Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: planefaxreports.com
Result:
HTTP/1.1 200 OK
Date: Thu, 21 Aug 2014 13:05:22 GMT
Accept-Ranges: bytes
ETag: "38428d9ef21cf1:b3b3"
Server: Microsoft-IIS/6.0
Content-Length: 18109
Content-Location: http://planefaxreports.com/index.html
Content-Type: text/html
Last-Modified: Mon, 03 Feb 2014 18:41:58 GMT
X-Powered-By: ASP.NET
...18109 bytes of data.
GET / HTTP/1.1
Host: planefaxreports.com
Result:
HTTP/1.1 200 OK
Date: Thu, 21 Aug 2014 13:05:22 GMT
Accept-Ranges: bytes
ETag: "38428d9ef21cf1:b3b3"
Server: Microsoft-IIS/6.0
Content-Length: 18109
Content-Location: http://planefaxreports.com/index.html
Content-Type: text/html
Last-Modified: Mon, 03 Feb 2014 18:41:58 GMT
X-Powered-By: ASP.NET
...18109 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: planefaxreports.com
Referer: http://www.google.com/search?q=planefaxreports.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: planefaxreports.com
Referer: http://www.google.com/search?q=planefaxreports.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://planefaxreports.com/ | HTTP/1.1 200 OK Date: Thu, 21 Aug 2014 13:05:22 GMT Accept-Ranges: bytes ETag: "38428d9ef21cf1:b3b3" Server: Microsoft-IIS/6.0 Content-Length: 18109 Content-Location: http://planefaxreports.com/index.html Content-Type: text/html Last-Modified: Mon, 03 Feb 2014 18:41:58 GMT X-Powered-By: ASP.NET | clean |
http://planefaxreports.com/index.html | 200 OK Content-Length: 18109 Content-Type: text/html | clean |
http://planefaxreports.com/home.html | 200 OK Content-Length: 18065 Content-Type: text/html | clean |
http://planefaxreports.com/advertise.html | 200 OK Content-Length: 12937 Content-Type: text/html | clean |
http://planefaxreports.com/mm_menu.js | 200 OK Content-Length: 30741 Content-Type: application/x-javascript | clean |
http://planefaxreports.com/historyreport.html | 200 OK Content-Length: 14072 Content-Type: text/html | clean |
http://planefaxreports.com/escrowtitle.html | 200 OK Content-Length: 16297 Content-Type: text/html | clean |
http://planefaxreports.com/financial.html | 200 OK Content-Length: 11915 Content-Type: text/html | clean |
http://planefaxreports.com/insurance.html | 200 OK Content-Length: 14192 Content-Type: text/html | clean |
http://form.jotformpro.com/jsform/21726289952969 | 200 OK Content-Length: 12629 Content-Type: text/javascript | clean |
http://planefaxreports.com/contactus.html | 200 OK Content-Length: 8008 Content-Type: text/html | clean |
http://planefaxreports.com/test404page.js | 404 Not Found Content-Length: 1635 Content-Type: text/html | clean |
http://planefaxreports.com/aircraftescrowservices.html | 200 OK Content-Length: 12060 Content-Type: text/html | clean |
http://form.jotformpro.com/jsform/21425477030951 | 200 OK Content-Length: 12605 Content-Type: text/javascript | clean |
http://planefaxreports.com/aircrafttitlesearch.html | 200 OK Content-Length: 20263 Content-Type: text/html | clean |
https://secure.jotformpro.com/jsform/21424898572968 | 200 OK Content-Length: 49139 Content-Type: text/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=planefaxreports.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://planefaxreports.com/
Result: planefaxreports.com is not infected or malware details are not published yet.
Result: planefaxreports.com is not infected or malware details are not published yet.