Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: miniflugpreis.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 12 May 2014 17:26:04 GMT
Accept-Ranges: bytes
ETag: "f18bb48a-51f5-4f7ce9d1c436e"
Server: Apache
Content-Length: 20981
Content-Type: text/html
Last-Modified: Thu, 24 Apr 2014 19:11:18 GMT
...20981 bytes of data.
GET / HTTP/1.1
Host: miniflugpreis.de
Result:
HTTP/1.1 200 OK
Connection: close
Date: Mon, 12 May 2014 17:26:04 GMT
Accept-Ranges: bytes
ETag: "f18bb48a-51f5-4f7ce9d1c436e"
Server: Apache
Content-Length: 20981
Content-Type: text/html
Last-Modified: Thu, 24 Apr 2014 19:11:18 GMT
...20981 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: miniflugpreis.de
Referer: http://www.google.com/search?q=miniflugpreis.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: miniflugpreis.de
Referer: http://www.google.com/search?q=miniflugpreis.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://miniflugpreis.de/ | 200 OK Content-Length: 20981 Content-Type: text/html | clean |
http://images.opodo.com/affiliates/de/de_qs_aff_2021_120x600/de_qs_aff_2021_120x600_js.js | 200 OK Content-Length: 467 Content-Type: application/javascript | clean |
http://miniflugpreis.de/flug-mit-aer-Lingus.htm | 200 OK Content-Length: 16607 Content-Type: text/html | clean |
http://miniflugpreis.de/frankfurt-london-flug-buchen.htm | 200 OK Content-Length: 16656 Content-Type: text/html | clean |
http://images.opodo.com/affiliates/de/de_qs_aff_2005_468x150/de_qs_aff_2005_468x150_js.js | 200 OK Content-Length: 467 Content-Type: application/javascript | clean |
http://miniflugpreis.de/flug-mit-brussels-airlines.htm | 200 OK Content-Length: 25359 Content-Type: text/html | clean |
http://miniflugpreis.de/flug-mit-emirates.htm | 200 OK Content-Length: 17423 Content-Type: text/html | clean |
http://miniflugpreis.de/iceland-express-flug.htm | 200 OK Content-Length: 18814 Content-Type: text/html | clean |
http://miniflugpreis.de/Finnair/finnair-flug-buchen.htm | 200 OK Content-Length: 15697 Content-Type: text/html | clean |
http://miniflugpreis.de/test404page.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
http://miniflugpreis.de/flug-mit-klm.htm | 200 OK Content-Length: 22622 Content-Type: text/html | clean |
http://banners.webmasterplan.com/view.asp?ref=385525&site=7952&type=html&hnb=16&js=1 | HTTP/1.1 302 Found Cache-Control: private Date: Mon, 12 May 2014 17:26:08 GMT Location: http://html-links.com/banners/7952/html16.asp?ref=385525&site=7952&type=html&hnb=16&js=1 Server: Microsoft-IIS/6.0 Content-Length: 221 Content-Type: text/html; charset=utf-8 P3P: CP="STP CUR OUR" X-AspNet-Version: 4.0.30319 X-AspNetMvc-Version: 4.0 X-Powered-By: ASP.NET | clean |
http://html-links.com/banners/7952/html16.asp?ref=385525&site=7952&type=html&hnb=16&js=1 | 200 OK Content-Length: 5631 Content-Type: text/html | clean |
http://miniflugpreis.de/LAN-Flug-buchen.htm | 200 OK Content-Length: 33224 Content-Type: text/html | clean |
http://miniflugpreis.de/lan-flug-buchen-online.htm | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 12 May 2014 17:26:09 GMT Location: http://miniflugpreis.de/LAN-flug-buchen-online.htm Server: Apache Content-Length: 258 Content-Type: text/html; charset=iso-8859-1 | clean |
http://miniflugpreis.de/Lauda-Air/lauda-air-flug-buchen.htm | 200 OK Content-Length: 20949 Content-Type: text/html | clean |
http://miniflugpreis.de/Lauda-Air/frankfurt-london-flug-buchen.htm | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=miniflugpreis.de
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://miniflugpreis.de/
Result: miniflugpreis.de is not infected or malware details are not published yet.
Result: miniflugpreis.de is not infected or malware details are not published yet.