Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.gold-club.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.gold-club.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Wed, 20 Aug 2014 19:26:23 GMT Location: http://ifchepa.com/images/img.php Server: Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Content-Length: 357 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://www.gold-club.com/ | 200 OK Content-Length: 1906 Content-Type: text/html | clean |
http://adbiz4you.com/ct.php | 200 OK Content-Length: 1 Content-Type: text/html | clean |
http://adbiz4you.com/test404page.js | 404 Not Found Content-Length: 467 Content-Type: text/html | clean |
http://autobanner.sfipay.net/ct.php | 200 OK Content-Length: 7725 Content-Type: text/html | clean |
http://code.jquery.com/jquery-latest.min.js | 200 OK Content-Length: 95786 Content-Type: application/x-javascript | clean |
http://autobanner.sfipay.net/js/standard.js?rte=1&tm=2&dn=sfipay.net&tid=1020 | 200 OK Content-Length: 1297 Content-Type: text/javascript | clean |
http://autobanner.sfipay.net/js/google_caf.js?rte=1&tm=2&dn=sfipay.net&tid=1020 | 200 OK Content-Length: 9155 Content-Type: text/javascript | clean |
http://www.google.com/adsense/domains/caf.js | 200 OK Content-Length: 258 Content-Type: text/javascript | clean |
http://ads.cpxinteractive.com/ttj?id=1301480 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, private Date: Wed, 20 Aug 2014 19:26:32 GMT Pragma: no-cache Location: http://ib.adnxs.com/ttj?id=1301480 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 | clean |
http://ib.adnxs.com/ttj?id=1301480 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, private Date: Wed, 20 Aug 2014 19:26:32 GMT Pragma: no-cache Location: http://ib.adnxs.com/bounce?%2Fttj%3Fid%3D1301480 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: uuid2=0; path=/; expires=Tue, 18-Nov-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly Set-Cookie: sess=1; path=/; expires=Thu, 21-Aug-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly Set-Cookie: uuid2=92481371310741612; path=/; expires=Tue, 18-Nov-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly X-XSS-Protection: 0 | clean |
http://ib.adnxs.com/bounce?%2fttj%3fid%3d1301480 | 200 OK Content-Length: 1010 Content-Type: text/html | clean |
http://ib.adnxs.com/ttj?ttjb=1&bdc=1408562792&bdh=_XqSibOSS-a2fw3EFGEINjMPsro.'+c+'&id=1301480 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, private Date: Wed, 20 Aug 2014 19:26:32 GMT Pragma: no-cache Location: http://ib.adnxs.com/bounce?%2Fttj%3Fttjb%3D1%26bdc%3D1408562792%26bdh%3D_XqSibOSS-a2fw3EFGEINjMPsro.%27%2Bc%2B%27%26id%3D1301480 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: uuid2=0; path=/; expires=Tue, 18-Nov-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly Set-Cookie: sess=1; path=/; expires=Thu, 21-Aug-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly Set-Cookie: uuid2=6814548671295274418; path=/; expires=Tue, 18-Nov-2014 19:26:32 GMT; domain=.adnxs.com; HttpOnly X-XSS-Protection: 0 | clean |
http://ib.adnxs.com/bounce?%2fttj%3fttjb%3d1%26bdc%3d1408562792%26bdh%3d_xqsiboss-a2fw3efgeinjmpsro.%27%2bc%2b%27%26id%3d1301480 | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://aa.voice2page.com/naa_1x1.js | 200 OK Content-Length: 5323 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=gold-club.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://gold-club.com/
Result: gold-club.com is not infected or malware details are not published yet.
Result: gold-club.com is not infected or malware details are not published yet.