Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cardionuclear.net.br
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 03 Mar 2015 14:06:25 GMT
Location: http://www.cardionuclear.net.br/
Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.cardionuclear.net.br/wp-core/xmlrpc.php
X-Powered-By: PHP/5.4.37
...0 bytes of data.
GET / HTTP/1.1
Host: cardionuclear.net.br
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 03 Mar 2015 14:06:25 GMT
Location: http://www.cardionuclear.net.br/
Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.cardionuclear.net.br/wp-core/xmlrpc.php
X-Powered-By: PHP/5.4.37
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cardionuclear.net.br
Referer: http://www.google.com/search?q=cardionuclear.net.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cardionuclear.net.br
Referer: http://www.google.com/search?q=cardionuclear.net.br
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://cardionuclear.net.br/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 03 Mar 2015 14:06:25 GMT Location: http://www.cardionuclear.net.br/ Server: Apache/2.4.12 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.cardionuclear.net.br/wp-core/xmlrpc.php X-Powered-By: PHP/5.4.37 | clean |
http://www.cardionuclear.net.br/ | 200 OK Content-Length: 48720 Content-Type: text/html | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/jquery.js | 200 OK Content-Length: 252880 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/jquery-ui.js | 200 OK Content-Length: 210902 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/jquery-easing.js | 200 OK Content-Length: 3601 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/jquery-mousewheel.js | 200 OK Content-Length: 1384 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/jquery-stickysidebar.js | 200 OK Content-Length: 1839 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/script/script.js | 200 OK Content-Length: 13742 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/coin-slider/coin-slider.js | 200 OK Content-Length: 11675 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/pngFix/jquery.fixPNGs.js | 200 OK Content-Length: 1737 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/hoveralls/jquery.hoveralls.min.js | 200 OK Content-Length: 17758 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/msgbox/jquery.msgbox.min.js | 200 OK Content-Length: 7838 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/fancybox/jquery.fancybox.js | 200 OK Content-Length: 32096 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/plum/js/jquery.plum.form.js | 200 OK Content-Length: 22952 Content-Type: application/javascript | clean |
http://www.cardionuclear.net.br/wp-core/wp-content/themes/cardionuclear/plugin/mask/mask.js | 200 OK Content-Length: 3343 Content-Type: application/javascript | clean |
http://netpix.com.br/assets/script/neve.js | 200 OK Content-Length: 10376 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cardionuclear.net.br
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cardionuclear.net.br/
Result: cardionuclear.net.br is not infected or malware details are not published yet.
Result: cardionuclear.net.br is not infected or malware details are not published yet.