Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: protezionecivileunita59.org
Result:
HTTP/1.1 200 OK
Date: Tue, 14 Jul 2015 12:39:53 GMT
Accept-Ranges: bytes
ETag: "52669f7776a6d01:1249"
Server: Microsoft-IIS/6.0
Content-Length: 13261
Content-Location: http://protezionecivileunita59.org/index.html
Content-Type: text/html
Last-Modified: Sun, 14 Jun 2015 07:48:13 GMT
X-Powered-By: ASP.NET
...13261 bytes of data.
GET / HTTP/1.1
Host: protezionecivileunita59.org
Result:
HTTP/1.1 200 OK
Date: Tue, 14 Jul 2015 12:39:53 GMT
Accept-Ranges: bytes
ETag: "52669f7776a6d01:1249"
Server: Microsoft-IIS/6.0
Content-Length: 13261
Content-Location: http://protezionecivileunita59.org/index.html
Content-Type: text/html
Last-Modified: Sun, 14 Jun 2015 07:48:13 GMT
X-Powered-By: ASP.NET
...13261 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: protezionecivileunita59.org
Referer: http://www.google.com/search?q=protezionecivileunita59.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: protezionecivileunita59.org
Referer: http://www.google.com/search?q=protezionecivileunita59.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://protezionecivileunita59.org/ | HTTP/1.1 200 OK Date: Tue, 14 Jul 2015 12:39:53 GMT Accept-Ranges: bytes ETag: "52669f7776a6d01:1249" Server: Microsoft-IIS/6.0 Content-Length: 13261 Content-Location: http://protezionecivileunita59.org/index.html Content-Type: text/html Last-Modified: Sun, 14 Jun 2015 07:48:13 GMT X-Powered-By: ASP.NET | clean |
http://protezionecivileunita59.org/index.html | 200 OK Content-Length: 13261 Content-Type: text/html | clean |
http://protezionecivileunita59.org/res/jquery.js?31 | 200 OK Content-Length: 93639 Content-Type: application/x-javascript | clean |
http://protezionecivileunita59.org/res/x5engine.js?31 | 200 OK Content-Length: 3657 Content-Type: application/x-javascript | clean |
http://codice.shinystat.com/cgi-bin/getcod.cgi?USER=unita59 | 200 OK Content-Length: 5607 Content-Type: application/x-javascript | clean |
http://protezionecivileunita59.org/chi-siamo.html | 200 OK Content-Length: 11745 Content-Type: text/html | clean |
http://protezionecivileunita59.org/le-nostre-attivita.html | 200 OK Content-Length: 14091 Content-Type: text/html | clean |
http://protezionecivileunita59.org/i-nostri-mezzi.html | 200 OK Content-Length: 15181 Content-Type: text/html | clean |
http://protezionecivileunita59.org/partecipa.html | 200 OK Content-Length: 10555 Content-Type: text/html | clean |
http://protezionecivileunita59.org/la-protezione-civile.html | 200 OK Content-Length: 12285 Content-Type: text/html | clean |
http://protezionecivileunita59.org/cosa-fare-in-caso-di....html | 200 OK Content-Length: 14981 Content-Type: text/html | clean |
http://protezionecivileunita59.org/piano-di-emergenza.html | 200 OK Content-Length: 12371 Content-Type: text/html | clean |
http://protezionecivileunita59.org/numero-unico-emergenza.html | 200 OK Content-Length: 12028 Content-Type: text/html | clean |
http://protezionecivileunita59.org/links-utili.html | 200 OK Content-Length: 9097 Content-Type: text/html | clean |
http://protezionecivileunita59.org/area-privata.php | HTTP/1.1 302 OK Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Date: Tue, 14 Jul 2015 12:39:57 GMT Pragma: no-cache Location: imlogin.php Server: Microsoft-IIS/6.0 Content-Length: 162 Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=6ab2b52409fee0ca3abee8add28dd708; path=/ X-Powered-By: PHP/5.0.5 X-Powered-By: ASP.NET | clean |
http://protezionecivileunita59.org/imlogin.php | 200 OK Content-Length: 7178 Content-Type: text/html | clean |
http://protezionecivileunita59.org/contatti.html | 200 OK Content-Length: 10462 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=protezionecivileunita59.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://protezionecivileunita59.org/
Result: protezionecivileunita59.org is not infected or malware details are not published yet.
Result: protezionecivileunita59.org is not infected or malware details are not published yet.