Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mail.fhjhsy.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mail.fhjhsy.com
Result:
HTTP/1.1 302 Document Moved
Date: Wed, 08 Oct 2014 23:32:32 GMT
Location: /Webmail/
Server: IceWarp/10.1.2
Content-Length: 612
Content-Type: text/html
...612 bytes of data.
GET / HTTP/1.1
Host: mail.fhjhsy.com
Result:
HTTP/1.1 302 Document Moved
Date: Wed, 08 Oct 2014 23:32:32 GMT
Location: /Webmail/
Server: IceWarp/10.1.2
Content-Length: 612
Content-Type: text/html
...612 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: mail.fhjhsy.com
Referer: http://www.google.com/search?q=mail.fhjhsy.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mail.fhjhsy.com
Referer: http://www.google.com/search?q=mail.fhjhsy.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://mail.fhjhsy.com/ | HTTP/1.1 302 Document Moved Date: Wed, 08 Oct 2014 23:32:32 GMT Location: /Webmail/ Server: IceWarp/10.1.2 Content-Length: 612 Content-Type: text/html | clean |
http://mail.fhjhsy.com/webmail/ | HTTP/1.1 200 OK Connection: close Date: Wed, 08 Oct 2014 23:32:33 GMT Server: IceWarp/10.1.2 Content-Type: text/html | clean |
http://mail.fhjhsy.com/webmail/./basic | HTTP/1.1 302 Document Moved Date: Wed, 08 Oct 2014 23:32:36 GMT Location: /webmail/./basic/ Server: IceWarp/10.1.2 Content-Length: 612 Content-Type: text/html | clean |
http://mail.fhjhsy.com/webmail/./basic/ | 200 OK Content-Length: 7105 Content-Type: text/html | clean |
http://mail.fhjhsy.com/webmail/./basic/minimizer/index.php?script=../basic/skin/basic/js/jquery.js,../basic/skin/basic/js/jq_login.js,../basic/skin/default/js/lib.js,../basic/skin/default/js/rsa.js,none | 200 OK Content-Length: 59392 Content-Type: text/javascript | clean |
http://mail.fhjhsy.com/?_n[p][main]=win.login&_n[w]=main&tab=login&PHPSESSID_BASIC=5ccef860614a58ce0d63aea2748358ac | 404 Not Found Content-Length: 610 Content-Type: text/html | clean |
http://mail.fhjhsy.com/test404page.js | 404 Not Found Content-Length: 610 Content-Type: text/html | clean |
http://mail.fhjhsy.com/../?PHPSESSID_BASIC=5ccef860614a58ce0d63aea2748358ac | 404 Not Found Content-Length: 610 Content-Type: text/html | clean |
http://mail.fhjhsy.com/../pda?PHPSESSID_BASIC=5ccef860614a58ce0d63aea2748358ac | 404 Not Found Content-Length: 610 Content-Type: text/html | clean |