Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=hiddenval.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: d4v35hu7s.reseller.hop.clickbank.net
Result:
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Sun, 05 Oct 2014 21:45:34 GMT
Pragma: no-cache
Location: http://d4v35hu7s.reseller.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fwww.clickbank.com%2Fsignup%2F%3Fhop%3Dd4v35hu7s&hstr=1412545534337%7Cd4v35hu7s%7C%7Cw9448bev8n%7Creseller&code=%7B0%7D&key=FADFCE14&parms=&s=default&ds=2
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.C80FFE8B0DF981E4E288C783B6B9F35EA1AEB7EE7B1BBE01BAE68453040B718FEC0E15BB92B43877336BC655DCD6D6C79A8AA552; Domain=.clickbank.net; Expires=Fri, 03-Apr-2015 21:45:34 GMT; Path=/
Set-Cookie: q=01.C4F5F9608839C9CCF10B065A8937AD774DAC743C84DA79570566B7EA56C2968188F557CF36909574BF8E06B921BD3EEA4419E238; Domain=.clickbank.net; Expires=Fri, 04-Oct-2019 21:45:34 GMT; Path=/
...0 bytes of data.
GET / HTTP/1.1
Host: d4v35hu7s.reseller.hop.clickbank.net
Result:
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store
Connection: close
Date: Sun, 05 Oct 2014 21:45:34 GMT
Pragma: no-cache
Location: http://d4v35hu7s.reseller.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fwww.clickbank.com%2Fsignup%2F%3Fhop%3Dd4v35hu7s&hstr=1412545534337%7Cd4v35hu7s%7C%7Cw9448bev8n%7Creseller&code=%7B0%7D&key=FADFCE14&parms=&s=default&ds=2
Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html;charset=UTF-8
Expires: 0
P3P: CP="ADM OUR IND COM"
Set-Cookie: p=01.C80FFE8B0DF981E4E288C783B6B9F35EA1AEB7EE7B1BBE01BAE68453040B718FEC0E15BB92B43877336BC655DCD6D6C79A8AA552; Domain=.clickbank.net; Expires=Fri, 03-Apr-2015 21:45:34 GMT; Path=/
Set-Cookie: q=01.C4F5F9608839C9CCF10B065A8937AD774DAC743C84DA79570566B7EA56C2968188F557CF36909574BF8E06B921BD3EEA4419E238; Domain=.clickbank.net; Expires=Fri, 04-Oct-2019 21:45:34 GMT; Path=/
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: d4v35hu7s.reseller.hop.clickbank.net
Referer: http://www.google.com/search?q=d4v35hu7s.reseller.hop.clickbank.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: d4v35hu7s.reseller.hop.clickbank.net
Referer: http://www.google.com/search?q=d4v35hu7s.reseller.hop.clickbank.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://www.hiddenval.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Thu, 08 Jan 2015 19:04:27 GMT Age: 0 Location: http://www.shankwm.com Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | malicious |
http://www.shankwm.com/ | 200 OK Content-Length: 41771 Content-Type: text/html | clean |
http://www.shankwm.com/wp-includes/js/jquery/jquery.js?ver=1.10.2 | 200 OK Content-Length: 93085 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://www.shankwm.com/test404page.js | 404 Not Found Content-Length: 42312 Content-Type: text/html | clean |
http://www.shankwm.com/wp-content/plugins/easy-social-icons/js/cnss.js?ver=1.0 | 200 OK Content-Length: 289 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.plugins.min.js?ver=3.6.1 | 200 OK Content-Length: 17249 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=3.6.1 | 200 OK Content-Length: 56228 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.3 | 200 OK Content-Length: 4289 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.10.3 | 200 OK Content-Length: 6488 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-includes/js/jquery/ui/jquery.ui.mouse.min.js?ver=1.10.3 | 200 OK Content-Length: 2841 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-includes/js/jquery/ui/jquery.ui.sortable.min.js?ver=1.10.3 | 200 OK Content-Length: 24178 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-content/themes/NixBlue/assets/js/bootstrap.min.js?ver=1.0 | 200 OK Content-Length: 46901 Content-Type: application/javascript | clean |
http://www.shankwm.com/wp-content/themes/NixBlue/assets/js/bootstrapwp.demo.js?ver=1.0 | 200 OK Content-Length: 2471 Content-Type: application/javascript | clean |
http://www.shankwm.com/about-us/ | 200 OK Content-Length: 37729 Content-Type: text/html | clean |
http://www.shankwm.com/wp-includes/js/comment-reply.min.js?ver=3.6.1 | 200 OK Content-Length: 786 Content-Type: application/javascript | clean |
