Author Topic: Are these conditional redirects detected?  (Read 1398 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33905
  • malware fighter
Are these conditional redirects detected?
« on: November 11, 2012, 09:49:33 PM »
See: http://zulu.zscaler.com/submission/show/02cae6ce8dbd90bba87369f13b0c0403-1352666385  all green
Same here: https://www.virustotal.com/url/91ffd15f089b1d98646bf3d657a51069c85d6b4a31046bad78f4abd923fc47b1/analysis/1352666308/
But we will find the following conditional redirects:
1. The location line in the header above has redirected the request to: htxp://www.win.niddk.nih.gov/UrlForwarding/?404;htxp://www.win.niddk.nih.gov:80/http:/missionimpossibleghostprotocolmovie.blogspot.com/2012/11/mission-impossible-ghost-protocol-full_10.html
2. The location line in the header above has redirected the request to: htxp://netdirect.niddk.nih.gov/default.aspx?originalUrl=htxp://www.win.niddk.nih.gov/UrlForwarding/default.aspx?404;htxp://www.win.niddk.nih.gov:80/http:/missionimpossibleghostprotocolmovie.blogspot.com/2012/11/mission-impossible-ghost-protocol-full_10.html
3. The location line in the header above has redirected the request to: htxp://www.win.niddk.nih.gov
This script is not being blocked "foresee/foresee-trigger.js"

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!