Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=healthcareandrehab.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://healthcareandrehab.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: healthcareandrehab.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 12 Nov 2013 18:13:06 GMT
Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev
Content-Length: 10613
Content-Type: text/html; charset=utf-8
X-Powered-By: PHP/5.4.21
...10613 bytes of data.
GET / HTTP/1.1
Host: healthcareandrehab.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 12 Nov 2013 18:13:06 GMT
Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev
Content-Length: 10613
Content-Type: text/html; charset=utf-8
X-Powered-By: PHP/5.4.21
...10613 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: healthcareandrehab.com
Referer: http://www.google.com/search?q=healthcareandrehab.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: healthcareandrehab.com
Referer: http://www.google.com/search?q=healthcareandrehab.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://healthcareandrehab.com/ | 200 OK Content-Length: 10613 Content-Type: text/html | clean |
http://w.sharethis.com/button/buttons.js | 200 OK Content-Length: 130543 Content-Type: application/x-javascript | clean |
http://healthcareandrehab.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 302 Found Connection: close Date: Tue, 12 Nov 2013 18:13:08 GMT Location: http://www.nk.ca/index.shtml Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev Content-Length: 378 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.nk.ca/index.shtml | 200 OK Content-Length: 21704 Content-Type: text/html | clean |
http://www.nk.ca/urchin.js | HTTP/1.1 302 Found Connection: close Date: Tue, 12 Nov 2013 18:13:10 GMT Location: http://www.nk.ca/index.shtml Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev Content-Length: 365 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.nk.ca/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 12 Nov 2013 18:13:11 GMT Location: http://www.nk.ca/index.shtml Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev Content-Length: 365 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.nk.ca/quant.js | HTTP/1.1 302 Found Connection: close Date: Tue, 12 Nov 2013 18:13:11 GMT Location: http://www.nk.ca/index.shtml Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev Content-Length: 365 Content-Type: text/html; charset=iso-8859-1 | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6894 Content-Type: application/x-javascript | clean |
http://i.po.st/static/script/post-widget.js | 200 OK Content-Length: 92554 Content-Type: application/x-javascript | clean |
http://healthcareandrehab.com//static.getclicky.com/js/ | HTTP/1.1 302 Found Connection: close Date: Tue, 12 Nov 2013 18:13:12 GMT Location: http://www.nk.ca/index.shtml Server: Apache/2.0.64 (Unix) DAV/2 mod_python/3.3.1 Python/2.5.6 PHP/5.4.21 mod_ssl/2.0.64 OpenSSL/1.0.2-dev Content-Length: 378 Content-Type: text/html; charset=iso-8859-1 | clean |