Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: littlebritain.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 13 Nov 2014 13:15:44 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: 1000gpBAK=R2802426246; path=/; expires=Thu, 13-Nov-2014 14:20:52 GMT
Set-Cookie: 1000gp=R3207743922; path=/; expires=Thu, 13-Nov-2014 14:20:52 GMT
GET / HTTP/1.1
Host: littlebritain.pl
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 13 Nov 2014 13:15:44 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: 1000gpBAK=R2802426246; path=/; expires=Thu, 13-Nov-2014 14:20:52 GMT
Set-Cookie: 1000gp=R3207743922; path=/; expires=Thu, 13-Nov-2014 14:20:52 GMT
Second query (visit from search engine):
GET / HTTP/1.1
Host: littlebritain.pl
Referer: http://www.google.com/search?q=littlebritain.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: littlebritain.pl
Referer: http://www.google.com/search?q=littlebritain.pl
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://littlebritain.pl/ | 200 OK Content-Length: 44076 Content-Type: text/html | clean |
http://littlebritain.pl/lytebox/lytebox.js | 200 OK Content-Length: 39572 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js | 200 OK Content-Length: 72174 Content-Type: text/javascript | clean |
http://littlebritain.pl/jquery.nivo.slider.pack.js | 200 OK Content-Length: 5546 Content-Type: application/javascript | clean |
http://littlebritain.pl/little_britain_historia_prawdziwa.html | 200 OK Content-Length: 53068 Content-Type: text/html | clean |
http://littlebritain.pl/shadow/shadowbox.js | 200 OK Content-Length: 22387 Content-Type: application/javascript | clean |
http://littlebritain.pl/little_britain_guestbook.html | 200 OK Content-Length: 38172 Content-Type: text/html | clean |
http://littlebritain.pl/little_britain_bannery.html | 200 OK Content-Length: 46739 Content-Type: text/html | clean |
http://littlebritain.pl/overlib/overlib.js | 200 OK Content-Length: 50734 Content-Type: application/javascript | clean |
http://littlebritain.pl/little_britain_linki.html | 200 OK Content-Length: 60070 Content-Type: text/html | clean |
http://littlebritain.pl/autor.html | 200 OK Content-Length: 46618 Content-Type: text/html | clean |
http://littlebritain.pl/swfobject2.js | 200 OK Content-Length: 8872 Content-Type: application/javascript | clean |
http://littlebritain.pl/little_britain_pl-o_stronie.html | 200 OK Content-Length: 43797 Content-Type: text/html | clean |
http://littlebritain.pl/come_fly_with_me.html | 200 OK Content-Length: 66579 Content-Type: text/html | clean |
http://littlebritain.pl/come_fly_with_me_postacie.html | 200 OK Content-Length: 63132 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=littlebritain.pl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://littlebritain.pl/
Result: littlebritain.pl is not infected or malware details are not published yet.
Result: littlebritain.pl is not infected or malware details are not published yet.