Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ttrj.net
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: marshallislandsbitcoin.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Mar 2015 11:46:23 GMT
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-8
X-Pad: avoid browser bug
X-Powered-By: PHP/5.4.26
GET / HTTP/1.1
Host: marshallislandsbitcoin.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Mar 2015 11:46:23 GMT
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips DAV/2 mod_bwlimited/1.4
Content-Type: text/html; charset=UTF-8
X-Pad: avoid browser bug
X-Powered-By: PHP/5.4.26
Second query (visit from search engine):
GET / HTTP/1.1
Host: marshallislandsbitcoin.com
Referer: http://www.google.com/search?q=marshallislandsbitcoin.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: marshallislandsbitcoin.com
Referer: http://www.google.com/search?q=marshallislandsbitcoin.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://ttrj.net/ | HTTP/1.1 302 Found Connection: close Date: Thu, 29 May 2014 05:14:12 GMT Location: http://ww15.ttrj.net/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.3.3-7+squeeze19 | malicious |
http://ww15.ttrj.net/ | HTTP/1.1 200 OK Connection: close Date: Thu, 29 May 2014 05:14:12 GMT Server: Tengine/1.4.2 Vary: Accept-Encoding Content-Type: text/html X-Powered-By: PHP/5.3.10 | clean |
http://ww15.ttrj.net/?acc=0f4b1727-114a-4ef2-ac1b-1db964d84818&ref=&framerequest=1&noscript=1 | 200 OK Content-Length: 10849 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: ttrj.net ...[3717 bytes skipped]... cpro.baidustatic.com/cpro/ui/ci.js"></script><script type="text/javascript"src="http://a1.dnbizcdn.com/js/b/jquery.min.js"></script></head><script type="text/javascript">var unique=(function(){var time=(new Date()).getTime()+'_',i=0;return function(){return time+(i++)}})();var gl={trackingurl:'/tracking.php',searchurl:'/'};var err={errorcode:0,errormsg:''};var google_afd_request={};var secondtier_request={dm:'ttrj.net',sk:'',partner:'bd3',format:'json',sac:'dnbizcn_js00043',oc:false};var req={dm:'ttrj.net',acc:'0f4b1727-114a-4ef2-ac1b-1db964d84818',landerid:93,cate:0,buy:true,adultallowed:true,cusbuy:'',contactinfo:'',partner:'secondtier',ac:12,kc:10,sk:'',is:false,lp:true,oc:true,q:'jRnLOrL9xet3TvQhP1VeNrAvO867bh2MNl-33Shu_iP62RpAtgqg1YnQ3CwnTuKibDtGyYR9qzHwqWJRO5KqlGEGbrzl6KNBSHleFZftKsKng5L0PUHmthIYIuGIBNQ9SGn7mvnnZ6GC0u3qdr99EFwAvREoWfWJzITrzz_6yy3YrY9xjl9JtS32KuvqwUPGR6sViVYLu6NB9vQP-Zp2xal45O ...[6932 bytes skipped]... | ||
http://a1.dnbizcdn.com/js/b/client20130325new.js | 200 OK Content-Length: 2048 Content-Type: application/x-javascript | clean |
http://cpro.baidustatic.com/cpro/ui/domain_parking.js | 200 OK Content-Length: 40320 Content-Type: application/x-javascript | clean |
http://cpro.baidustatic.com/cpro/ui/ci.js | 200 OK Content-Length: 71171 Content-Type: application/x-javascript | clean |
http://a1.dnbizcdn.com/js/b/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: application/x-javascript | clean |
http://a1.dnbizcdn.com/js/b/caf.js | 200 OK Content-Length: 8900 Content-Type: application/x-javascript | clean |
http://ttrj.net/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |