Scanned pages/files
Request | Server response | Status |
http://cheapticketkorea.com/ | 200 OK Content-Length: 60214 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: +ADw-/title+AD4-Hacked by White-Shadow / B3YAZ.ORG+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+A ...[68305 bytes skipped]... 7.addthis.com/js/250/addthis_widget.js#pubid=ra-4dfc41630893f031"></script> <!-- AddThis Button END --> </div> </div><!--footer --> </div><!--wrap-inside --> </div><!--wrap --> <div id="wp-admin-bar"><div class="padder"><a href="http://travellow.com" id="admin-bar-logo">+ADw-/title+AD4-Hacked by White-Shadow / B3YAZ.ORG+ADw-DIV style+AD0AIg-DISPLAY: none+ACIAPgA8-xmp+AD4-</a><ul class="main-nav"><li class="bp-login no-arrow"><a href="http://travellow.com/wp-login.php?redirect_to=http%3A%2F%2Ftravellow.com">Log In</a></li><li class="bp-signup no-arrow"><a href="http://travellow.com/wp-signup.php">Sign Up</a></li><li id="bp-adminbar-authors-menu"><a href="/">Blog Authors</a><ul class="author-list"><li><a href ...[1307 bytes skipped]... | ||
http://cheapticketkorea.com/wp-content/themes/faretiger/js/clear_textbox.js | 200 OK Content-Length: 197 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js | 200 OK Content-Length: 85260 Content-Type: text/javascript | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/prototype/1.7.1.0/prototype.js?ver=1.7.1/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:29:30 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/prototype/1.7.1.0/prototype.js?ver=1.7.1/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=38c4c2a7160f17622ca0edddfdf87871; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:29:29 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:29:29 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/prototype/1.7.1.0/prototype.js?ver=1.7.1/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/scriptaculous.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:29:41 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/scriptaculous.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=fdef4ebab53f7201450f32a15ee15268; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:29:40 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:29:40 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/scriptaculous.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/builder.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:29:47 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/builder.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=68da55e04f1aaec65fc52b6b9c997f3c; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:29:46 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:29:46 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/builder.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/effects.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:29:52 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/effects.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=fd8e36752e8a47af809e217a9d556fd5; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:29:52 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:29:52 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/effects.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/dragdrop.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:29:58 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/dragdrop.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=02493c6807b9f761ef147d94cd99f2ce; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:29:58 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:29:58 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/dragdrop.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/slider.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:30:04 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/slider.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=0d15d57e0f098b48c3b506624d3cb7b2; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:30:03 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:30:03 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/slider.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://cheapticketkorea.com//ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/controls.js?ver=1.9.0/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Cache-Control: max-age=1, private, must-revalidate Connection: close Date: Wed, 03 Sep 2014 22:30:10 GMT Pragma: no-cache Location: http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/controls.js?ver=1.9.0/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 Vary: Cookie Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=f8bd78bcf31fc8729847bc2d237200fb; path=/ Set-Cookie: bp-message=deleted; expires=Tue, 03-Sep-2013 22:30:09 GMT; path=/ Set-Cookie: bp-message-type=deleted; expires=Tue, 03-Sep-2013 22:30:09 GMT; path=/ X-Pingback: http://cheapticketkorea.com/xmlrpc.php X-Powered-By: PHP/5.2.17 | clean |
http://cheapticketkorea.com/ajax.googleapis.com/ajax/libs/scriptaculous/1.9.0/controls.js?ver=1.9.0/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://assiia.com/api/getip/wp/flight/widget/js/jquery.autocomplete.js | 404 Not Found Content-Length: 759 Content-Type: text/html | clean |
http://assiia.com/api/getip/wp/flight/widget/js/jquery-ui-1.8.12.custom.min.js | 404 Not Found Content-Length: 767 Content-Type: text/html | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6875 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cheapticketkorea.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=1, private, must-revalidate
Connection: close
Date: Wed, 03 Sep 2014 22:29:25 GMT
Accept-Ranges: bytes
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Vary: Accept-Encoding,Cookie
Content-Length: 60214
Content-Type: text/html; charset=UTF-8
Expires: Wed, 03 Sep 2014 22:34:25 GMT
...60214 bytes of data.
GET / HTTP/1.1
Host: cheapticketkorea.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=1, private, must-revalidate
Connection: close
Date: Wed, 03 Sep 2014 22:29:25 GMT
Accept-Ranges: bytes
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Vary: Accept-Encoding,Cookie
Content-Length: 60214
Content-Type: text/html; charset=UTF-8
Expires: Wed, 03 Sep 2014 22:34:25 GMT
...60214 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cheapticketkorea.com
Referer: http://www.google.com/search?q=cheapticketkorea.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cheapticketkorea.com
Referer: http://www.google.com/search?q=cheapticketkorea.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cheapticketkorea.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://cheapticketkorea.com/
Result: cheapticketkorea.com is not infected or malware details are not published yet.
Result: cheapticketkorea.com is not infected or malware details are not published yet.