Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: openshopping.net.br
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Wed, 04 Mar 2015 04:31:05 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=47f94d0b665ec8d719e14d77d39ba6f7; path=/
X-Powered-By: PHP/5.2.13
GET / HTTP/1.1
Host: openshopping.net.br
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Wed, 04 Mar 2015 04:31:05 GMT
Pragma: no-cache
Server: Apache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=47f94d0b665ec8d719e14d77d39ba6f7; path=/
X-Powered-By: PHP/5.2.13
Second query (visit from search engine):
GET / HTTP/1.1
Host: openshopping.net.br
Referer: http://www.google.com/search?q=openshopping.net.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: openshopping.net.br
Referer: http://www.google.com/search?q=openshopping.net.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://openshopping.net.br/ | 200 OK Content-Length: 12213 Content-Type: text/html | clean |
http://openshopping.net.br/js/jquery-1.7.1.min.js | 200 OK Content-Length: 93867 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/js/jquery.easing.1.3.min.js | 200 OK Content-Length: 7044 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/js/jquery.wt-rotator.min.js | 200 OK Content-Length: 45614 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/?PHPSESSID=47f94d0b665ec8d719e14d77d39ba6f7 | 200 OK Content-Length: 12213 Content-Type: text/html | clean |
http://openshopping.net.br/o-shopping/?PHPSESSID=47f94d0b665ec8d719e14d77d39ba6f7 | 200 OK Content-Length: 9013 Content-Type: text/html | clean |
http://openshopping.net.br/o-shopping/../js/jquery-1.7.1.min.js | 200 OK Content-Length: 93867 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/o-shopping/../js/jquery.easing.1.3.min.js | 200 OK Content-Length: 7044 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/o-shopping/../js/jquery.wt-rotator.min.js | 200 OK Content-Length: 45614 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/o-shopping/ | 200 OK Content-Length: 9013 Content-Type: text/html | clean |
http://openshopping.net.br/lojas/ | 200 OK Content-Length: 18677 Content-Type: text/html | clean |
http://openshopping.net.br/lojas/../js/jquery-1.7.1.min.js | 200 OK Content-Length: 93867 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/lojas/../js/jquery.easing.1.3.min.js | 200 OK Content-Length: 7044 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/lojas/../js/jquery.wt-rotator.min.js | 200 OK Content-Length: 45614 Content-Type: application/x-javascript | clean |
http://openshopping.net.br/?PHPSESSID=ec560da7a817fe507d0c805a72232ca1 | 200 OK Content-Length: 12213 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=openshopping.net.br
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://openshopping.net.br/
Result: openshopping.net.br is not infected or malware details are not published yet.
Result: openshopping.net.br is not infected or malware details are not published yet.