Avast WEBforum

Other => Viruses and worms => Topic started by: Zyla on May 14, 2013, 08:42:52 PM

Title: Strange redirect
Post by: Zyla on May 14, 2013, 08:42:52 PM

I was on a website and got this redirect, but it seemed to not do anything but display jibberish at this site xxx.asdj003.adneine.com


There was no detection and it does not look like anything was installed, just very strange.

Title: Re: Strange redirect
Post by: Pondus on May 14, 2013, 08:58:01 PM

sucuri
http://sitecheck.sucuri.net/results/asdj003.adneine.com

urlquery
http://urlquery.net/report.php?id=2458538

Title: Re: Strange redirect
Post by: polonus on May 14, 2013, 10:48:49 PM

Not much here either: hxtp://asdj003.adneine.com
And currently given safe, so not blacklisted anymore: http://www.avgthreatlabs.com/sitereports/domain/adneine.com/
check.gred.jp gives it http://ASDJ003.ADNEINE.COM Safe
Trend Micro flags site

hxtp://asdj003.adneine.com

HTTP/1.1 404 Not Found
Date: Tue, 14 May 2013 20:45:39 GMT
Content-Type: text/html; charset=utf-8
Connection: close
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Server: Microsoft-IIS/6.0
X-AspNetMvc-Version: 1.0
X-Powered-By: ASP.NET
Content-Length: 0

Dangerous
The latest tests indicate that this URL contains malicious software or could defraud visitors.

Disease Vector
Sites that directly or indirectly facilitate the distribution of malicious software or source code
Reclassify Request? Current status unreachable...confirmed here:
http://zulu.zscaler.com/submission/show/3af6c0c5db348c51d5805e12c4ab4861-1368564241
http://wscheck.com/trust-report/adneine.com

Could have been taken down?

polonus

Title: Re: Strange redirect
Post by: Zyla on May 15, 2013, 11:39:53 PM

Good news is i ran into this redirect (on the same website) and it got blocked by Avast Network shield

the blocked site was xxx.yqgiw.adneine.com this time though