Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=constitutiondefenders.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: carolinacarports.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 03 Mar 2015 09:52:24 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
Set-Cookie: wfvt_-973758271=54f58458c0e12; expires=Tue, 03-Mar-2015 10:22:24 GMT; path=/; httponly
X-Pingback: http://carolinacarports.net/xmlrpc.php
GET / HTTP/1.1
Host: carolinacarports.net
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 03 Mar 2015 09:52:24 GMT
Server: Apache
Content-Type: text/html; charset=UTF-8
Set-Cookie: wfvt_-973758271=54f58458c0e12; expires=Tue, 03-Mar-2015 10:22:24 GMT; path=/; httponly
X-Pingback: http://carolinacarports.net/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: carolinacarports.net
Referer: http://www.google.com/search?q=carolinacarports.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: carolinacarports.net
Referer: http://www.google.com/search?q=carolinacarports.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://constitutiondefenders.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Fri, 09 Jan 2015 08:13:18 GMT Age: 0 Location: http://www.constitutiondefender.com Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | malicious |
http://www.constitutiondefender.com/ | 200 OK Content-Length: 47647 Content-Type: text/html | clean |
http://www.constitutiondefender.com/index.html | 200 OK Content-Length: 47647 Content-Type: text/html | clean |
http://www.constitutiondefender.com/mission.asp | 200 OK Content-Length: 14886 Content-Type: text/html | clean |
http://www.constitutiondefender.com/events1.asp | 200 OK Content-Length: 71883 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: constitutiondefenders.com <html>
<head> <title>The Defender Events | Support the movement...attend Events!</title> <meta name="description" content="Join the cause of freedom...and Live Free!"> <meta name="keywords" content="constitution, constitutional events, constitutional rally, freedom rally, tea party, political events, gun shows, bike rally, common law, magazine, freedom, liberty"> ...[4406 bytes skipped]... | ||
http://www.constitutiondefender.com/magazine.asp | 200 OK Content-Length: 78840 Content-Type: text/html | clean |
http://www.constitutiondefender.com/education.asp | 200 OK Content-Length: 25926 Content-Type: text/html | clean |
http://www.constitutiondefender.com/InstantForum2010/Default.aspx | 200 OK Content-Length: 135668 Content-Type: text/html | clean |
http://www.constitutiondefender.com/constitutiondefender/InstantForum2010/WebResource.axd?d=mGVkbyiMI9gdQHMQztacSZXvkCPtLXIZnoVHmP7Av0QsZmQiH8ukVOomzRMabHbXifKHwsHcml-grJBHpy2Dz8TRHAY1&t=635315753528827089 | 200 OK Content-Length: 20794 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/js/json.js | 200 OK Content-Length: 10854 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/js/jquery-1.4.2.js | 200 OK Content-Length: 170060 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/js/jquery.ba-bbq.js | 200 OK Content-Length: 43248 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/js/forum.js | 200 OK Content-Length: 156780 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/globalization/en-us/strings.js | 200 OK Content-Length: 15248 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/constitutiondefender/InstantForum2010/ScriptResource.axd?d=-0CIkBK5tBb9ivF5SE7kkOUBCuFQ7ysDpxd9kkhuaHs0FiFAsDW3cp71uPokOuYWfBe-kdwMC5focsQa_4uGuAfujkbXsptcr1KxYtkMJ6haOypD42pcDs59D6ZGgWZffcTw4yh7leo39jy28sj_NKPFU-y1wt3mFVR0PtR7oWAbnRzzGgE0reYbF3NWIASY6eo3ZabiIvpJ_u2Mlus7gDJv01PCF-Vh69qP0GOE8KsAF_n05e5SuyMt0XBvLbdTW5he7-SzbfBIIGlZbc8gqSwXXyMmWJxfW4SemZ2tFJmva7HNz <span>...86 symbols skipped</span> | 200 OK Content-Length: 301613 Content-Type: application/x-javascript | clean |
http://www.constitutiondefender.com/InstantForum2010/WebServices/Users.asmx/jsdebug | 200 OK Content-Length: 7591 Content-Type: application/x-javascript | clean |