Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.jaypattersonlaw.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.jaypattersonlaw.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Wed, 03 Sep 2014 07:03:23 GMT Location: http://goo.gl/gpWMY Server: Apache Content-Length: 276 Content-Type: text/html; charset=iso-8859-1 | malicious |
URL: http://goo.gl/gpWMY (imitation of visitor from search engine) GET /gpWMY HTTP/1.1 Host: goo.gl Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, no-store, max-age=0, must-revalidate Connection: close Date: Wed, 03 Sep 2014 07:03:23 GMT Pragma: no-cache Location: http://mytds.s33.webhost1.ru/go.php?sid=1 Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Fri, 01 Jan 1990 00:00:00 GMT Alternate-Protocol: 80:quic X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block | malicious |
Scanned pages/files
Request | Server response | Status |
http://flevans.co.uk/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 29 Dec 2014 10:37:19 GMT Location: http://www.trmvs.co.uk Server: Apache Vary: Accept-Encoding Content-Length: 230 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://www.trmvs.co.uk/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
https://apis.google.com/js/plusone.js | 200 OK Content-Length: 12798 Content-Type: application/javascript | clean |
https://www.blogger.com/static/v1/widgets/3739804914-widgets.js | 200 OK Content-Length: 91363 Content-Type: text/javascript | clean |
http://flevans.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 29 Dec 2014 10:37:21 GMT Location: http://www.trmvs.co.uk?blogID=3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ Server: Apache Vary: Accept-Encoding Content-Length: 342 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ | HTTP/1.1 302 Moved Temporarily Cache-Control: private, max-age=0 Connection: close Date: Mon, 29 Dec 2014 10:37:11 GMT Location: http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogID%3D3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Mon, 29 Dec 2014 10:37:11 GMT Alternate-Protocol: 80:quic,p=0.02,80:quic,p=0.02 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block | clean |
http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogid%3d3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://www.trmvs.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ | 404 Not Found Content-Length: 42229 Content-Type: text/html | clean |
http://www.trmvs.co.uk/feeds/posts/default | 200 OK Content-Length: 1701 Content-Type: application/atom+xml | clean |
http://www.trmvs.co.uk/test404page.js | 404 Not Found Content-Length: 41736 Content-Type: text/html | clean |
http://www.trmvs.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=sidebar-right-1/ | 404 Not Found Content-Length: 42281 Content-Type: text/html | clean |
http://www.trmvs.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3/ | 404 Not Found Content-Length: 42285 Content-Type: text/html | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=sidebar-right-1/ | HTTP/1.1 302 Moved Temporarily Cache-Control: private, max-age=0 Connection: close Date: Mon, 29 Dec 2014 10:37:14 GMT Location: http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogID%3D3785586211416231133&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=sidebar-right-1/ Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Mon, 29 Dec 2014 10:37:14 GMT Alternate-Protocol: 80:quic,p=0.02,80:quic,p=0.02 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block | clean |
http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogid%3d3785586211416231133&widgettype=profile&widgetid=profile1&action=editwidget§ionid=sidebar-right-1/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3/ | HTTP/1.1 302 Moved Temporarily Cache-Control: private, max-age=0 Connection: close Date: Mon, 29 Dec 2014 10:37:15 GMT Location: http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogID%3D3785586211416231133&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3/ Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Mon, 29 Dec 2014 10:37:15 GMT Alternate-Protocol: 80:quic,p=0.02,80:quic,p=0.02 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block | clean |
http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/www.blogger.com/rearrange?blogid%3d3785586211416231133&widgettype=attribution&widgetid=attribution1&action=editwidget§ionid=footer-3/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://flevans.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=sidebar-right-1/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 29 Dec 2014 10:37:28 GMT Location: http://www.trmvs.co.uk?blogID=3785586211416231133&widgetType=Profile&widgetId=Profile1&action=editWidget§ionId=sidebar-right-1/ Server: Apache Vary: Accept-Encoding Content-Length: 355 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=profile&widgetid=profile1&action=editwidget§ionid=sidebar-right-1/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=profile&widgetid=profile1&action=editwidget§ionid=sidebar-right-1//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ | HTTP/1.1 302 Moved Temporarily Cache-Control: private, max-age=0 Connection: close Date: Mon, 29 Dec 2014 10:37:17 GMT Location: http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=profile&widgetid=profile1&action=editwidget§ionid=sidebar-right-1/www.blogger.com/rearrange?blogID%3D3785586211416231133&widgetType=HTML&widgetId=HTML1&action=editWidget§ionId=crosscol/ Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Mon, 29 Dec 2014 10:37:17 GMT Alternate-Protocol: 80:quic,p=0.02,80:quic,p=0.02 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block | clean |
http://www.trmvs.co.uk/?blogid=3785586211416231133&widgettype=profile&widgetid=profile1&action=editwidget§ionid=sidebar-right-1/www.blogger.com/rearrange?blogid%3d3785586211416231133&widgettype=html&widgetid=html1&action=editwidget§ionid=crosscol/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
http://flevans.co.uk//www.blogger.com/rearrange?blogID=3785586211416231133&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 29 Dec 2014 10:37:29 GMT Location: http://www.trmvs.co.uk?blogID=3785586211416231133&widgetType=Attribution&widgetId=Attribution1&action=editWidget§ionId=footer-3/ Server: Apache Vary: Accept-Encoding Content-Length: 356 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.trmvs.co.uk?blogid=3785586211416231133&widgettype=attribution&widgetid=attribution1&action=editwidget§ionid=footer-3/ | 200 OK Content-Length: 42144 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=flevans.co.uk
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://flevans.co.uk/
Result: flevans.co.uk is not infected or malware details are not published yet.
Result: flevans.co.uk is not infected or malware details are not published yet.