Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 100konline.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=3, must-revalidate
Connection: close
Date: Fri, 15 Aug 2014 08:16:18 GMT
Server: nginx/1.6.1
Vary: Accept-Encoding,Cookie
Content-Type: text/html; charset=UTF-8
WP-Super-Cache: Served supercache file from PHP
GET / HTTP/1.1
Host: 100konline.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=3, must-revalidate
Connection: close
Date: Fri, 15 Aug 2014 08:16:18 GMT
Server: nginx/1.6.1
Vary: Accept-Encoding,Cookie
Content-Type: text/html; charset=UTF-8
WP-Super-Cache: Served supercache file from PHP
Second query (visit from search engine):
GET / HTTP/1.1
Host: 100konline.com
Referer: http://www.google.com/search?q=100konline.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 100konline.com
Referer: http://www.google.com/search?q=100konline.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://100konline.com/ | 200 OK Content-Length: 97466 Content-Type: text/html | clean |
http://100kOnline.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-content/plugins/wp-greet-box/js/functions.js?ver=3.9.2 | 200 OK Content-Length: 1501 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-content/plugins/wp-greet-box/js/js-mode.js?ver=3.9.2 | 200 OK Content-Length: 2085 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-content/plugins/wp-click-track/js/ajax.js | 200 OK Content-Length: 5162 Content-Type: application/javascript | clean |
http://connect.facebook.net/en_US/all.js | 200 OK Content-Length: 160930 Content-Type: application/x-javascript | clean |
http://100kOnline.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.4 | 200 OK Content-Length: 4289 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.10.4 | 200 OK Content-Length: 6521 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-includes/js/jquery/ui/jquery.ui.tabs.min.js?ver=1.10.4 | 200 OK Content-Length: 11623 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-content/plugins/jetpack/modules/shortcodes/js/jquery.cycle.js?ver=2.9999.8 | 200 OK Content-Length: 52470 Content-Type: application/javascript | clean |
http://100kOnline.com/wp-content/plugins/jetpack/modules/shortcodes/js/slideshow-shortcode.js?ver=20121214.1 | 200 OK Content-Length: 5444 Content-Type: application/javascript | clean |
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201433 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://s.gravatar.com/js/gprofiles.js?ver=2014Augaa | 200 OK Content-Length: 21442 Content-Type: application/x-javascript | clean |
http://100kOnline.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.9.2 | 200 OK Content-Length: 959 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=100konline.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://100konline.com/
Result: 100konline.com is not infected or malware details are not published yet.
Result: 100konline.com is not infected or malware details are not published yet.