Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.internationalhifu.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.internationalhifu.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Fri, 23 May 2014 05:28:37 GMT Location: http://tdson.com/glav Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.3.20 | malicious |
URL: http://tdson.com/glav/ (imitation of visitor from search engine) GET /glav/ HTTP/1.1 Host: tdson.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Found Connection: close Date: Fri, 23 May 2014 07:23:18 GMT Location: http://canadapharmacyonlinerx.com/ Server: Apache/2 Content-Length: 279 Content-Type: text/html; charset=iso-8859-1 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://www.internationalhifu.com/ | 200 OK Content-Length: 37350 Content-Type: text/html | clean |
http://www.internationalhifu.com/templates/beez_20/js/jquery.min.js | 200 OK Content-Length: 94840 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/media/system/js/core.js | 200 OK Content-Length: 4225 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/media/system/js/mootools-core.js | 200 OK Content-Length: 88540 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/media/system/js/caption.js | 200 OK Content-Length: 800 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/media/system/js/mootools-more.js | 200 OK Content-Length: 238128 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/templates/beez_20/javascript/md_stylechanger.js | 200 OK Content-Length: 2104 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/media/mod_vt_nivo_slider/js/jquery.nivo.slider.min.js | 200 OK Content-Length: 12389 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/modules/mod_ariextmenu/mod_ariextmenu/js/ext-core.js | 200 OK Content-Length: 85836 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/modules/mod_ariextmenu/mod_ariextmenu/js/menu.min.js | 200 OK Content-Length: 4534 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/templates/beez_20/js/modernizr.foundation.js | 200 OK Content-Length: 6705 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/templates/beez_20/js/languages/jquery.validationEngine-en.js | 200 OK Content-Length: 7310 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/templates/beez_20/js/jquery.validationEngine.js | 200 OK Content-Length: 47095 Content-Type: application/javascript | clean |
http://www.internationalhifu.com/templates/beez_20/js/app.js | 200 OK Content-Length: 4782 Content-Type: application/javascript | clean |
http://www.internationalhifu.com//www.googleadservices.com/pagead/conversion.js/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Fri, 23 May 2014 05:28:52 GMT Location: / Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Content-Length: 0 Content-Type: text/html Set-Cookie: 0c377bdba046872733cf762b53495fba=001755738f77ab262f54f6c88a54a1bc; path=/ X-Powered-By: PHP/5.3.20 | clean |
http://www.internationalhifu.com/test404page.js | 404 Not Found Content-Length: 518 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=internationalhifu.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://internationalhifu.com/
Result: internationalhifu.com is not infected or malware details are not published yet.
Result: internationalhifu.com is not infected or malware details are not published yet.