Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.festalgue.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.festalgue.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Sun, 28 Sep 2014 22:28:28 GMT Location: http://chilli-recipes.com/administrator/includes/joomla.php Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: 90planBAK=R698939582; path=/; expires=Sun, 28-Sep-2014 23:42:28 GMT Set-Cookie: 90plan=R3276139222; path=/; expires=Sun, 28-Sep-2014 23:48:41 GMT X-Powered-By: PHP/4.4.9 | malicious |
URL: http://chilli-recipes.com/administrator/includes/joomla.php (imitation of visitor from search engine) GET /administrator/includes/joomla.php HTTP/1.1 Host: chilli-recipes.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 28 Sep 2014 22:28:28 GMT Location: http://www.haphuongfoundation.net/vietnam/language/pdf_fonts/www/all2.php Server: Apache/2.4.9 (Unix) Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.2.17 | malicious |
URL: http://www.haphuongfoundation.net/vietnam/language/pdf_fonts/www/all2.php (imitation of visitor from search engine) GET /vietnam/language/pdf_fonts/www/all2.php HTTP/1.1 Host: www.haphuongfoundation.net Referer: http://www.google.com/search?q=redirect+check3 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 28 Sep 2014 22:28:29 GMT Location: http://it-rise.ru/includes/domit/1.php Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html | malicious |
Scanned pages/files
Request | Server response | Status |
http://www.festalgue.com/ | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://www.festalgue.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=festalgue.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://festalgue.com/
Result: festalgue.com is not infected or malware details are not published yet.
Result: festalgue.com is not infected or malware details are not published yet.