Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://jeeok.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: jeeok.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Mon, 29 Sep 2014 16:43:32 GMT Location: http://click.linktech.cn/?m=360buy&a=A100013136&l=99999&l_cd1=0&l_cd2=1&u_id=okjee1&tu=http%3A%2F%2Fwww.jd.com Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html | malicious |
URL: http://click.linktech.cn/?m=360buy&a=A100013136&l=99999&l_cd1=0&l_cd2=1&u_id=okjee1&tu=http%3A%2F%2Fwww.jd.com (imitation of visitor from search engine) GET /?m=360buy&a=A100013136&l=99999&l_cd1=0&l_cd2=1&u_id=okjee1&tu=http%3A%2F%2Fwww.jd.com HTTP/1.1 Host: click.linktech.cn Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Found Connection: close Date: Mon, 29 Sep 2014 16:43:34 GMT Location: http://www.jd.com Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 PHP/5.2.14 Content-Length: 1 Content-Type: text/html P3P: CP="NOI DEVa TAIa OUR BUS UNI" Set-Cookie: LPUID=20140930004334-86473; expires=Thu, 28-Sep-2017 16:43:34 GMT; path=/; domain=.linktech.cn Set-Cookie: DUP_CHECK=360buyA1000131369999901 X-Powered-By: PHP/5.2.14 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://jeeok.com/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://jeeok.com/test404page.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Mon, 29 Sep 2014 16:43:36 GMT Location: http://click.linktech.cn/?m=360buy&a=A100013136&l=99999&l_cd1=0&l_cd2=1&u_id=okjee1&tu=http%3A%2F%2Fwww.jd.com Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html | clean |
http://click.linktech.cn/?m=360buy&a=a100013136&l=99999&l_cd1=0&l_cd2=1&u_id=okjee1&tu=http%3a%2f%2fwww.jd.com | HTTP/1.1 302 Found Connection: close Date: Mon, 29 Sep 2014 16:43:38 GMT Location: http://www.gw8888.com Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 PHP/5.2.14 Content-Length: 0 Content-Type: text/html URI: http://www.gw8888.com X-Powered-By: PHP/5.2.14 | clean |
http://www.gw8888.com/ | 200 OK Content-Length: 39088 Content-Type: text/html | clean |
http://www.gw8888.com/js/lunbo.js | 200 OK Content-Length: 57288 Content-Type: application/javascript | clean |
http://www.gw8888.com/js/menu.js | 200 OK Content-Length: 4192 Content-Type: application/javascript | clean |
http://www.gw8888.com/js/search.js | 200 OK Content-Length: 1697 Content-Type: application/javascript | clean |
http://www.gw8888.com/js/center.js | 200 OK Content-Length: 231 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=jeeok.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://jeeok.com/
Result: jeeok.com is not infected or malware details are not published yet.
Result: jeeok.com is not infected or malware details are not published yet.