Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: warbirdsusa.org
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 31 Jan 2015 00:10:01 GMT
Location: http://www.warbirdsusa.org/
Server: Apache/2.2.26 (CentOS)
Content-Length: 316
Content-Type: text/html; charset=iso-8859-1
...316 bytes of data.
GET / HTTP/1.1
Host: warbirdsusa.org
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 31 Jan 2015 00:10:01 GMT
Location: http://www.warbirdsusa.org/
Server: Apache/2.2.26 (CentOS)
Content-Length: 316
Content-Type: text/html; charset=iso-8859-1
...316 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: warbirdsusa.org
Referer: http://www.google.com/search?q=warbirdsusa.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: warbirdsusa.org
Referer: http://www.google.com/search?q=warbirdsusa.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://warbirdsusa.org/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 31 Jan 2015 00:10:01 GMT Location: http://www.warbirdsusa.org/ Server: Apache/2.2.26 (CentOS) Content-Length: 316 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.warbirdsusa.org/ | 200 OK Content-Length: 31551 Content-Type: text/html | clean |
http://js.users.51.la/17174260.js | 200 OK Content-Length: 1964 Content-Type: application/x-javascript | clean |
http://warbirdsusa.org/test404page.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 31 Jan 2015 00:10:04 GMT Location: http://www.warbirdsusa.org/test404page.js Server: Apache/2.2.26 (CentOS) Content-Length: 330 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.warbirdsusa.org/test404page.js | 404 Not Found Content-Length: 26697 Content-Type: text/html | clean |
http://www.warbirdsusa.org/login.html | 200 OK Content-Length: 125323 Content-Type: text/html | clean |
http://www.warbirdsusa.org/includes/templates/myshop/jscript/jquery/jquery-1.8.3.min.js | 200 OK Content-Length: 93637 Content-Type: application/x-javascript | clean |
http://www.warbirdsusa.org/includes/templates/myshop/jscript/jquery/jquery_create_account.js | 200 OK Content-Length: 398 Content-Type: application/x-javascript | clean |
http://www.warbirdsusa.org/contact_us.html | 200 OK Content-Length: 21426 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=b122988d87dcf567df1cc69d2394f974 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=c9320d9aed2eb4d98cb725e55242dbfd | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=15fa0ad6b3393c81173472765d20db36 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=f41185389c576980f15ec1f4b15ef454 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=6dac4a7d10b988d6c2072b7db9302f20 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=80b7e2ee45e59663d04655ec033995a9 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=372504f9c1f51f0dd5037a622c5e5488 | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
http://www.warbirdsusa.org/air-jordan-13-xiii-oem-28/&zenid=95f722e0f7f8decbe5889d36918fb9cf | 200 OK Content-Length: 36854 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=warbirdsusa.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://warbirdsusa.org/
Result: warbirdsusa.org is not infected or malware details are not published yet.
Result: warbirdsusa.org is not infected or malware details are not published yet.