Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 2012tampa.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 13 Jun 2014 08:21:14 GMT
Pragma: no-cache
Server: LiteSpeed
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=5169761c6734792d782e67f3eeda9191; path=/
X-Pingback: http://2012tampa.com/xmlrpc.php
X-Powered-By: PHP/5.4.22
GET / HTTP/1.1
Host: 2012tampa.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 13 Jun 2014 08:21:14 GMT
Pragma: no-cache
Server: LiteSpeed
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=5169761c6734792d782e67f3eeda9191; path=/
X-Pingback: http://2012tampa.com/xmlrpc.php
X-Powered-By: PHP/5.4.22
Second query (visit from search engine):
GET / HTTP/1.1
Host: 2012tampa.com
Referer: http://www.google.com/search?q=2012tampa.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 2012tampa.com
Referer: http://www.google.com/search?q=2012tampa.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.2012tampa.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 13 Jun 2014 08:21:14 GMT Pragma: no-cache Location: http://2012tampa.com/ Server: LiteSpeed Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=daeecc86c62556a36dfb007a38718877; path=/ X-Pingback: http://2012tampa.com/xmlrpc.php X-Powered-By: PHP/5.4.22 | clean |
http://2012tampa.com/ | 200 OK Content-Length: 29156 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=31 | 200 OK Content-Length: 16666 Content-Type: text/html | clean |
http://2012tampa.com/wp-includes/js/comment-reply.min.js?ver=3.9.1 | 200 OK Content-Length: 757 Content-Type: application/javascript | clean |
http://2012tampa.com/?page_id=33 | 200 OK Content-Length: 17065 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=53 | 200 OK Content-Length: 17131 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=56 | 200 OK Content-Length: 17185 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=57 | 200 OK Content-Length: 17185 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=58 | 200 OK Content-Length: 17185 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=54 | 200 OK Content-Length: 17119 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=55 | 200 OK Content-Length: 17119 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=35 | 200 OK Content-Length: 17053 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=52 | 200 OK Content-Length: 17204 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=63 | 200 OK Content-Length: 43013 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=65 | 200 OK Content-Length: 43013 Content-Type: text/html | clean |
http://2012tampa.com/?page_id=67 | 200 OK Content-Length: 43172 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=2012tampa.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://2012tampa.com/
Result: 2012tampa.com is not infected or malware details are not published yet.
Result: 2012tampa.com is not infected or malware details are not published yet.