Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=gwhtel.de
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://gwhtel.de/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: xuyuhui.com
Result:
HTTP/1.1 404 Not Found
Date: Sat, 04 Oct 2014 18:39:02 GMT
Server: IIS
Content-Length: 1308
Content-Type: text/html
X-Powered-By: WAF/2.0
...1308 bytes of data.
GET / HTTP/1.1
Host: xuyuhui.com
Result:
HTTP/1.1 404 Not Found
Date: Sat, 04 Oct 2014 18:39:02 GMT
Server: IIS
Content-Length: 1308
Content-Type: text/html
X-Powered-By: WAF/2.0
...1308 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: xuyuhui.com
Referer: http://www.google.com/search?q=xuyuhui.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: xuyuhui.com
Referer: http://www.google.com/search?q=xuyuhui.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://gwhtel.de/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=0 Connection: close Date: Tue, 01 Apr 2014 03:16:40 GMT Location: http://www.gwhtel.de/ Server: Apache/2.2.23 (CentOS) Vary: Accept-Encoding Content-Length: 304 Content-Type: text/html; charset=iso-8859-1 Expires: Tue, 01 Apr 2014 03:16:40 GMT | clean |
http://www.gwhtel.de/ | 200 OK Content-Length: 9836 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1958 bytes skipped]... - indexer::stop --> <div class="mod_navigation block"> <a href="#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region sibling first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region sibling first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service sibling"><a href="service.html" title="Service" class="submenu service sibling">Service</a> <ul class="level_2"> <li class="first"><a href="ueber-uns.html ...[9697 bytes skipped]... | ||
http://www.gwhtel.de/system/scripts/e53a815ab435.js | 200 OK Content-Length: 180027 Content-Type: application/javascript | clean |
http://gwhtel.de/tl_files/gwhtel_folder/js/functions.js | 200 OK Content-Length: 1439 Content-Type: application/javascript | clean |
http://gwhtel.de/halstenbek.html | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=0 Connection: close Date: Tue, 01 Apr 2014 03:16:42 GMT Location: http://www.gwhtel.de/halstenbek.html Server: Apache/2.2.23 (CentOS) Vary: Accept-Encoding Content-Length: 319 Content-Type: text/html; charset=iso-8859-1 Expires: Tue, 01 Apr 2014 03:16:42 GMT | clean |
http://www.gwhtel.de/halstenbek.html | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 01 Apr 2014 03:16:42 GMT Pragma: no-cache Location: http://halstenbek.gwhtel.de/tarife.html Server: Apache/2.2.23 (CentOS) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=iso-8859-1 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=j3sss21ldpofpas0p5nj2gvep6; path=/ X-Powered-By: PHP/5.3.27 | malicious |
http://halstenbek.gwhtel.de/tarife.html | 200 OK Content-Length: 12339 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.gwhtel.de ...[1238 bytes skipped]... ype="text/css" media="print" /> <script type="text/javascript" src="system/scripts/e53a815ab435.js"></script> <script type="text/javascript" src="/tl_files/gwhtel_folder/js/functions.js"></script> </head> <body id="top" class="tpl_hb " > <div id="content_wrapper"> <div id="header"> <div id="logo"> <a href="http://www.gwhtel.de" title="Startseite" class="header_logo"><img src="tl_files/gwhtel_folder/layout/gwhtel_logo.png" alt="GWHtel Logo" /></a> </div> <div id="icons"> <a href="/internet.html" title="Internet"><img src="tl_files/gwhtel_folder/layout/btn_internet.png" alt="Internet" /></a> <a href="/fernsehen.html" title="Fernsehen"><img src="tl_files/gwhtel_folder/layout/btn_tv.png" alt="Fernsehen" />& ...[13508 bytes skipped]... | ||
http://halstenbek.gwhtel.de/system/scripts/e53a815ab435.js | 200 OK Content-Length: 180027 Content-Type: application/javascript | clean |
http://gwhtel.de/internet.html | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=0 Connection: close Date: Tue, 01 Apr 2014 03:16:43 GMT Location: http://www.gwhtel.de/internet.html Server: Apache/2.2.23 (CentOS) Vary: Accept-Encoding Content-Length: 317 Content-Type: text/html; charset=iso-8859-1 Expires: Tue, 01 Apr 2014 03:16:43 GMT | clean |
http://www.gwhtel.de/internet.html | 200 OK Content-Length: 10573 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1945 bytes skipped]... ;!-- indexer::stop --> <div class="mod_navigation block"> <a href="internet.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service"><a href="service.html" title="Service" class="submenu service">Service</a> <ul class="level_2"> <li class="first"><a href="ueber-uns.html" title="Ãber u ...[10635 bytes skipped]... | ||
http://www.gwhtel.de/tl_files/gwhtel_folder/js/functions.js | 200 OK Content-Length: 1439 Content-Type: application/javascript | clean |
http://gwhtel.de/service.html | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=0 Connection: close Date: Tue, 01 Apr 2014 03:16:44 GMT Location: http://www.gwhtel.de/service.html Server: Apache/2.2.23 (CentOS) Vary: Accept-Encoding Content-Length: 316 Content-Type: text/html; charset=iso-8859-1 Expires: Tue, 01 Apr 2014 03:16:44 GMT | clean |
http://www.gwhtel.de/service.html | 200 OK Content-Length: 10287 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1974 bytes skipped]... top --> <div class="mod_navigation block"> <a href="service.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region sibling first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region sibling first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="active submenu service"><span class="active submenu service">Service</span> <ul class="level_2"> <li class="first"><a href="ueber-uns.html" title="Ãber uns" class="first ...[10569 bytes skipped]... | ||
http://www.gwhtel.de/ueber-uns.html | 200 OK Content-Length: 10401 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1939 bytes skipped]... !-- indexer::stop --> <div class="mod_navigation block"> <a href="ueber-uns.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="active first"><span class="active ...[10189 bytes skipped]... | ||
http://www.gwhtel.de/news.html | 200 OK Content-Length: 12766 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1937 bytes skipped]... ><!-- indexer::stop --> <div class="mod_navigation block"> <a href="news.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[13319 bytes skipped]... | ||
http://www.gwhtel.de/thema-glasfaser.html | 200 OK Content-Length: 11021 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1963 bytes skipped]... dexer::stop --> <div class="mod_navigation block"> <a href="thema-glasfaser.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[11155 bytes skipped]... | ||
http://www.gwhtel.de/enewsletter.html | 200 OK Content-Length: 11155 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1961 bytes skipped]... - indexer::stop --> <div class="mod_navigation block"> <a href="enewsletter.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[11546 bytes skipped]... | ||
http://www.gwhtel.de/faq.html | 200 OK Content-Length: 11004 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1947 bytes skipped]... /><!-- indexer::stop --> <div class="mod_navigation block"> <a href="faq.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[10903 bytes skipped]... | ||
http://www.gwhtel.de/Datenschutz.html | 200 OK Content-Length: 15604 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1965 bytes skipped]... - indexer::stop --> <div class="mod_navigation block"> <a href="Datenschutz.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[16267 bytes skipped]... | ||
http://www.gwhtel.de/stoerungen.html | 200 OK Content-Length: 10204 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: halstenbek.gwhtel.de ...[1961 bytes skipped]... -- indexer::stop --> <div class="mod_navigation block"> <a href="stoerungen.html#skipNavigation24" class="invisible">Navigation überspringen</a> <ul class="level_1"> <li class="submenu region first"><a href="halstenbek.html" title="Anschlussgebiete" class="submenu region first">Anschlussgebiete</a> <ul class="level_2"> <li class="first"><a href="http://halstenbek.gwhtel.de/tarife.html" title="Halstenbek" class="first">Halstenbek</a></li> <li class="last"><a href="http://rellingen.gwhtel.de/tarife.html" title="Rellingen" class="last">Rellingen</a></li> </ul> </li> <li class="submenu service trail"><a href="service.html" title="Service" class="submenu service trail">Service</a> <ul class="level_2"> <li class="sibling first"><a href="ueber-uns. ...[10026 bytes skipped]... |