Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: fluoridation.biz
Result:
HTTP/1.1 302 Found
Connection: close
Date: Wed, 03 Sep 2014 11:01:21 GMT
Location: http://www.facebook.com/pages/Fluoridation-Free-Canada-Calgary-Fluoride-Forum/204331926247532?sk=wall
Server: Apache/2.2.22 (Debian)
Content-Length: 367
Content-Type: text/html; charset=iso-8859-1
...367 bytes of data.
GET / HTTP/1.1
Host: fluoridation.biz
Result:
HTTP/1.1 302 Found
Connection: close
Date: Wed, 03 Sep 2014 11:01:21 GMT
Location: http://www.facebook.com/pages/Fluoridation-Free-Canada-Calgary-Fluoride-Forum/204331926247532?sk=wall
Server: Apache/2.2.22 (Debian)
Content-Length: 367
Content-Type: text/html; charset=iso-8859-1
...367 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: fluoridation.biz
Referer: http://www.google.com/search?q=fluoridation.biz
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: fluoridation.biz
Referer: http://www.google.com/search?q=fluoridation.biz
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://fluoridation.biz/ | HTTP/1.1 302 Found Connection: close Date: Wed, 03 Sep 2014 11:01:21 GMT Location: http://www.facebook.com/pages/Fluoridation-Free-Canada-Calgary-Fluoride-Forum/204331926247532?sk=wall Server: Apache/2.2.22 (Debian) Content-Length: 367 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.facebook.com/pages/fluoridation-free-canada-calgary-fluoride-forum/204331926247532?sk=wall | HTTP/1.1 302 forced.302 Connection: close Date: Wed, 03 Sep 2014 11:01:21 GMT Location: https://www.facebook.com/pages/fluoridation-free-canada-calgary-fluoride-forum/204331926247532?sk=wall Content-Length: 0 Content-Type: text/html; charset=utf-8 P3P: CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p" Set-Cookie: datr=AfUGVG6eVi7So1bol3ayaZPW; expires=Fri, 02-Sep-2016 11:01:21 GMT; Max-Age=63072000; path=/; domain=.facebook.com; httponly X-Content-Type-Options: nosniff X-FB-Debug: r3j3Lsy0ilKtoppipdClyNxildeY4kF3DRZrVdvB1tGmRX5WnQbotlm4baIkkaxPACAEMJRwemMyKw6J1lRS2g== X-UA-Compatible: IE=edge,chrome=1 | clean |
https://www.facebook.com/pages/fluoridation-free-canada-calgary-fluoride-forum/204331926247532?sk=wall | HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate Connection: close Date: Wed, 03 Sep 2014 11:01:21 GMT Pragma: no-cache Content-Length: 764 Content-Type: text/html;charset=utf-8 Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p" Set-Cookie: datr=AfUGVHkpPLlcjl8qSZYmn22J; expires=Fri, 02-Sep-2016 11:01:21 GMT; Max-Age=63072000; path=/; domain=.facebook.com; httponly Set-Cookie: next=https%3A%2F%2Fwww.facebook.com%2Fpages%2Ffluoridation-free-canada-calgary-fluoride-forum%2F204331926247532%3Fsk%3Dwall; path=/; domain=.facebook.com; httponly Set-Cookie: next_path=%2Fpages%2Ffluoridation-free-canada-calgary-fluoride-forum%2F204331926247532%3Fsk%3Dwall; path=/; domain=.facebook.com; httponly X-Content-Type-Options: nosniff X-FB-Debug: WOt4TlBgxY3oo9HlwDoq1DX9cAQp08lA0vLvk2QLZPA9Pz1O0lRz0tg3j1mi3pYMi4PqtcAYoItgqsPC8vczBA== X-Frame-Options: DENY X-UA-Compatible: IE=edge,chrome=1 X-XSS-Protection: 0 | clean |
https://www.facebook.com/ | HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate Connection: close Date: Wed, 03 Sep 2014 11:01:22 GMT Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p" Set-Cookie: datr=AvUGVBfNyB_qj-h2aNF3n7EE; expires=Fri, 02-Sep-2016 11:01:22 GMT; Max-Age=63072000; path=/; domain=.facebook.com; httponly Set-Cookie: reg_ext_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.facebook.com Set-Cookie: reg_fb_ref=https%3A%2F%2Fwww.facebook.com%2F; path=/; domain=.facebook.com Set-Cookie: reg_fb_gate=https%3A%2F%2Fwww.facebook.com%2F; path=/; domain=.facebook.com X-Content-Type-Options: nosniff X-FB-Debug: UyDCeXic3Yj6bTI3D4BCG48+np/NroEYc8jUT7uHgyM3s4+70qt0iUpOw8+9Ozt7/4aXyPn2B/LChrdXOnoOyQ== X-Frame-Options: DENY X-UA-Compatible: IE=edge,chrome=1 X-XSS-Protection: 0 | clean |
https://www.facebook.com/?_fb_noscript=1 | 200 OK Content-Length: 62792 Content-Type: text/html | clean |
https://fbstatic-a.akamaihd.net/rsrc.php/v2/yY/r/igJJj8NBPtF.js | 200 OK Content-Length: 97821 Content-Type: application/x-javascript | clean |
http://fluoridation.biz/legal/terms | 404 Not Found Content-Length: 291 Content-Type: text/html | clean |
http://fluoridation.biz/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://fluoridation.biz/about/privacy | 404 Not Found Content-Length: 293 Content-Type: text/html | clean |
http://fluoridation.biz/help/cookies | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://fluoridation.biz/pages/create/ | 404 Not Found Content-Length: 293 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=fluoridation.biz
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://fluoridation.biz/
Result: fluoridation.biz is not infected or malware details are not published yet.
Result: fluoridation.biz is not infected or malware details are not published yet.