Malicious/Suspicious Redirects
| Request | Server response | Status |
URL: http://www.salvacur.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.salvacur.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Thu, 13 Aug 2015 23:42:52 GMT Location: http://www.bolltec.com/media/jce/media.php Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0g DAV/2 PHP/5.2.17 mod_wsgi/3.3 Python/2.7.2 Vary: Accept-Encoding Content-Length: 188 Content-Type: text/html Set-Cookie: c2fa3c312fdcd42da4e1da1ae4d73db9=n087jmupq6rn9b3m7g3vnc2mg2; path=/ X-Powered-By: PHP/5.2.17 | malicious |
Scanned pages/files
| Request | Server response | Status |
http://www.salvacur.com/ | 200 OK Content-Length: 14930 Content-Type: text/html | clean |
http://www.salvacur.com/media/system/js/core.js | 200 OK Content-Length: 4225 Content-Type: application/javascript | clean |
http://www.salvacur.com/media/system/js/mootools-core.js | 200 OK Content-Length: 88540 Content-Type: application/javascript | clean |
http://www.salvacur.com/media/system/js/mootools-more.js | 200 OK Content-Length: 73074 Content-Type: application/javascript | clean |
http://www.salvacur.com/templates/mystique-fjt/slideshow/NivooSlider.js | 200 OK Content-Length: 15717 Content-Type: application/javascript | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 259421 Content-Type: text/javascript | clean |
http://www.meetic-partners.com/call/adj/139839/2814993/zanox.meeticcorp/120x600/[timestamp]/no?http://ad.zanox.com/ppc/?29864001C1310300560&ULP= | HTTP/1.1 302 Object moved Cache-Control: private,no-cache Date: Thu, 13 Aug 2015 21:50:27 GMT Pragma: no-cache Location: http://www.meetic-partners.com/a/diff/58/2814993/show6.asp?2814993;139839;0;[timestamp];M;systemtarget=%24a%3D0t%3B%24cn%3D0_0%3B%24isp%3D0%3B%24qc%3D1310039603%3B%24ql%3Dunknown%3B%24qpc%3D01100%3B%24qpp%3D0%3B%24qt%3D40_588_38598t%3B%24b%3D11080;smartclicktrack=http://ad.zanox.com/ppc/?29864001C1310300560&ULP= Content-Length: 1096 Content-Type: text/html Expires: Wed, 12 Aug 2015 21:50:26 GMT P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Set-Cookie: sasd=%24a%3D0t%3B%24cn%3D0%5F0%3B%24isp%3D0%3B%24qc%3D1310039603%3B%24ql%3Dunknown%3B%24qpc%3D01100%3B%24qpp%3D0%3B%24qt%3D40%5F588%5F38598t; path=/ Set-Cookie: pbw=%24b%3D11080; expires=Tue, 13-Sep-2016 21:50:26 GMT; domain=meetic-partners.com; path=/ Set-Cookie: TestIfCookieP=ok; expires=Tue, 13-Sep-2016 21:50:26 GMT; domain=meetic-partners.com; path=/ Set-Cookie: TestIfCookie=ok; domain=meetic-partners.com; path=/ | clean |
http://www.meetic-partners.com/a/diff/58/2814993/show6.asp?2814993;139839;0;[timestamp];m;systemtarget=%24a%3d0t%3b%24cn%3d0_0%3b%24isp%3d0%3b%24qc%3d1310039603%3b%24ql%3dunknown%3b%24qpc%3d01100%3b%24qpp%3d0%3b%24qt%3d40_588_38598t%3b%24b%3d11080;smartclicktrack=http://ad.zanox.com/ppc/?29864001c1310300560&ulp= | 200 OK Content-Length: 730 Content-Type: application/x-javascript | clean |
http://www.salvacur.com/index.php/novedad | 200 OK Content-Length: 19499 Content-Type: text/html | clean |
http://www.salvacur.com/media/system/js/caption.js | 200 OK Content-Length: 800 Content-Type: application/javascript | clean |
http://www.salvacur.com/index.php/dinero | 200 OK Content-Length: 20306 Content-Type: text/html | clean |
http://www.salvacur.com/index.php/meteorologia | 200 OK Content-Length: 18701 Content-Type: text/html | clean |
http://www.soitu.es/eltiempo/wlaunch.html?w=300&c=b&d=23001 | 200 OK Content-Length: 249 Content-Type: application/x-javascript | clean |
http://www.salvacur.com/index.php/juegosmenu | 200 OK Content-Length: 26601 Content-Type: text/html | clean |
http://www.salvacur.com/index.php/loterias-y-apuestas | 200 OK Content-Length: 18617 Content-Type: text/html | clean |
http://www.salvacur.com/index.php/traductorr | 200 OK Content-Length: 35914 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=salvacur.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://salvacur.com/
Result: salvacur.com is not infected or malware details are not published yet.
Result: salvacur.com is not infected or malware details are not published yet.