Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ns1.gmai.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ns1.gmai.com
Result:
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Sun, 01 Mar 2015 11:36:05 GMT
Location: http://048700mz2f3zddl0ca.catanexus.net/?sov=gmai.com
Server: nginx/1.1.19
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.10
GET / HTTP/1.1
Host: ns1.gmai.com
Result:
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Sun, 01 Mar 2015 11:36:05 GMT
Location: http://048700mz2f3zddl0ca.catanexus.net/?sov=gmai.com
Server: nginx/1.1.19
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.10
Second query (visit from search engine):
GET / HTTP/1.1
Host: ns1.gmai.com
Referer: http://www.google.com/search?q=ns1.gmai.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ns1.gmai.com
Referer: http://www.google.com/search?q=ns1.gmai.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://ns1.gmai.com/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:36:05 GMT Location: http://048700mz2f3zddl0ca.catanexus.net/?sov=gmai.com Server: nginx/1.1.19 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.10 | clean |
http://048700mz2f3zddl0ca.catanexus.net/?sov=gmai.com | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:34:11 GMT Location: http://Z43zz.exclusiverewardzone.islandgovernor.xyz/?sov=173652&hid=eoookeomeigege Server: nginx/1.4.2 Content-Type: text/html X-Powered-By: PHP/5.3.3 | clean |
http://z43zz.exclusiverewardzone.islandgovernor.xyz/?sov=173652&hid=eoookeomeigege | 200 OK Content-Length: 12382 Content-Type: text/html | clean |
http://z43zz.exclusiverewardzone.islandgovernor.xyz/terms/privacy.html | 200 OK Content-Length: 24274 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.4/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: text/javascript | clean |
http://z43zz.exclusiverewardzone.islandgovernor.xyz/templates/_common/footer_links/js/script.js | 200 OK Content-Length: 5674 Content-Type: application/javascript | clean |
http://z43zz.exclusiverewardzone.islandgovernor.xyz//translate.google.com/translate_a/element.js?cb=googleTranslateElementInit/ | 404 Not Found Content-Length: 570 Content-Type: text/html | clean |
http://z43zz.exclusiverewardzone.islandgovernor.xyz/test404page.js | 404 Not Found Content-Length: 570 Content-Type: text/html | clean |
http://ns1.gmai.com/terms/terms.html | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:36:34 GMT Location: / Server: nginx/1.1.19 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.10 | clean |
http://ns1.gmai.com/terms/aboutus.html | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:36:35 GMT Location: / Server: nginx/1.1.19 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.10 | clean |
http://ns1.gmai.com/terms/privacy.html | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:36:36 GMT Location: / Server: nginx/1.1.19 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.10 | clean |
http://ns1.gmai.com//exclusiverewardzone.islandgovernor.xyz/admin_config/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 01 Mar 2015 11:36:12 GMT Location: / Server: nginx/1.1.19 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.10 | clean |