Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://nortononlinebackup.biz/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: nortononlinebackup.biz Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:11:34 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | malicious |
URL: http://www.symantec.com/norton/online-backup (imitation of visitor from search engine) GET /norton/online-backup HTTP/1.1 Host: www.symantec.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 21 Aug 2014 06:11:34 GMT Location: http://us.norton.com/online-backup Server: AkamaiGHost Content-Length: 0 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://nortononlinebackup.biz/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://nortononlinebackup.biz/test404page.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:11:39 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | clean |
http://www.symantec.com/norton/online-backup | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 21 Aug 2014 06:11:39 GMT Location: http://us.norton.com/online-backup Server: AkamaiGHost Content-Length: 0 | clean |
http://us.norton.com/online-backup | 200 OK Content-Length: 51064 Content-Type: text/html | clean |
http://us.norton.com//ajax.googleapis.com/ajax/libs/jquery/1.4.0/jquery.min.js/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 21 Aug 2014 06:11:42 GMT Location: / Content-Length: 0 Set-Cookie: JSESSIONID=Gb8yT1NpFntlGst1hW7LLTt81sLm7Dz6NjJy0LmyQTTQ7T4v02gR!-1369409720; path=/; HttpOnly Set-Cookie: BIGipServerpool_now-prd2.norton.com=3068224166.33827.0000; path=/ X-Cnection: close X-Powered-By: Servlet/2.5 JSP/2.1 | clean |
http://us.norton.com/ | 200 OK Content-Length: 62472 Content-Type: text/html | clean |
http://us.norton.com//now.symassets.com/now/pu/v0110201101/js/footer.js?_xEncodeUrl=false/ | 200 OK Content-Length: 0 | clean |
http://us.norton.com/test404page.js | 200 OK Content-Length: 0 | clean |
http://nortononlinebackup.biz//now.symassets.com/now/pu/v0110201101/js/header.js?_xEncodeUrl=false/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://nortononlinebackup.biz//nexus.ensighten.com/symantec/scode/om_code_min.js/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:11:48 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | clean |
http://nortononlinebackup.biz//nexus.ensighten.com/symantec/scode/s_code_min.js/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://nortononlinebackup.biz//now.symassets.com/now/pu/v0110201101/js/sym_tealeaf.js/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://nortononlinebackup.biz//nexus.ensighten.com/symantec/Bootstrap.js/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:11:58 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | clean |
http://nortononlinebackup.biz//now.symassets.com/now/pu/v0110201101/js/google-min.js/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:11:59 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | clean |
http://nortononlinebackup.biz//now.symassets.com/now/pu/v0110201101/js/getverisignsealimage-min.js?_xEncodeUrl=false/ | HTTP/1.1 302 Moved Temporarily Date: Thu, 21 Aug 2014 06:12:02 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 Xonnection: close | clean |
http://nortononlinebackup.biz//now.symassets.com/now/pu/v0110201101/js/footer.js?_xEncodeUrl=false/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 21 Aug 2014 06:12:03 GMT Location: http://www.symantec.com/norton/online-backup Server: Oracle-iPlanet-Web-Server/7.0 Content-Length: 0 | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=nortononlinebackup.biz
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://nortononlinebackup.biz/
Result: nortononlinebackup.biz is not infected or malware details are not published yet.
Result: nortononlinebackup.biz is not infected or malware details are not published yet.