Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://cdowns.regtool1.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fwww.regtool.com%2Flp1.php%3Fhop%3Dcdowns&hstr=1412780898016%7Ccdowns%7C%7Cd3d2e749ty%7Cregtool1&code=%7B0%7D&key=7ADCDD9C&parms=&s=default&ds=0 (imitation of visitor from search engine) GET /hop/?CBRehoppp2=http%3A%2F%2Fwww.regtool.com%2Flp1.php%3Fhop%3Dcdowns&hstr=1412780898016%7Ccdowns%7C%7Cd3d2e749ty%7Cregtool1&code=%7B0%7D&key=7ADCDD9C&parms=&s=default&ds=0 HTTP/1.1 Host: cdowns.regtool1.hop.clickbank.net Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 15:08:18 GMT Pragma: no-cache Location: http://www.regtool.com/lp1.php?hop=cdowns Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" | suspicious |
Scanned pages/files
Request | Server response | Status |
http://cdowns.regtool1.hop.clickbank.net/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cdowns.regtool1.hop.clickbank.net/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cdowns.regtool1.hop.clickbank.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cdowns.regtool1.hop.clickbank.net/
Result: cdowns.regtool1.hop.clickbank.net is not infected or malware details are not published yet.
Result: cdowns.regtool1.hop.clickbank.net is not infected or malware details are not published yet.