Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lprinters.com.br
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lprinters.com.br
Result:
HTTP/1.1 302 Found
Connection: close
Date: Sat, 20 Sep 2014 12:05:17 GMT
Location: http://ww6.lprinters.com.br
Server: nginx
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.4.4-14+deb7u14
...0 bytes of data.
GET / HTTP/1.1
Host: lprinters.com.br
Result:
HTTP/1.1 302 Found
Connection: close
Date: Sat, 20 Sep 2014 12:05:17 GMT
Location: http://ww6.lprinters.com.br
Server: nginx
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.4.4-14+deb7u14
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: lprinters.com.br
Referer: http://www.google.com/search?q=lprinters.com.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lprinters.com.br
Referer: http://www.google.com/search?q=lprinters.com.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://lprinters.com.br/ | HTTP/1.1 302 Found Connection: close Date: Sat, 20 Sep 2014 12:05:17 GMT Location: http://ww6.lprinters.com.br Server: nginx Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.4.4-14+deb7u14 | clean |
http://ww6.lprinters.com.br/ | 200 OK Content-Length: 8204 Content-Type: text/html | clean |
http://d1vbm0eveofcle.cloudfront.net/scripts/js3caf.js | 200 OK Content-Length: 3490 Content-Type: application/javascript | clean |
http://d1vbm0eveofcle.cloudfront.net/scripts/tier2caf.js | 200 OK Content-Length: 28865 Content-Type: application/javascript | clean |
http://lprinters.com.br/scripts/feedmeCaf.php?q=&ip=78.158.11.226&max=10&hl=lt&d=lprinters.com.br&ron=0&adult=0 | HTTP/1.1 302 Found Connection: close Date: Sat, 20 Sep 2014 12:05:19 GMT Location: http://ww9.lprinters.com.br Server: nginx Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.4.4-14+deb7u14 | clean |
http://ww9.lprinters.com.br/ | 200 OK Content-Length: 271 Content-Type: text/html | clean |
http://ww9.lprinters.com.br/test404page.js | 200 OK Content-Length: 272 Content-Type: text/html | clean |