Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=offerstobuy.eu
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.offerstobuy.eu/ | 200 OK Content-Length: 36868 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) Event.onLoad(window.apple.ai.init); Antivirus reports:
| ||
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/bootstrap.js | 200 OK Content-Length: 25019 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/coherent.js | 200 OK Content-Length: 193174 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/apple.js | 200 OK Content-Length: 301579 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/optimizely_us.js | 200 OK Content-Length: 241805 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/chat.js | 200 OK Content-Length: 27737 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/checkout.js | 200 OK Content-Length: 179583 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/signin.js | 200 OK Content-Length: 6635 Content-Type: application/javascript | clean |
https://store.storeimages.cdn-apple.com/3899/store.apple.com/rs/rel/omniture.js | 200 OK Content-Length: 44785 Content-Type: application/javascript | clean |
http://www.offerstobuy.eu/us | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 16:56:06 GMT Location: http://www.offerstobuy.eu/us/ Server: Apache/2.2.16 (Debian) Content-Length: 321 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/us/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 16:56:06 GMT Location: http://www.offerstobuy.eu/ Server: Apache/2.2.16 (Debian) Content-Length: 318 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/test404page.js | HTTP/1.1 302 Found Connection: close Date: Wed, 16 Apr 2014 16:56:06 GMT Location: http://www.offerstobuy.eu/neexistujici-stranka Server: Apache/2.2.16 (Debian) Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/neexistujici-stranka | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 16:56:06 GMT Location: http://www.offerstobuy.eu/neexistujici-stranka/ Server: Apache/2.2.16 (Debian) Content-Length: 339 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/neexistujici-stranka/ | 200 OK Content-Length: 36868 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) Event.onLoad(window.apple.ai.init); Antivirus reports:
| ||
http://www.offerstobuy.eu/us/order/list | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 16:56:07 GMT Location: http://www.offerstobuy.eu/us/order/list/ Server: Apache/2.2.16 (Debian) Content-Length: 332 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/us/order/list/ | HTTP/1.1 302 Found Connection: close Date: Wed, 16 Apr 2014 16:56:07 GMT Location: http://www.offerstobuy.eu/neexistujici-stranka Server: Apache/2.2.16 (Debian) Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/us/order/home/return/page | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 16 Apr 2014 16:56:07 GMT Location: http://www.offerstobuy.eu/us/order/home/return/page/ Server: Apache/2.2.16 (Debian) Content-Length: 344 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.offerstobuy.eu/us/order/home/return/page/ | HTTP/1.1 302 Found Connection: close Date: Wed, 16 Apr 2014 16:56:07 GMT Location: http://www.offerstobuy.eu/neexistujici-stranka Server: Apache/2.2.16 (Debian) Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: offerstobuy.eu
Result:
GET / HTTP/1.1
Host: offerstobuy.eu
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: offerstobuy.eu
Referer: http://www.google.com/search?q=offerstobuy.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: offerstobuy.eu
Referer: http://www.google.com/search?q=offerstobuy.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.