Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=movingrates.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: movingrates.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 29 Jan 2015 02:50:48 GMT
Server: Apache/2.2.20 (Ubuntu)
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-Pingback: http://movingrates.org/xmlrpc.php
X-Powered-By: PHP/5.3.6-13ubuntu3.6
GET / HTTP/1.1
Host: movingrates.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 29 Jan 2015 02:50:48 GMT
Server: Apache/2.2.20 (Ubuntu)
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
X-Pingback: http://movingrates.org/xmlrpc.php
X-Powered-By: PHP/5.3.6-13ubuntu3.6
Second query (visit from search engine):
GET / HTTP/1.1
Host: movingrates.org
Referer: http://www.google.com/search?q=movingrates.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: movingrates.org
Referer: http://www.google.com/search?q=movingrates.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.movingrates.org/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 29 Jan 2015 02:50:48 GMT Location: http://movingrates.org/ Server: Apache/2.2.20 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://movingrates.org/xmlrpc.php X-Powered-By: PHP/5.3.6-13ubuntu3.6 | clean |
http://movingrates.org/ | 200 OK Content-Length: 25612 Content-Type: text/html | clean |
http://code.jquery.com/jquery-1.6.2.js | 200 OK Content-Length: 236202 Content-Type: application/x-javascript | clean |
http://cloud.github.com/downloads/digitalBush/jquery.maskedinput/jquery.maskedinput-1.3.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 29 Jan 2015 02:48:33 GMT Via: 1.1 e4ca4cda151bfaafc5a93061751d1142.cloudfront.net (CloudFront) Location: https://cloud.github.com/downloads/digitalBush/jquery.maskedinput/jquery.maskedinput-1.3.js Server: CloudFront Content-Length: 183 Content-Type: text/html X-Amz-Cf-Id: r0Eyx_li1C_MazS5ODyfXontNK8ZiLJlFQlPnYvPAmOg0pCeOi9VgQ== X-Cache: Redirect from cloudfront | clean |
https://cloud.github.com/downloads/digitalbush/jquery.maskedinput/jquery.maskedinput-1.3.js | 403 Forbidden Content-Length: 243 Content-Type: application/xml | clean |
http://cloud.github.com/test404page.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 29 Jan 2015 02:48:34 GMT Via: 1.1 c1639d907cade557ebff29e5be78b0b6.cloudfront.net (CloudFront) Location: https://cloud.github.com/test404page.js Server: CloudFront Content-Length: 183 Content-Type: text/html X-Amz-Cf-Id: g9wmJxZkhAtQVssZOLbkkwZC7Qtpubxtjdng7dasRo5X6N4c1cfBoQ== X-Cache: Redirect from cloudfront | clean |
https://cloud.github.com/test404page.js | 403 Forbidden Content-Length: 231 Content-Type: application/xml | clean |
http://www.movingrates.org/form/form-js/cities.js | 200 OK Content-Length: 7242 Content-Type: application/javascript | clean |
http://www.movingrates.org/form/form-js/dates.js | 200 OK Content-Length: 2534 Content-Type: application/javascript | clean |
http://www.movingrates.org/form/form-js/step-2.js | 200 OK Content-Length: 10909 Content-Type: application/javascript | clean |
http://www.movingrates.org/form/form-js/check.js | 200 OK Content-Length: 3259 Content-Type: application/javascript | clean |