcowboy.com/app/cb.php | HTTP/1.1 302 Found Connection: close Date: Fri, 18 Jul 2014 09:34:49 GMT Location: http://www.metalcowboy.com/error404.shtml Server: Apache/2 Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.metalcowboy.com/error404.shtml | 200 OK Content-Length: 13775 Content-Type: text/html | clean |
http://www.google-analytics.com/urchin.js | 200 OK Content-Length: 22678 Content-Type: text/javascript | clean |
http://www.metalcowboy.com/ | 200 OK Content-Length: 18253 Content-Type: text/html | clean |
http://www.metalcowboy.com/about.shtml | 200 OK Content-Length: 18412 Content-Type: text/html | clean |
http://www.metalcowboy.com/cadencepress.html | 200 OK Content-Length: 2095 Content-Type: text/html | clean |
http://www.metalcowboy.com/cadencepress/newCadenceShop.html | 200 OK Content-Length: 13073 Content-Type: text/html | clean |
http://www.metalcowboy.com/cadencepress/images/Order Form 07-29-10.pdf | 200 OK Content-Length: 300861 Content-Type: application/pdf | clean |
http://www.metalcowboy.com/cadencepress/writingcontest.html | 200 OK Content-Length: 13237 Content-Type: text/html | clean |
http://www.metalcowboy.com/cadencepress/ | 403 Forbidden Content-Length: 586 Content-Type: text/html | clean |
http://www.metalcowboy.com/cadencepress/www.metalcowboy.com/cadencepress.html | HTTP/1.1 302 Found Cache-Control: max-age=3600 Connection: close Date: Fri, 18 Jul 2014 09:34:55 GMT Accept-Ranges: bytes Age: 0 Location: http://www.metalcowboy.com/error404.shtml Server: Apache/2 Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Expires: Fri, 18 Jul 2014 10:34:55 GMT | clean |
http://www.metalcowboy.com/cadencepress/Joyride_Chapter_01.pdf | 200 OK Content-Length: 300859 Content-Type: application/pdf | clean |
http://www.metalcowboy.com/cadencepress/YMBCifExcerpt.pdf | 200 OK Content-Length: 171889 Content-Type: application/pdf | clean |
http://www.metalcowboy.com/cadencepress/Cadence/Joyride_Chapter_01.pdf | HTTP/1.1 302 Found Cache-Control: max-age=3600 Connection: close Date: Fri, 18 Jul 2014 09:34:58 GMT Accept-Ranges: bytes Age: 0 Location: http://www.metalcowboy.com/error404.shtml Server: Apache/2 Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Expires: Fri, 18 Jul 2014 10:34:58 GMT | clean |
http://www.metalcowboy.com/cadencepress/Cadence/YMBCifExcerpt.pdf | HTTP/1.1 302 Found Cache-Control: max-age=3600 Connection: close Date: Fri, 18 Jul 2014 09:34:58 GMT Accept-Ranges: bytes Age: 3103 Location: http://www.metalcowboy.com/error404.shtml Server: Apache/2 Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Expires: Fri, 18 Jul 2014 09:43:15 GMT | clean |
http://www.metalcowboy.com/damfam.pdf | 200 OK Content-Length: 300859 Content-Type: application/pdf | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=alaingestin.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://alaingestin.com/
Result: alaingestin.com is not infected or malware details are not published yet.
Result: alaingestin.com is not infected or malware details are not published yet.