Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ulriksforsarna.se
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Sat, 04 Oct 2014 16:15:57 GMT
Server: Microsoft-IIS/7.5
Content-Length: 158573
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=rc1gn155fqcafd45yn3srx55; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
...158573 bytes of data.
GET / HTTP/1.1
Host: ulriksforsarna.se
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Sat, 04 Oct 2014 16:15:57 GMT
Server: Microsoft-IIS/7.5
Content-Length: 158573
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=rc1gn155fqcafd45yn3srx55; path=/; HttpOnly
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
...158573 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ulriksforsarna.se
Referer: http://www.google.com/search?q=ulriksforsarna.se
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ulriksforsarna.se
Referer: http://www.google.com/search?q=ulriksforsarna.se
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://ulriksforsarna.se/ | 200 OK Content-Length: 158573 Content-Type: text/html | clean |
http://ulriksforsarna.se/WebResource.axd?d=pUIQ6idit_fl1e5_sFQ329qICfnIAN-I8E85z1FnAfJT3nU7VhSJqyZ0NLHosghWQimaq6Hi3zTkbnrg2kyhiMXrPxytkDTzSIvhfN2XYrCY9EShYAwav-JE70Pd54ufaJrSEA2&t=633374656013070000 | 200 OK Content-Length: 38300 Content-Type: text/javascript | clean |
http://ulriksforsarna.se/WebResource.axd?d=PfPKygBSWD6wzoIws6bSOucuotemp_sSX1On4Tq2TwfsgiiIMemh0Rv-WWtsRfqzUTN9NafDQbgwQ2cXhb4__bYhKo_S9hcZq9yYwTzwjjCwVSXgUmf4e1c7iG5KowkOCum96rJnaOFsnTo5faHUIop67HWtBSPo2NSuIC8VrrYIqMVJ0&t=633376239307601250 | 200 OK Content-Length: 10353 Content-Type: text/javascript | clean |
http://ulriksforsarna.se/WebResource.axd?d=lpjcww9Azjq9-IhVJENbT1b856KIczLQCef-8kHv3zmQvAi16Nh7yCCiid74_1WxTXDvMjXRyGxUVQe4uV0DKxYjhGn05BoJnf5arZ5XQ0-XRLvBKay2wxbFFV8FYgjcVeP6-SsNJez_NdF9VXE3L-a7glEjQb2zBiS0PrU7o3m1Al_O0&t=633376239307601250 | 200 OK Content-Length: 10331 Content-Type: text/javascript | clean |
http://ulriksforsarna.se/WebResource.axd?d=aRu_pTViGHkAPTDmTwwfLiZZfUe3ywzZgC3ACrjrfC02sdHO7GksEPgyy949z7hRZN45vCbMh9UmxlRak_6wnFpkU51x-W9k0Xk1CodiTZDLuAUpzf0gqXWefS3eZFzpBJLyoumDviLJNIrfR5yRcdCjSJM1&t=633374656013070000 | 200 OK Content-Length: 7737 Content-Type: text/javascript | clean |
http://ulriksforsarna.se/WebResource.axd?d=7zVcyRRxXffKO3EXW4eGKCRG3kZeT3gB04K2g6zdqewa2RRuVTy0bHVk4NUkvPxqDqsFxT8HJFwAl-lBnHZaDaJJMLUUmTHM7akmB7bDcijt-8ixgvZZkZSDCzTNOdAO875U1KSiUGFwrq6zRWp6Y8b6gl81&t=633374656013070000 | 200 OK Content-Length: 42815 Content-Type: text/javascript | clean |
http://ulriksforsarna.se/fkuChat/index.php | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://ulriksforsarna.se/test404page.js | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://ulriksforsarna.se/default.aspx | 200 OK Content-Length: 158573 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/resultat.html | 200 OK Content-Length: 8501 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/../default.aspx | 200 OK Content-Length: 158573 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/../fkuChat/index.php | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/../janne/resultat.html | 200 OK Content-Length: 8501 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/../janne/../default.aspx | 200 OK Content-Length: 158573 Content-Type: text/html | clean |
http://ulriksforsarna.se/janne/../janne/../fkuChat/index.php | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ulriksforsarna.se
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ulriksforsarna.se/
Result: ulriksforsarna.se is not infected or malware details are not published yet.
Result: ulriksforsarna.se is not infected or malware details are not published yet.