Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: azfsbosearch.com
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 19:10:33 GMT
Pragma: no-cache
Server: Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Encoding: none
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Mon, 15 Sep 2014 19:10:34 GMT
Set-Cookie: 0b157e25171e4a2e16309bd61edbb3a7=-; path=/
Set-Cookie: mosvisitor=1
Set-Cookie: JATheme=azfsbosearch_template; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: ColorCSS=default; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: ScreenType=wide; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: FontSize=3; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: virtuemart=446c070ac998c61438e7ca98eac353d5; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: azfsbosearch.com
Result:
HTTP/1.1 200 OK
Cache-Control: post-check=0, pre-check=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Mon, 15 Sep 2014 19:10:33 GMT
Pragma: no-cache
Server: Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Encoding: none
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Mon, 15 Sep 2014 19:10:34 GMT
Set-Cookie: 0b157e25171e4a2e16309bd61edbb3a7=-; path=/
Set-Cookie: mosvisitor=1
Set-Cookie: JATheme=azfsbosearch_template; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: ColorCSS=default; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: ScreenType=wide; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: FontSize=3; expires=Sat, 05-Sep-2015 19:10:34 GMT; path=/
Set-Cookie: virtuemart=446c070ac998c61438e7ca98eac353d5; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: azfsbosearch.com
Referer: http://www.google.com/search?q=azfsbosearch.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: azfsbosearch.com
Referer: http://www.google.com/search?q=azfsbosearch.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://azfsbosearch.com/ | 200 OK Content-Length: 46531 Content-Type: text/html | clean |
http://www.azfsbosearch.com/templates/azfsbosearch_template/scripts/ja.script.js | 200 OK Content-Length: 5801 Content-Type: application/javascript | clean |
http://www.azfsbosearch.com/templates/azfsbosearch_template/ja_transmenu/ja-transmenu.js | 200 OK Content-Length: 35041 Content-Type: application/javascript | clean |
http://www.azfsbosearch.com/modules/ja_newsflash/ja-newsflash.js | 200 OK Content-Length: 4678 Content-Type: application/javascript | clean |
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21394 Content-Type: text/javascript | clean |
http://stats.engineseeker.com/stats.js | 200 OK Content-Length: 597 Content-Type: text/javascript | clean |
http://www.azfsbosearch.com/modules/ja_slwi/mootools.v1.1.pak.js | 200 OK Content-Length: 42950 Content-Type: application/javascript | clean |
http://www.azfsbosearch.com/modules/ja_slwi/ja_slwi.js | 200 OK Content-Length: 1377 Content-Type: application/javascript | clean |
http://azfsbosearch.com/modules/pagepeel_banner/AC_OETags.js | 200 OK Content-Length: 7822 Content-Type: application/javascript | clean |
http://azfsbosearch.com/index.php | 200 OK Content-Length: 46531 Content-Type: text/html | clean |
http://azfsbosearch.com/index.php?option=com_acctexp&task=subscribe&usage=4 | 200 OK Content-Length: 26589 Content-Type: text/html | clean |
http://azfsbosearch.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://azfsbosearch.com/
http://www.azfsbosearch.com/component/option,com_hotproperty/task,view/id,13/Itemid,5/ | 404 Not Found Content-Length: 406 Content-Type: text/html | clean |
http://azfsbosearch.com/
http://www.azfsbosearch.com/component/option,com_hotproperty/task,view/id,14/Itemid,5/ | 404 Not Found Content-Length: 406 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=azfsbosearch.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://azfsbosearch.com/
Result: azfsbosearch.com is not infected or malware details are not published yet.
Result: azfsbosearch.com is not infected or malware details are not published yet.