Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: education-sa.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 17 Jun 2014 03:49:15 GMT
Location: http://www.education-sa.com/
Server: cloudflare-nginx
Content-Type: text/html; charset=UTF-8
CF-RAY: 13bc46b2f21408a5-FRA
Set-Cookie: __cfduid=d004351055078bd31b9cf994ad2dcb76a1402976955359; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly
X-Pingback: http://www.education-sa.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
GET / HTTP/1.1
Host: education-sa.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 17 Jun 2014 03:49:15 GMT
Location: http://www.education-sa.com/
Server: cloudflare-nginx
Content-Type: text/html; charset=UTF-8
CF-RAY: 13bc46b2f21408a5-FRA
Set-Cookie: __cfduid=d004351055078bd31b9cf994ad2dcb76a1402976955359; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly
X-Pingback: http://www.education-sa.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: education-sa.com
Referer: http://www.google.com/search?q=education-sa.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: education-sa.com
Referer: http://www.google.com/search?q=education-sa.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://education-sa.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 17 Jun 2014 03:49:15 GMT Location: http://www.education-sa.com/ Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 CF-RAY: 13bc46b2f21408a5-FRA Set-Cookie: __cfduid=d004351055078bd31b9cf994ad2dcb76a1402976955359; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://www.education-sa.com/ | 200 OK Content-Length: 56005 Content-Type: text/html | clean |
http://www.education-sa.com//ajax.cloudflare.com/cdn-cgi/nexp/dokv=dccf16c0cc/appsh.min.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Tue, 17 Jun 2014 03:49:17 GMT Pragma: no-cache Location: http://www.education-sa.com/ajax.cloudflare.com/cdn-cgi/nexp/dokv=dccf16c0cc/appsh.min.js/ Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-RAY: 13bc46bea00608a5-FRA Set-Cookie: __cfduid=df8a8e5b6ed5cadf8397e1258e37a65321402976957229; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://www.education-sa.com/ajax.cloudflare.com/cdn-cgi/nexp/dokv=dccf16c0cc/appsh.min.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Tue, 17 Jun 2014 03:49:17 GMT Pragma: no-cache Location: http://www.education-sa.com Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-RAY: 13bc46c0f2cd08a5-FRA Set-Cookie: __cfduid=d235f1c5c6223f12e4c7301b206ecb9f01402976957593; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://www.education-sa.com/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Tue, 17 Jun 2014 03:49:18 GMT Pragma: no-cache Location: http://www.education-sa.com Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-Cache-Status: MISS CF-RAY: 13bc46c402f608a5-FRA Set-Cookie: __cfduid=d786d7e90c18a5d4c9ec77445109c28151402976958084; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js?ver=3.9.1 | 200 OK Content-Length: 95786 Content-Type: text/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/functions/likethis/likescript.js?ver=1.0 | 200 OK Content-Length: 1217 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/jtools.js | 200 OK Content-Length: 87881 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/jcarousel.js | 200 OK Content-Length: 14952 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/contentslider.js | 200 OK Content-Length: 13635 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/mytabs.js | 200 OK Content-Length: 732 Content-Type: application/javascript | clean |
http://education-sa.com//pagead2.googlesyndication.com/pagead/show_ads.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Tue, 17 Jun 2014 03:49:21 GMT Pragma: no-cache Location: http://www.education-sa.com/pagead2.googlesyndication.com/pagead/show_ads.js/ Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-RAY: 13bc46d8e60e089f-FRA Set-Cookie: __cfduid=d7df8a6d665cf4af924f99d642d0b2ec11402976961422; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://www.education-sa.com/pagead2.googlesyndication.com/pagead/show_ads.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Tue, 17 Jun 2014 03:49:22 GMT Pragma: no-cache Location: http://www.education-sa.com Server: cloudflare-nginx Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT CF-RAY: 13bc46db34ea08a5-FRA Set-Cookie: __cfduid=d70bb335f4c2c287fa87d4b9378559c111402976961793; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.education-sa.com; HttpOnly X-Pingback: http://www.education-sa.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/custom.js | 200 OK Content-Length: 2854 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/education.main.js | 200 OK Content-Length: 401 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/jquery.bundle.min.js | 200 OK Content-Length: 55054 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/themes/education-2013/js/scrolltopcontrol.js | 200 OK Content-Length: 2092 Content-Type: application/javascript | clean |
http://platform.twitter.com/widgets.js?ver=3.9.1 | 200 OK Content-Length: 97861 Content-Type: application/javascript | clean |
http://apis.google.com/js/plusone.js?ver=3.9.1 | 200 OK Content-Length: 11812 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.50.0-2014.02.05 | 200 OK Content-Length: 16305 Content-Type: application/javascript | clean |
http://www.education-sa.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.8.1 | 200 OK Content-Length: 8142 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=education-sa.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://education-sa.com/
Result: education-sa.com is not infected or malware details are not published yet.
Result: education-sa.com is not infected or malware details are not published yet.