Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: camaso.fr
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 09 Oct 2014 20:12:29 GMT
Accept-Ranges: bytes
ETag: "2731-504bd3259a5f2"
Server: Apache/2.4.7 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 10033
Content-Type: text/html
Last-Modified: Mon, 06 Oct 2014 08:52:03 GMT
...10033 bytes of data.
GET / HTTP/1.1
Host: camaso.fr
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 09 Oct 2014 20:12:29 GMT
Accept-Ranges: bytes
ETag: "2731-504bd3259a5f2"
Server: Apache/2.4.7 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 10033
Content-Type: text/html
Last-Modified: Mon, 06 Oct 2014 08:52:03 GMT
...10033 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: camaso.fr
Referer: http://www.google.com/search?q=camaso.fr
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: camaso.fr
Referer: http://www.google.com/search?q=camaso.fr
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://camaso.fr/ | 200 OK Content-Length: 10033 Content-Type: text/html | clean |
http://camaso.fr/wpscripts/jsFlashVer.js | 200 OK Content-Length: 7557 Content-Type: application/javascript | clean |
http://camaso.fr/wpscripts/jspngfix.js | 200 OK Content-Length: 748 Content-Type: application/javascript | clean |
http://camaso.fr/wpscripts/jsRollover.js | 200 OK Content-Length: 1903 Content-Type: application/javascript | clean |
http://camaso.fr/index.html | 200 OK Content-Length: 10033 Content-Type: text/html | clean |
http://camaso.fr/page2.html | 200 OK Content-Length: 6249 Content-Type: text/html | clean |
http://camaso.fr/page8.html | 200 OK Content-Length: 12697 Content-Type: text/html | clean |
http://camaso.fr/page9.html | 200 OK Content-Length: 21464 Content-Type: text/html | clean |
http://camaso.fr/page10.html | 200 OK Content-Length: 13396 Content-Type: text/html | clean |
http://camaso.fr/wpscripts/jsValidation.js | 200 OK Content-Length: 1547 Content-Type: application/javascript | clean |
http://camaso.fr/MENTIONS LEGALES.pdf | 200 OK Content-Length: 300926 Content-Type: application/pdf | clean |
http://camaso.fr/test404page.js | 404 Not Found Content-Length: 286 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=camaso.fr
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://camaso.fr/
Result: camaso.fr is not infected or malware details are not published yet.
Result: camaso.fr is not infected or malware details are not published yet.