Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=up.aflam0.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://up.aflam0.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: up.aflam0.com
Result:
HTTP/1.1 200 OK
Cache-Control: private, no-cache="set-cookie"
Connection: close
Date: Sun, 08 Mar 2015 12:24:16 GMT
Pragma: no-cache
Server: nginx admin
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: 0
Set-Cookie: ksid_2c9cd98=06c2ad9c3c460eb0da2d5b309ba8aa7c; expires=Tue, 10-Mar-2015 12:24:15 GMT; path=/
X-Cache: HIT from Backend
GET / HTTP/1.1
Host: up.aflam0.com
Result:
HTTP/1.1 200 OK
Cache-Control: private, no-cache="set-cookie"
Connection: close
Date: Sun, 08 Mar 2015 12:24:16 GMT
Pragma: no-cache
Server: nginx admin
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: 0
Set-Cookie: ksid_2c9cd98=06c2ad9c3c460eb0da2d5b309ba8aa7c; expires=Tue, 10-Mar-2015 12:24:15 GMT; path=/
X-Cache: HIT from Backend
Second query (visit from search engine):
GET / HTTP/1.1
Host: up.aflam0.com
Referer: http://www.google.com/search?q=up.aflam0.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: up.aflam0.com
Referer: http://www.google.com/search?q=up.aflam0.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://up.aflam0.com/ | 200 OK Content-Length: 5553 Content-Type: text/html | clean |
http://up.aflam0.com/./styles/default/javascript.js | 200 OK Content-Length: 1967 Content-Type: application/javascript | clean |
http://up.aflam0.com/go.php?go=guide | 200 OK Content-Length: 5464 Content-Type: text/html | clean |
http://up.aflam0.com/go.php?go=rules | 200 OK Content-Length: 3973 Content-Type: text/html | clean |
http://up.aflam0.com/go.php?go=call | 200 OK Content-Length: 4691 Content-Type: text/html | clean |
http://up.aflam0.com/ucp.php?go=login | 200 OK Content-Length: 4247 Content-Type: text/html | clean |
http://up.aflam0.com/ucp.php?go=register | 200 OK Content-Length: 3645 Content-Type: text/html | clean |
http://up.aflam0.com/go.php?go=stats | 200 OK Content-Length: 3998 Content-Type: text/html | clean |
http://up.aflam0.com/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://up.aflam0.com/../ | 400 Bad Request Content-Length: 166 Content-Type: text/html | clean |
http://up.aflam0.com/ucp.php?go=get_pass | 200 OK Content-Length: 3655 Content-Type: text/html | clean |