Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://erncancook.timccfm.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fslimpleology.com%2Fredirect.php%3Fhop%3Derncancook&hstr=1412779015034%7Cerncancook%7C%7Cd3d2e7syn2%7Ctimccfm&code=%7B0%7D&key=093E624A&parms=&s=default&ds=2 (imitation of visitor from search engine) GET /hop/?CBRehoppp2=http%3A%2F%2Fslimpleology.com%2Fredirect.php%3Fhop%3Derncancook&hstr=1412779015034%7Cerncancook%7C%7Cd3d2e7syn2%7Ctimccfm&code=%7B0%7D&key=093E624A&parms=&s=default&ds=2 HTTP/1.1 Host: erncancook.timccfm.hop.clickbank.net Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 14:36:55 GMT Pragma: no-cache Location: http://slimpleology.com/redirect.php?hop=erncancook Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" | suspicious |
Scanned pages/files
Request | Server response | Status |
http://erncancook.timccfm.hop.clickbank.net/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://erncancook.timccfm.hop.clickbank.net/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 14:37:00 GMT Pragma: no-cache Location: http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fslimpleology.com%2Fredirect.php%3Fhop%3Derncancook&hstr=1412779020038%7Cerncancook%7C%7C4sq48rehcf%7Ctimccfm&code=%7B0%7D&key=6E31DD03&parms=&s=default&ds=2 Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" Set-Cookie: p=01.F460F56044FFF77F790218B4C1AA62C2B5C8CD6E2F68BC9C497A36E66D666F25601349C8531561C26EEED5F446F7F1EA710240FD; Domain=.clickbank.net; Expires=Mon, 06-Apr-2015 14:37:00 GMT; Path=/ Set-Cookie: q=01.ECC551674ECAC555820C186C1AE2AAC87633284E951CDA4D7EBD3258273171F6C73C057F705408525F185D4FA6B262016AA37732; Domain=.clickbank.net; Expires=Mon, 07-Oct-2019 14:37:00 GMT; Path=/ | clean |
http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fslimpleology.com%2fredirect.php%3fhop%3derncancook&hstr=1412779020038%7cerncancook%7c%7c4sq48rehcf%7ctimccfm&code=%7b0%7d&key=6e31dd03&parms=&s=default&ds=2 | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 14:37:00 GMT Pragma: no-cache Location: http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fslimpleology.com%2Fredirect.php%3Fhop%3Derncancook&hstr=1412779020312%7Cerncancook%7C%7C4sq48tehcf%7Ctimccfm&code=%7B%7D&key=31295EEC&parms=cbrehoppp2%3Dhttp%253a%252f%252fslimpleology.com%252fredirect.php%253fhop%253derncancook%26hstr%3D1412779020038%257cerncancook%257c%257c4sq48rehcf%257ctimccfm%26code%3D%257b0%257d%26key%3D6e31dd03%26parms%3D%26ds%3D2&s=default&ds=2 Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" Set-Cookie: p=01.26F9D5283970F094ECBFCA42206226C7AFD2302996E8FD04653EECA16B5DC85B185CFE3A304CA4D9E6EFB082078C90D1653C37A6; Domain=.clickbank.net; Expires=Mon, 06-Apr-2015 14:37:00 GMT; Path=/ Set-Cookie: q=01.279C0522BC11DD8DC21A9BA9DFC2B7A7CFB87C0A22E20FB3B65E4753C1567815FAC7832FA56AB70F62C9355893D874EA86E4B7C8; Domain=.clickbank.net; Expires=Mon, 07-Oct-2019 14:37:00 GMT; Path=/ | clean |
http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fslimpleology.com%2fredirect.php%3fhop%3derncancook&hstr=1412779020312%7cerncancook%7c%7c4sq48tehcf%7ctimccfm&code=%7b%7d&key=31295eec&parms=cbrehoppp2%3dhttp%253a%252f%252fslimpleology.com%252fredirect.php%253fhop%253derncancook%26hstr%3d1412779020038%257cerncancook%257c%257c4sq48rehcf%257ctimccfm%26code%3d%257b <span>...58 symbols skipped</span> | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 14:37:00 GMT Pragma: no-cache Location: http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?CBRehoppp2=http%3A%2F%2Fslimpleology.com%2Fredirect.php%3Fhop%3Derncancook&hstr=1412779020701%7Cerncancook%7C%7C4sq48cehcf%7Ctimccfm&code=%7B%7D&key=CBDCF772&parms=cbrehoppp2%3Dhttp%253a%252f%252fslimpleology.com%252fredirect.php%253fhop%253derncancook%26hstr%3D1412779020312%257cerncancook%257c%257c4sq48tehcf%257ctimccfm%26code%3D%257b%257d%26key%3D31295eec%26parms%3Dcbrehoppp2%253dhttp%25253a%25252f%25252fslimpleology.com%25252fredirect.php%25253fhop%25253derncancook%2526hstr%253d1412779020038%25257cerncancook%25257c%25257c4sq48rehcf%25257ctimccfm%2526code%253d%25257b0%25257d%2526key%253d6e31dd03%2526parms%253d%2526ds%253d2%26ds%3D2&s=default&ds=2 Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" Set-Cookie: p=01.25449F4EC6F9964045A9EA5CC8DAB10B08AE977972CC376278B1391173B2D8A783E4275F19ACB45FDC0875F8D6390299D67EE1B6; Domain=.clickbank.net; Expires=Mon, 06-Apr-2015 14:37:00 GMT; Path=/ Set-Cookie: q=01.9C9651E9BB0DEA3AD288C18D9F65BE2A6B2F8947F7AD8F956F2E8759D4075D387815C6620C39B6A18FAFD1173E16AFCD8C7F5942; Domain=.clickbank.net; Expires=Mon, 07-Oct-2019 14:37:00 GMT; Path=/ | clean |
http://erncancook.timccfm.hop.clickbank.net/hop/test404page.js?cbrehoppp2=http%3a%2f%2fslimpleology.com%2fredirect.php%3fhop%3derncancook&hstr=1412779020701%7cerncancook%7c%7c4sq48cehcf%7ctimccfm&code=%7b%7d&key=cbdcf772&parms=cbrehoppp2%3dhttp%253a%252f%252fslimpleology.com%252fredirect.php%253fhop%253derncancook%26hstr%3d1412779020312%257cerncancook%257c%257c4sq48tehcf%257ctimccfm%26code%3d%257b <span>...319 symbols skipped</span> | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=erncancook.timccfm.hop.clickbank.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://erncancook.timccfm.hop.clickbank.net/
Result: erncancook.timccfm.hop.clickbank.net is not infected or malware details are not published yet.
Result: erncancook.timccfm.hop.clickbank.net is not infected or malware details are not published yet.