Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: xn023.com
Result:
HTTP/1.1 500 timeout
Content-Type: text/plain
GET / HTTP/1.1
Host: xn023.com
Result:
HTTP/1.1 500 timeout
Content-Type: text/plain
Second query (visit from search engine):
GET / HTTP/1.1
Host: xn023.com
Referer: http://www.google.com/search?q=xn023.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: xn023.com
Referer: http://www.google.com/search?q=xn023.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://xn023.com/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://xn023.com/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=600 Connection: close Date: Wed, 28 Jan 2015 07:58:45 GMT Location: http://www.xn023.com/test404page.js Server: DNSPod URL V2.0 Content-Length: 0 Expires: Wed, 28 Jan 2015 08:08:45 GMT | clean |
http://www.xn023.com/test404page.js | 200 OK Content-Length: 3173 Content-Type: text/html | clean |
http://www.xn023.com/ | HTTP/1.1 200 OK Date: Tue, 27 Jan 2015 23:58:50 GMT Accept-Ranges: bytes ETag: "cb3db78223ad01:50e" Server: IIS Content-Length: 81264 Content-Location: http://www.xn023.com/index.html Content-Type: text/html Last-Modified: Tue, 27 Jan 2015 07:26:05 GMT Set-Cookie: safedog-flow-item=72CB4BEB606808104C443586A385863E; expires=Sat, 6-Mar-2151 03:10:06 GMT; domain=xn023.com; path=/ | clean |
http://www.xn023.com/index.html | HTTP/1.1 200 OK Date: Tue, 27 Jan 2015 23:58:57 GMT Accept-Ranges: bytes ETag: "cb3db78223ad01:50e" Server: IIS Content-Length: 81264 Content-Location: http://www.xn023.com/index.html Content-Type: text/html Last-Modified: Tue, 27 Jan 2015 07:26:05 GMT Set-Cookie: safedog-flow-item=72CB4BEB606808104C443586A385863E; expires=Sat, 6-Mar-2151 03:10:13 GMT; domain=xn023.com; path=/ X-Died: timeout at scan.pm line 1566. | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=xn023.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://xn023.com/
Result: xn023.com is not infected or malware details are not published yet.
Result: xn023.com is not infected or malware details are not published yet.