Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: safetybossasia.com
Result:
GET / HTTP/1.1
Host: safetybossasia.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: safetybossasia.com
Referer: http://www.google.com/search?q=safetybossasia.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: safetybossasia.com
Referer: http://www.google.com/search?q=safetybossasia.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.safetybossasia.com/ | HTTP/1.1 200 OK Date: Fri, 26 Dec 2014 03:19:37 GMT Accept-Ranges: bytes ETag: "90a247e118f6cf1:3ee" Server: Microsoft-IIS/6.0 Content-Length: 9862 Content-Location: http://www.safetybossasia.com/index.html Content-Type: text/html Last-Modified: Sat, 01 Nov 2014 21:14:53 GMT X-Powered-By: ASP.NET | clean |
http://www.safetybossasia.com/index.html | 200 OK Content-Length: 9862 Content-Type: text/html | clean |
http://safetybossasia.com/common.js | 200 OK Content-Length: 174 Content-Type: application/x-javascript | clean |
http://safetybossasia.com/tj.js | 200 OK Content-Length: 3 Content-Type: application/x-javascript | clean |
http://www.safetybossasia.com/test404page.js | HTTP/1.1 200 OK Date: Fri, 26 Dec 2014 03:19:40 GMT Accept-Ranges: bytes ETag: "eaef8278b652cf1:3ee" Server: Microsoft-IIS/6.0 Content-Length: 1430 Content-Location: http://www.safetybossasia.com/404.html?404;http://www.safetybossasia.com:80/test404page.js Content-Type: text/html Last-Modified: Mon, 07 Apr 2014 23:09:47 GMT X-Powered-By: ASP.NET | clean |
http://www.safetybossasia.com/404.html?404;http://www.safetybossasia.com:80/test404page.js | 200 OK Content-Length: 1430 Content-Type: text/html | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=safetybossasia.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://safetybossasia.com/
Result: safetybossasia.com is not infected or malware details are not published yet.
Result: safetybossasia.com is not infected or malware details are not published yet.