Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://wattungpaked.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: wattungpaked.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 28 Aug 2014 02:34:23 GMT Location: http://46.161.41.152/sds/go.php?sid=1 Server: nginx/0.9.4 Content-Length: 313 Content-Type: text/html; charset=iso-8859-1 | malicious |
URL: http://46.161.41.152/sds/go.php?sid=1 (imitation of visitor from search engine) GET /sds/go.php?sid=1 HTTP/1.1 Host: 46.161.41.152 Referer: http://www.google.com/search?q=redirect+check2 | HTTP/1.1 302 Found Connection: close Date: Thu, 28 Aug 2014 02:34:28 GMT Referer: http://www.google.com/url?sa=t&rct=j&q=wattungpaked.com&source=web&cd=1&ved=0CDEQFjAG&url=http:%2F%2Fwattungpaked.com%2F&ei=wC7yT5qCJbCCkQKtnwE&usg=AFQjCNGEeYp3D7uuNLAJxMIVliLyQ9O_Pg Location: http://mediczkkf.ru/ Server: Apache/2.2.22 (Debian) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: schema1=true; expires=Thu, 04-Sep-2014 02:34:28 GMT Set-Cookie: visited1=2; expires=Thu, 04-Sep-2014 02:34:28 GMT X-Powered-By: PHP/5.4.4-14+deb7u14 | suspicious |
Scanned pages/files
Request | Server response | Status |
http://wattungpaked.com/ | 200 OK Content-Length: 19187 Content-Type: text/html | clean |
http://wattungpaked.com/media/system/js/caption.js | 200 OK Content-Length: 1721 Content-Type: application/x-javascript | clean |
http://wattungpaked.com/templates/themza_j15_33/js/moomenu.js | 200 OK Content-Length: 4695 Content-Type: application/x-javascript | clean |
http://wattungpaked.com/components/com_virtuemart/fetchscript.php?gzip=0&subdir[0]=/themes/ja_larix&file[0]=theme.js | 200 OK Content-Length: 3609 Content-Type: text/javascript | clean |
http://wattungpaked.com/index.php?option=com_content&view=article&id=18&Itemid=79 | 200 OK Content-Length: 15754 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?option=com_content&view=article&id=15&Itemid=26 | 200 OK Content-Length: 11163 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?option=com_content&view=article&id=54&Itemid=73 | 200 OK Content-Length: 11555 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?option=com_content&view=article&id=64&Itemid=67 | 200 OK Content-Length: 12619 Content-Type: text/html | clean |
http://wattungpaked.com/index.php | 200 OK Content-Length: 19187 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?view=article&catid=41:2011-08-21-14-02-19&id=68:2011-08-21-16-30-15&format=pdf | 200 OK Content-Length: 42819 Content-Type: application/pdf | clean |
http://wattungpaked.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Thu, 28 Aug 2014 02:34:53 GMT Location: http://46.161.41.152/sds/go.php?sid=1 Server: nginx/0.9.4 Content-Length: 289 Content-Type: text/html; charset=iso-8859-1 | clean |
http://46.161.41.152/sds/go.php?sid=1 | HTTP/1.1 302 Found Connection: close Date: Thu, 28 Aug 2014 02:34:58 GMT Referer: Location: http://mediczkkf.ru/ Server: Apache/2.2.22 (Debian) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html Set-Cookie: schema1=true; expires=Thu, 04-Sep-2014 02:34:58 GMT Set-Cookie: visited1=2; expires=Thu, 04-Sep-2014 02:34:58 GMT X-Powered-By: PHP/5.4.4-14+deb7u14 | clean |
http://mediczkkf.ru/ | 500 Server closed connection without sending any data back Content-Length: 105 Content-Type: text/plain | clean |
http://mediczkkf.ru/test404page.js | 500 Server closed connection without sending any data back Content-Length: 105 Content-Type: text/plain | clean |
http://wattungpaked.com/index.php?view=article&catid=41:2011-08-21-14-02-19&id=68:2011-08-21-16-30-15&tmpl=component&print=1&layout=default&page= | 200 OK Content-Length: 10182 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?option=com_mailto&tmpl=component&link=aHR0cDovL3dhdHR1bmdwYWtlZC5jb20vaW5kZXgucGhwP29wdGlvbj1jb21fY29udGVudCZ2aWV3PWFydGljbGUmaWQ9Njg6MjAxMS0wOC0yMS0xNi0zMC0xNSZjYXRpZD00MToyMDExLTA4LTIxLTE0LTAyLTE5Jkl0ZW1pZD02NQ== | 200 OK Content-Length: 2960 Content-Type: text/html | clean |
http://wattungpaked.com/index.php?view=article&catid=41%3A2011-08-21-14-02-19&id=64%3A2011-08-25-14-43-10&format=pdf&option=com_content&Itemid=67 | 200 OK Content-Length: 51507 Content-Type: application/pdf | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=wattungpaked.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://wattungpaked.com/
Result: wattungpaked.com is not infected or malware details are not published yet.
Result: wattungpaked.com is not infected or malware details are not published yet.