Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=antiquefirehelmets.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://antiquefirehelmets.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.antiquefirehelmets.com/ | HTTP/1.1 200 OK Date: Wed, 25 Jun 2014 15:12:11 GMT Accept-Ranges: bytes ETag: "dede26eea034cf1:c8ad" Server: Microsoft-IIS/6.0 Content-Length: 5991 Content-Location: http://www.antiquefirehelmets.com/default.html Content-Type: text/html Last-Modified: Fri, 28 Feb 2014 16:20:01 GMT X-Powered-By: ASP.NET | clean |
http://www.antiquefirehelmets.com/default.html | 200 OK Content-Length: 5991 Content-Type: text/html | clean |
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21568 Content-Type: text/javascript | clean |
http://lapi.ebay.com/ws/eBayISAPI.dll?EKServer&ai=nqwu%7C%7Cq%21&bdrcolor=FFFFFF&bin=y&cid=0&eksize=1&encode=UTF-8&endcolor=FF0000&endtime=n&fbgcolor=FFFFFF&fntcolor=000000&fs=0&hdrcolor=FFFFFF&hdrimage=1&hdrsrch=n&img=y&lnkcolor=000000&logo=2&num=40&numbid=n&paypal=y&popup=y&prvd=9&query=Antique+Fire+Helmet&r0=3&shipcost=n&sid=antiquefirehelmets.com&siteid=0&sort=MetaEndSort&sortby=endtime&sortdi <span>...148 symbols skipped</span> | 200 OK Content-Length: 35737 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: antiquefirehelmets.com ...[3084 bytes skipped]... //var ekTitleFontFace = "Arial, Helvetica, sans-serif"; var ekTitleFontSize = "-1"; var ekTitleFontFace = "Arial"; var isPrvdMediaPlex= false; var isPrvdCJ= false; var isPrvdEPN= true; var isPrvdHDTorBJMT = false; var isPrvdCNNA = false; var trackingID= "5336694117"; var adsServed=false; var t = new Date(); var cacheBuster = escape(t.toGMTString()); var sid = "antiquefirehelmets.com"; var ekWidth = "340"; var ekQuery = "Antique Fire Helmet"; var ekSearchURL_Base ="http://shop.ebay.com"; var ekSearchURL_Full ="http://shop.ebay.com/items/"; var ekSearchURL_Full_2 = ekSearchURL_Full; //var ekSearchURL_Base ="http://search.qa.ebay.com"; //var ekSearchURL_Full ="http://search.qa.ebay.com/search/search.dll"; var siteID ="0"; var isRover=true; var roverD ...[38230 bytes skipped]... | ||
http://lapi.ebay.com/ws/\""+href+"\""+(target==null||target=="_self"?"":" | HTTP/1.1 302 Moved Temporarily Date: Wed, 25 Jun 2014 15:12:14 GMT Location: http://pages.ebay.com/messages/page_not_responding.html?eBayErrorEventName=p4p%60gu%60m%2Bfslehq%60%3C%3Dsm%2Bpu56*%3B3%3E2e%605-2014.06.25.08.12.14.592.MST Server: Apache-Coyote/1.1 Content-Length: 0 RlogId: p4p%60gu%60m%2Bfslehq%60%3C%3Dsm%2Bpu56*%3B3%3E2e%605-146d3959700 | clean |
http://pages.ebay.com/messages/page_not_responding.html?ebayerroreventname=p4p%60gu%60m%2bfslehq%60%3c%3dsm%2bpu56*%3b3%3e2e%605-2014.06.25.08.12.14.592.mst | 200 OK Content-Length: 8853 Content-Type: text/html | clean |
http://include.ebaystatic.com/js/v/us/ebaybase.js | 200 OK Content-Length: 70441 Content-Type: application/javascript | clean |
http://include.ebaystatic.com/js/v/us/ebaysup.js | 200 OK Content-Length: 17110 Content-Type: application/javascript | clean |
http://lapi.ebay.com/test404page.js | HTTP/1.1 302 Moved Temporarily Date: Wed, 25 Jun 2014 15:12:15 GMT Location: http://pages.ebay.com/messages/page_not_responding.html?eBayErrorEventName=p4p%60gu%60m%2Bfslehq%60%3C%3Dsm%2Bpu56*ed5%3F0c7-2014.06.25.08.12.16.236.MST Server: Apache-Coyote/1.1 Content-Length: 0 RlogId: p4p%60gu%60m%2Bfslehq%60%3C%3Dsm%2Bpu56*ed5%3F0c7-146d3959d6c | clean |
http://pages.ebay.com/messages/page_not_responding.html?ebayerroreventname=p4p%60gu%60m%2bfslehq%60%3c%3dsm%2bpu56*ed5%3f0c7-2014.06.25.08.12.16.236.mst | 200 OK Content-Length: 8853 Content-Type: text/html | clean |
http://pages.ebay.com/securitycenter/index.html | 200 OK Content-Length: 20795 Content-Type: text/html | clean |
http://ir.ebaystatic.com/v4js/z/i5/r32gctn0fu3vjkpge2mjhij3q.js | 200 OK Content-Length: 104294 Content-Type: application/x-javascript | clean |
http://include.ebaystatic.com/js/e879/us/ebaybase_v4_e8793us.js | 200 OK Content-Length: 51599 Content-Type: application/javascript | clean |
http://include.ebaystatic.com/js/e879/us/ebaysup_e8793us.js | 200 OK Content-Length: 17110 Content-Type: application/javascript | clean |
http://ir.ebaystatic.com/header/js/all.min?combo=90&rvr=s48rc4&factor=3p0Off&siteid=0&h=96848 | 200 OK Content-Length: 186340 Content-Type: application/x-javascript | clean |
http://pages.ebay.com/securitycenter/ | 200 OK Content-Length: 20795 Content-Type: text/html | clean |
http://pages.ebay.com/securitycenter/Index.html | 200 OK Content-Length: 20795 Content-Type: text/html | clean |
http://pages.ebay.com/securitycenter/Identity.html | 200 OK Content-Length: 17538 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: antiquefirehelmets.com
Result:
GET / HTTP/1.1
Host: antiquefirehelmets.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: antiquefirehelmets.com
Referer: http://www.google.com/search?q=antiquefirehelmets.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: antiquefirehelmets.com
Referer: http://www.google.com/search?q=antiquefirehelmets.com
Result:
The result is similar to the first query. There are no suspicious redirects found.