Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://dnc5.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: dnc5.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 19 Apr 2014 23:49:12 GMT Location: http://mywifeishappy.com/ Server: Apache/2.2 Content-Length: 295 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: X-Mapping-ekgpbbpb=B99F33CAD7B712BFFDD80894FD9B26CE; path=/ | malicious |
URL: http://mywifeishappy.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: mywifeishappy.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Found Connection: close Date: Sat, 19 Apr 2014 23:49:12 GMT Location: http://levitrawelness.com Server: nginx Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.3.28 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://dnc5.com/ | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://dnc5.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Sat, 19 Apr 2014 23:49:12 GMT Location: http://mywifeishappy.com/ Server: Apache/2.2 Content-Length: 271 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: X-Mapping-ekgpbbpb=9EE372D6ACCA2266641996FAD3FCD48F; path=/ X-Cache-Info: not cacheable; response is 302 without expiry time | clean |
http://mywifeishappy.com/ | HTTP/1.1 302 Found Connection: close Date: Sat, 19 Apr 2014 23:49:13 GMT Location: http://levitrawelness.com Server: nginx Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.3.28 | clean |
http://levitrawelness.com/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://levitrawelness.com/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=dnc5.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://dnc5.com/
Result: dnc5.com is not infected or malware details are not published yet.
Result: dnc5.com is not infected or malware details are not published yet.