Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mail.kelvin-world.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mail.kelvin-world.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Dec 2014 21:10:00 GMT
Location: http://kelvin-world.com:8088/Webmail/
Server: Apache/2.2.22 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.15
...0 bytes of data.
GET / HTTP/1.1
Host: mail.kelvin-world.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Dec 2014 21:10:00 GMT
Location: http://kelvin-world.com:8088/Webmail/
Server: Apache/2.2.22 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.15
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: mail.kelvin-world.com
Referer: http://www.google.com/search?q=mail.kelvin-world.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mail.kelvin-world.com
Referer: http://www.google.com/search?q=mail.kelvin-world.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://mail.kelvin-world.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 16 Dec 2014 21:10:00 GMT Location: http://kelvin-world.com:8088/Webmail/ Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.15 | clean |
http://kelvin-world.com:8088/webmail/ | HTTP/1.1 302 Found Connection: Close Date: Tue, 16 Dec 2014 21:12:19 GMT Location: http://kelvin-world.com:8088/webmail/login Server: Kerio Connect 8.2.2 Content-Type: application/octet-stream X-UA-Compatible: IE=edge | clean |
http://kelvin-world.com:8088/webmail/login | HTTP/1.1 301 Moved permanently Connection: Close Date: Tue, 16 Dec 2014 21:12:20 GMT Location: http://kelvin-world.com:8088/webmail/login/ Server: Kerio Connect 8.2.2 Content-Type: application/octet-stream X-UA-Compatible: IE=edge | clean |
http://kelvin-world.com:8088/webmail/login/ | HTTP/1.1 302 Found Connection: Close Date: Tue, 16 Dec 2014 21:12:20 GMT Location: ../index2.html Server: Kerio Connect 8.2.2 Content-Type: text/html X-UA-Compatible: IE=edge | clean |
http://kelvin-world.com:8088/webmail/login/../index2.html | 404 Not Found Content-Length: 206 Content-Type: text/html | clean |
http://kelvin-world.com:8088/test404page.js | 404 Not Found Content-Length: 183 Content-Type: text/html | clean |