Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://tai-tour.info/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: tai-tour.info Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Location: http://bitly.com/STTMlN Server: nginx/0.7.67 Vary: Accept-Encoding Content-Length: 286 Content-Type: text/html; charset=iso-8859-1 | malicious |
URL: http://bitly.com/STTMlN (imitation of visitor from search engine) GET /STTMlN HTTP/1.1 Host: bitly.com Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 301 Moved Permanently Cache-Control: private; max-age=90 Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Location: http://goo.gl/0rXySb Server: nginx Content-Length: 112 Content-Type: text/html; charset=utf-8 Mime-Version: 1.0 Set-Cookie: _bit=54156559-001b6-0384c-311cf10a;domain=.bitly.com;expires=Fri Mar 13 09:52:25 2015;path=/; HttpOnly | malicious |
URL: http://goo.gl/0rXySb (imitation of visitor from search engine) GET /0rXySb HTTP/1.1 Host: goo.gl Referer: http://www.google.com/search?q=redirect+check3 | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, no-store, max-age=0, must-revalidate Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Pragma: no-cache Location: http://sh.oowoo.ru/redsh.php Server: GSE Content-Type: text/html; charset=UTF-8 Expires: Fri, 01 Jan 1990 00:00:00 GMT Alternate-Protocol: 80:quic,p=0.002 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block | malicious |
URL: http://sh.oowoo.ru/redsh.php (imitation of visitor from search engine) GET /redsh.php HTTP/1.1 Host: sh.oowoo.ru Referer: http://www.google.com/search?q=redirect+check4 | HTTP/1.1 302 Found Connection: close Date: Sun, 14 Sep 2014 09:51:02 GMT Location: http://fastmambo.biz/?s=370 Server: nginx/1.0.15 Content-Length: 0 Content-Type: text/html; charset=CP1251 X-Powered-By: PHP/5.2.17 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://tai-tour.info/ | 200 OK Content-Length: 15465 Content-Type: text/html | clean |
http://tai-tour.info/test404page.js | HTTP/1.1 302 Found Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Location: http://bitly.com/STTMlN Server: nginx/0.7.67 Vary: Accept-Encoding Content-Length: 286 Content-Type: text/html; charset=iso-8859-1 | clean |
http://bitly.com/sttmln | HTTP/1.1 301 Moved Permanently Cache-Control: private; max-age=90 Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Location: http://www.22b.net/ Server: nginx Content-Length: 111 Content-Type: text/html; charset=utf-8 Mime-Version: 1.0 Set-Cookie: _bit=54156559-003cc-03841-311cf10a;domain=.bitly.com;expires=Fri Mar 13 09:52:25 2015;path=/; HttpOnly | clean |
http://www.22b.net/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Sun, 14 Sep 2014 09:52:25 GMT Age: 1 Location: http://august13.com Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | clean |
http://august13.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Sun, 14 Sep 2014 09:52:26 GMT Age: 0 Location: http://www.june26.com Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | clean |
http://www.june26.com/ | HTTP/1.1 301 Moved Permanently Date: Sun, 14 Sep 2014 09:52:26 GMT Location: http://june26.com/ Server: Microsoft-IIS/8.0 Content-Length: 141 Content-Type: text/html; charset=UTF-8 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin | clean |
http://june26.com/ | 200 OK Content-Length: 40480 Content-Type: text/html | clean |
https://apis.google.com/js/plusone.js | 200 OK Content-Length: 12388 Content-Type: application/javascript | clean |
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21394 Content-Type: text/javascript | clean |
http://www.google.com/coop/cse/brand?form=searchbox_018151311854596026525%3Aim7ixqvhtbg | 200 OK Content-Length: 2561 Content-Type: text/javascript | clean |
http://tai-tour.info//www.blogger.com/static/v1/widgets/3274410642-widgets.js/ | HTTP/1.1 302 Found Connection: close Date: Sun, 14 Sep 2014 09:52:29 GMT Location: http://bitly.com/STTMlN Server: nginx/0.7.67 Vary: Accept-Encoding Content-Length: 286 Content-Type: text/html; charset=iso-8859-1 | clean |
http://bitly.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Sun, 14 Sep 2014 09:52:29 GMT Location: https://bitly.com/test404page.js Server: nginx Content-Length: 0 Content-Type: text/html; charset=UTF-8 | clean |
https://bitly.com/test404page.js | 404 Not Found Content-Length: 9227 Content-Type: text/html | clean |
https://bitly.com/ | 200 OK Content-Length: 12610 Content-Type: text/html | clean |
https://bitly.com//ajax.googleapis.com/ajax/libs/jquery/1.6.4/jquery.min.js/ | 404 Not Found Content-Length: 9227 Content-Type: text/html | clean |
https://bitly.com//d3h5jhobc20ump.cloudfront.net/f85dc948f620c661e54d9a77081899c7.js/ | 404 Not Found Content-Length: 9227 Content-Type: text/html | clean |
https://bitly.com//dl6fh5ptkejqa.cloudfront.net/dccb7a49d1fad39fc5596bdb43937d91.js/ | 404 Not Found Content-Length: 9227 Content-Type: text/html | clean |
http://resources.infolinks.com/js/infolinks_main.js | 200 OK Content-Length: 2448 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tai-tour.info
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tai-tour.info/
Result: tai-tour.info is not infected or malware details are not published yet.
Result: tai-tour.info is not infected or malware details are not published yet.