Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://zabrat-vse-seichas.tk/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: zabrat-vse-seichas.tk Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 26 Jul 2014 07:00:19 GMT Location: http://instant-online-refills.com/?wm=19427&tr=8030 Server: nginx Content-Length: 263 Content-Type: text/html; charset=iso-8859-1 X-Cache: HIT from Backend | malicious |
Scanned pages/files
Request | Server response | Status |
http://zabrat-vse-seichas.tk/ | 200 OK Content-Length: 893 Content-Type: text/html | clean |
http://zabrat-vse-seichas.tk/?action=rpwd | 200 OK Content-Length: 877 Content-Type: text/html | clean |
http://zabrat-vse-seichas.tk/test404page.js | HTTP/1.1 302 Found Connection: close Date: Sat, 26 Jul 2014 07:00:20 GMT Location: http://instant-online-refills.com/?wm=19427&tr=8030 Server: nginx Content-Length: 239 Content-Type: text/html; charset=iso-8859-1 | clean |
http://instant-online-refills.com/?wm=19427&tr=8030 | 200 OK Content-Length: 7767 Content-Type: text/html | clean |
http://d1vbm0eveofcle.cloudfront.net/scripts/js3caf.js | 200 OK Content-Length: 3490 Content-Type: application/x-javascript | clean |
http://d1vbm0eveofcle.cloudfront.net/scripts/tier2caf.js | 200 OK Content-Length: 25631 Content-Type: application/x-javascript | clean |
http://zabrat-vse-seichas.tk/scripts/feedmeCaf.php?q=&ip=78.158.11.226&max=10&hl=lt&d=instant-online-refills.com&ron=0&adult=0 | HTTP/1.1 302 Found Connection: close Date: Sat, 26 Jul 2014 07:00:26 GMT Location: http://instant-online-refills.com/?wm=19427&tr=8030 Server: nginx Content-Length: 239 Content-Type: text/html; charset=iso-8859-1 | clean |
http://instant-online-refills.com/test404page.js | 400 Bad Request Content-Length: 20 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=zabrat-vse-seichas.tk
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://zabrat-vse-seichas.tk/
Result: zabrat-vse-seichas.tk is not infected or malware details are not published yet.
Result: zabrat-vse-seichas.tk is not infected or malware details are not published yet.