Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: rcmodelhelis.com
Result:
GET / HTTP/1.1
Host: rcmodelhelis.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: rcmodelhelis.com
Referer: http://www.google.com/search?q=rcmodelhelis.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: rcmodelhelis.com
Referer: http://www.google.com/search?q=rcmodelhelis.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.rcmodelhelis.com/ | 200 OK Content-Length: 10545 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/ | 200 OK Content-Length: 412 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/login.php | 200 OK Content-Length: 1054 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/js/sha512.js | 200 OK Content-Length: 15841 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/js/forms.js | 200 OK Content-Length: 3074 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/includes/logout.php | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Wed, 16 Dec 2015 15:42:33 GMT Pragma: no-cache Location: ../logged_out.html Server: Apache/2.4.10 (Debian) Content-Length: 1 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: sec_session_id=07poa1tb2f4321ohklekuvvsv2; path=/; secure; HttpOnly Set-Cookie: sec_session_id=cm5hu45chpt9eveb531hk45rb3; path=/; secure; HttpOnly Set-Cookie: sec_session_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly | clean |
http://www.rcmodelhelis.com/charges/includes/../logged_out.html | 200 OK Content-Length: 373 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/includes/../login.php | 200 OK Content-Length: 1054 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/includes/../js/sha512.js | 200 OK Content-Length: 15841 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/includes/../js/forms.js | 200 OK Content-Length: 3074 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/logout.php | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Wed, 16 Dec 2015 15:42:36 GMT Pragma: no-cache Location: ../logged_out.html Server: Apache/2.4.10 (Debian) Content-Length: 1 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: sec_session_id=4oi091ak29r5j8v2k50t016t24; path=/; secure; HttpOnly Set-Cookie: sec_session_id=s8dbpvp6adb8k19o54fjg0kov4; path=/; secure; HttpOnly Set-Cookie: sec_session_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../logged_out.html | 200 OK Content-Length: 373 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../login.php | 200 OK Content-Length: 1054 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../js/sha512.js | 200 OK Content-Length: 15841 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../js/forms.js | 200 OK Content-Length: 3074 Content-Type: application/javascript | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../includes/logout.php | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Wed, 16 Dec 2015 15:42:38 GMT Pragma: no-cache Location: ../logged_out.html Server: Apache/2.4.10 (Debian) Content-Length: 1 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: sec_session_id=slcnqrg4sdh4cjj1ts8gvdnsa2; path=/; secure; HttpOnly Set-Cookie: sec_session_id=nb7ii6sasddlgdaebgkk9khmi0; path=/; secure; HttpOnly Set-Cookie: sec_session_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; httponly | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../includes/../logged_out.html | 200 OK Content-Length: 373 Content-Type: text/html | clean |
http://www.rcmodelhelis.com/charges/includes/../includes/../includes/../login.php | 200 OK Content-Length: 1054 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=rcmodelhelis.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://rcmodelhelis.com/
Result: rcmodelhelis.com is not infected or malware details are not published yet.
Result: rcmodelhelis.com is not infected or malware details are not published yet.