Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lebanontraining.com
Result:
GET / HTTP/1.1
Host: lebanontraining.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: lebanontraining.com
Referer: http://www.google.com/search?q=lebanontraining.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lebanontraining.com
Referer: http://www.google.com/search?q=lebanontraining.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.lebanontraining.com/ | HTTP/1.1 302 Found Connection: close Date: Sat, 10 Oct 2015 20:37:25 GMT Location: http://185.93.187.90/8b2C Server: Apache Content-Length: 282 Content-Type: text/html; charset=iso-8859-1 | clean |
http://185.93.187.90/8b2c | HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=0 Connection: close Date: Sun, 11 Oct 2015 06:39:03 GMT Pragma: no-cache Location: http://aol.com Server: nginx/1.8.0 Content-Type: text/html; charset=utf-8 Expires: Thu, 21 Jul 1977 07:30:00 GMT Last-Modified: Sun, 11 Oct 2015 06:39:03 GMT X-Powered-By: PHP/5.6.13 | clean |
http://aol.com/ | HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Date: Sat, 10 Oct 2015 20:37:26 GMT Location: http://www.aol.com/ Server: Apache Content-Length: 227 Content-Type: text/html; charset=iso-8859-1 Keep-Alive: timeout=15, max=9937 | clean |
http://www.aol.com/ | 200 OK Content-Length: 141415 Content-Type: text/html | clean |
http://portal.aolcdn.com/o.aolcdn.com/fonts/faw1kht.js.pagespeed.jm.xDwd8qSBeA.js | 200 OK Content-Length: 20351 Content-Type: application/javascript | clean |
http://o.aolcdn.com/os_merge/?file=/ads/adsWrapper.js | 200 OK Content-Length: 40429 Content-Type: application/javascript | clean |
http://portal.aolcdn.com/o.aolcdn.com/os/aol/omniture.min.js.pagespeed.ce.PQC9PI6SM1.js | 200 OK Content-Length: 58522 Content-Type: application/javascript | clean |
http://portal.aolcdn.com/p5/_v124.15/js/responsive-main.js.pagespeed.jm.rT7tJLBjvx.js | 200 OK Content-Length: 302233 Content-Type: application/x-javascript | clean |
http://www.lebanontraining.com//feedback.aol.com/aol-feedback-plugin/aol-feedback-loader-latest.min.js/ | HTTP/1.1 302 Found Connection: close Date: Sat, 10 Oct 2015 20:37:29 GMT Location: http://185.93.187.90/8b2C Server: Apache Content-Length: 282 Content-Type: text/html; charset=iso-8859-1 | clean |
http://185.93.187.90/test404page.js | 404 Not Found Content-Length: 570 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lebanontraining.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://lebanontraining.com/
Result: lebanontraining.com is not infected or malware details are not published yet.
Result: lebanontraining.com is not infected or malware details are not published yet.