Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: extremeravens.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Tue, 03 Mar 2015 12:22:23 GMT
Location: http://forums.extremeravens.com
Server: Apache
Vary: Accept-Encoding
Content-Length: 215
Content-Type: text/html; charset=iso-8859-1
...215 bytes of data.
GET / HTTP/1.1
Host: extremeravens.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Tue, 03 Mar 2015 12:22:23 GMT
Location: http://forums.extremeravens.com
Server: Apache
Vary: Accept-Encoding
Content-Length: 215
Content-Type: text/html; charset=iso-8859-1
...215 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: extremeravens.com
Referer: http://www.google.com/search?q=extremeravens.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: extremeravens.com
Referer: http://www.google.com/search?q=extremeravens.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://extremeravens.com/ | HTTP/1.1 302 Found Connection: close Date: Tue, 03 Mar 2015 12:22:23 GMT Location: http://forums.extremeravens.com Server: Apache Vary: Accept-Encoding Content-Length: 215 Content-Type: text/html; charset=iso-8859-1 | clean |
http://forums.extremeravens.com/ | 200 OK Content-Length: 69132 Content-Type: text/html | clean |
http://www.causes.com/moment_of_silence.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 03 Mar 2015 12:22:25 GMT Location: https://www.causes.com/moment_of_silence.js Server: nginx/1.7.2 Content-Length: 184 Content-Type: text/html | clean |
https://www.causes.com/moment_of_silence.js | 404 Not Found Content-Length: 1 Content-Type: text/javascript | clean |
http://forums.extremeravens.com/public/min/index.php?ipbv=967a01562a633fc08a5ca9021d53daa5&g=js | 200 OK Content-Length: 193732 Content-Type: application/x-javascript | clean |
http://forums.extremeravens.com/public/min/index.php?ipbv=967a01562a633fc08a5ca9021d53daa5&charset=iso-8859-1&f=public/js/ipb.js,cache/lang_cache/1/ipb.lang.js,public/js/ips.hovercard.js,public/js/ips.quickpm.js,public/js/ips.board.js | 200 OK Content-Length: 129410 Content-Type: application/x-javascript | clean |
http://extremeravens.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=extremeravens.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://extremeravens.com/
Result: extremeravens.com is not infected or malware details are not published yet.
Result: extremeravens.com is not infected or malware details are not published yet.