Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: destinationicloud.us
Result:
HTTP/1.1 200 OK
Cache-Control: private, no-cache
Connection: close
Date: Thu, 21 Aug 2014 16:26:24 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires:
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 53f94ae28286625d467fde6c991deb78=dfa724d56c1e9468b6c4bb784a01b5e4; path=/
Set-Cookie: bt_arise_tpl=bt_arise; expires=Tue, 11-Aug-2015 16:26:26 GMT; path=/
GET / HTTP/1.1
Host: destinationicloud.us
Result:
HTTP/1.1 200 OK
Cache-Control: private, no-cache
Connection: close
Date: Thu, 21 Aug 2014 16:26:24 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires:
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 53f94ae28286625d467fde6c991deb78=dfa724d56c1e9468b6c4bb784a01b5e4; path=/
Set-Cookie: bt_arise_tpl=bt_arise; expires=Tue, 11-Aug-2015 16:26:26 GMT; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: destinationicloud.us
Referer: http://www.google.com/search?q=destinationicloud.us
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: destinationicloud.us
Referer: http://www.google.com/search?q=destinationicloud.us
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://destinationicloud.us/ | 200 OK Content-Length: 43183 Content-Type: text/html | clean |
http://destinationicloud.us/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://destinationicloud.us/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://destinationicloud.us/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
http://destinationicloud.us/media/system/js/modal.js | 200 OK Content-Length: 9732 Content-Type: application/javascript | clean |
http://destinationicloud.us//ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js/ | 404 Category not found Content-Length: 1402 Content-Type: text/html | clean |
http://destinationicloud.us/index.php | 200 OK Content-Length: 43192 Content-Type: text/html | clean |
http://destinationicloud.us/components/com_k2/js/k2.js | 200 OK Content-Length: 6820 Content-Type: application/javascript | clean |
http://destinationicloud.us/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://destinationicloud.us/plugins/system/jat3/jat3/base-themes/default/js/core.js | 200 OK Content-Length: 6804 Content-Type: application/javascript | clean |
http://destinationicloud.us/plugins/system/jat3/jat3/base-themes/default/js/menu/mega.js | 200 OK Content-Length: 17219 Content-Type: application/javascript | clean |
http://destinationicloud.us/templates/bt_arise/js/curvycorners.src.js | 200 OK Content-Length: 60352 Content-Type: application/javascript | clean |
http://clouddominator.com/modules/mod_bt_contentslider/tmpl/js/slides.js | 200 OK Content-Length: 6784 Content-Type: application/javascript | clean |
http://clouddominator.com/modules/mod_bt_contentslider/tmpl/js/default.js | 200 OK Content-Length: 1238 Content-Type: application/javascript | clean |
http://clouddominator.com/modules/mod_bt_contentslider/tmpl/js/jquery.easing.1.3.js | 200 OK Content-Length: 8071 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=destinationicloud.us
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://destinationicloud.us/
Result: destinationicloud.us is not infected or malware details are not published yet.
Result: destinationicloud.us is not infected or malware details are not published yet.