Malicious/Suspicious Redirects
| Request | Server response | Status |
URL: http://a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net/hop/?CBRehoppp2=http%3A%2F%2Fcurarfibromas.com%2Fredirect.php%3Fhop%3Dpromopubli&hstr=1412784517779%7Cpromopubli%7C%7Cd3d2e7k764%7Cfibromas&code=%7B0%7D&key=17D0B355&parms=&s=default&ds=2 (imitation of visitor from search engine) GET /hop/?CBRehoppp2=http%3A%2F%2Fcurarfibromas.com%2Fredirect.php%3Fhop%3Dpromopubli&hstr=1412784517779%7Cpromopubli%7C%7Cd3d2e7k764%7Cfibromas&code=%7B0%7D&key=17D0B355&parms=&s=default&ds=2 HTTP/1.1 Host: a9648a2mwgrnr9u2o22bx2yyb7.hop.clickbank.net Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Cache-Control: no-store Connection: close Date: Wed, 08 Oct 2014 16:08:38 GMT Pragma: no-cache Location: http://curarfibromas.com/redirect.php?hop=promopubli Server: Apache/2.2.29 (FreeBSD) mod_jk/1.2.40 mod_ssl/2.2.29 OpenSSL/0.9.8y Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html;charset=UTF-8 Expires: 0 P3P: CP="ADM OUR IND COM" | suspicious |
Scanned pages/files
| Request | Server response | Status |
http://www.spcity.com.br/ | HTTP/1.1 302 Found Connection: close Date: Tue, 24 Nov 2015 14:08:31 GMT Location: http://185.93.187.90/8b2C Server: Apache Content-Length: 209 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://185.93.187.90/8b2c | HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=0 Connection: close Date: Wed, 25 Nov 2015 00:09:35 GMT Pragma: no-cache Location: http://aol.com Server: nginx/1.8.0 Content-Type: text/html; charset=utf-8 Expires: Thu, 21 Jul 1977 07:30:00 GMT Last-Modified: Wed, 25 Nov 2015 00:09:35 GMT X-Powered-By: PHP/5.6.13 | clean |
http://aol.com/ | HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Date: Tue, 24 Nov 2015 14:07:51 GMT Location: http://www.aol.com/ Server: Apache Content-Length: 227 Content-Type: text/html; charset=iso-8859-1 Keep-Alive: timeout=15, max=9789 | clean |
http://www.aol.com/ | 200 OK Content-Length: 139115 Content-Type: text/html | clean |
http://portal.aolcdn.com/o.aolcdn.com/fonts/faw1kht.js.pagespeed.jm.xDwd8qSBeA.js | 200 OK Content-Length: 20351 Content-Type: application/javascript | clean |
http://o.aolcdn.com/os_merge/?file=/ads/adsWrapper.js | 200 OK Content-Length: 42269 Content-Type: application/javascript | clean |
http://o.aolcdn.com/ads/adsWrapper.js | 200 OK Content-Length: 42269 Content-Type: application/javascript | clean |
http://portal.aolcdn.com/o.aolcdn.com/os/aol/omniture.min.js.pagespeed.ce.PQC9PI6SM1.js | 200 OK Content-Length: 58522 Content-Type: application/javascript | clean |
http://www.spcity.com.br//s.skimresources.com/js/76112X1526399.skimlinks.js/ | HTTP/1.1 302 Found Connection: close Date: Tue, 24 Nov 2015 14:08:35 GMT Location: http://185.93.187.90/8b2C Server: Apache Content-Length: 209 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://185.93.187.90/test404page.js | 404 Not Found Content-Length: 570 Content-Type: text/html | clean |
http://portal.aolcdn.com/p5/_v127.14/js/responsive-main.js.pagespeed.jm.YxacIuOk4M.js | 200 OK Content-Length: 300577 Content-Type: application/x-javascript | clean |
http://www.spcity.com.br//feedback.aol.com/aol-feedback-plugin/aol-feedback-loader-latest.min.js/ | HTTP/1.1 302 Found Connection: close Date: Tue, 24 Nov 2015 14:08:36 GMT Location: http://185.93.187.90/8b2C Server: Apache Content-Length: 209 Content-Type: text/html; charset=iso-8859-1 | malicious |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=spcity.com.br
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://spcity.com.br/
Result: spcity.com.br is not infected or malware details are not published yet.
Result: spcity.com.br is not infected or malware details are not published yet.