Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: puurseks.nl
Result:
GET / HTTP/1.1
Host: puurseks.nl
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: puurseks.nl
Referer: http://www.google.com/search?q=puurseks.nl
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: puurseks.nl
Referer: http://www.google.com/search?q=puurseks.nl
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.puurseks.nl/ | 200 OK Content-Length: 20897 Content-Type: text/html | clean |
http://puurseksnl.klikbonus.com/tools/mdetect.php/?siteid=48 | 200 OK Content-Length: 24485 Content-Type: text/html | clean |
http://puurseksnl.klikbonus.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Mon, 29 Sep 2014 22:51:33 GMT Location: http://x0.nl/ Server: Apache Content-Length: 197 Content-Type: text/html; charset=iso-8859-1 | clean |
http://x0.nl/ | 200 OK Content-Length: 28107 Content-Type: text/html | clean |
http://www.klikbonus.com/tools/mdetect.php?siteid=48 | 200 OK Content-Length: 24478 Content-Type: text/html | clean |
http://www.klikbonus.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Mon, 29 Sep 2014 22:51:34 GMT Location: http://x0.nl/ Server: Apache Content-Length: 197 Content-Type: text/html; charset=iso-8859-1 | clean |
http://x0.nl/test404page.js | HTTP/1.1 302 Found Connection: close Date: Mon, 29 Sep 2014 22:51:34 GMT Location: / Server: Apache Vary: User-Agent Content-Length: 0 Content-Type: text/html | clean |
http://www.puurseks.nl/scripts/scripts.js | 200 OK Content-Length: 2559 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/80356.js | 200 OK Content-Length: 1285 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/193730.js | 200 OK Content-Length: 1541 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/193733.js | 200 OK Content-Length: 1558 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/193724.js | 200 OK Content-Length: 16501 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=puurseks.nl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://puurseks.nl/
Result: puurseks.nl is not infected or malware details are not published yet.
Result: puurseks.nl is not infected or malware details are not published yet.