Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: estetikistanbul.info
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 09 Oct 2014 21:28:33 GMT
Pragma: no-cache
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Thu, 09 Oct 2014 21:28:34 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 6846598a91116fbc5663bafd88a6a4b5=bbdb4d73648b10912fcd122b846889e2; path=/
Set-Cookie: estetikcenter_tpl=estetikcenter; expires=Tue, 29-Sep-2015 21:28:33 GMT; path=/
GET / HTTP/1.1
Host: estetikistanbul.info
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 09 Oct 2014 21:28:33 GMT
Pragma: no-cache
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Thu, 09 Oct 2014 21:28:34 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 6846598a91116fbc5663bafd88a6a4b5=bbdb4d73648b10912fcd122b846889e2; path=/
Set-Cookie: estetikcenter_tpl=estetikcenter; expires=Tue, 29-Sep-2015 21:28:33 GMT; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: estetikistanbul.info
Referer: http://www.google.com/search?q=estetikistanbul.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: estetikistanbul.info
Referer: http://www.google.com/search?q=estetikistanbul.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://estetikistanbul.info/ | 200 OK Content-Length: 51385 Content-Type: text/html | clean |
http://estetikistanbul.info/media/system/js/caption.js | 200 OK Content-Length: 1721 Content-Type: application/javascript | clean |
http://estetikistanbul.info/components/com_jcomments/js/jcomments-v2.0.js | 200 OK Content-Length: 26433 Content-Type: application/javascript | clean |
http://estetikistanbul.info/components/com_jcomments/libraries/joomlatune/ajax.js | 200 OK Content-Length: 3978 Content-Type: application/javascript | clean |
http://estetikistanbul.info/templates/estetikcenter/scripts/ja.script.js | 200 OK Content-Length: 2539 Content-Type: application/javascript | clean |
http://estetikistanbul.info/templates/estetikcenter/ja_menus/ja_transmenu/ja.transmenu.js | 200 OK Content-Length: 35837 Content-Type: application/javascript | clean |
http://estetikistanbul.info//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | 404 BileÅen Bulunamadı Content-Length: 1407 Content-Type: text/html | clean |
http://estetikistanbul.info/index.php | 200 OK Content-Length: 51868 Content-Type: text/html | clean |
http://estetikistanbul.info/anasayfa-mainmenu-1 | 200 OK Content-Length: 50977 Content-Type: text/html | clean |
http://estetikistanbul.info/lazer-epilasyon-mainmenu-34 | 200 OK Content-Length: 41068 Content-Type: text/html | clean |
http://estetikistanbul.info/components/com_simplylinks/js/jquery.js | 200 OK Content-Length: 29846 Content-Type: application/javascript | clean |
http://estetikistanbul.info/components/com_simplylinks/js/jtip.js | 200 OK Content-Length: 3920 Content-Type: application/javascript | clean |
http://sociallist.org/widget.js?type=1&cols=3&rows=5&button_dx=160&button_dy=24&lang=en&uid=79a2c14c | HTTP/1.1 302 Moved Temporarily Cache-Control: public, max-age=14400 Connection: close Date: Thu, 09 Oct 2014 21:28:44 GMT Location: https://lessbuttons.com/left.js Server: cloudflare-nginx Content-Type: application/javascript Expires: Fri, 10 Oct 2014 01:28:44 GMT CF-Cache-Status: MISS CF-RAY: 176dab6bab1e05cf-WAW Set-Cookie: __cfduid=d836d0c194dcf0fccb44a5f5f02d729dd1412890124108; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.sociallist.org; HttpOnly | clean |
https://lessbuttons.com/left.js | HTTP/1.1 302 Found Connection: close Date: Thu, 09 Oct 2014 21:28:44 GMT Location: https://lessbuttons.com/left.js?redirectCnt=1 Server: nginx Content-Type: text/html Set-Cookie: uid=9dd28b6d0b5e58fc79990af42026619b; expires=Fri, 09-Oct-2015 21:28:44 GMT; Max-Age=31536000; path=/ Strict-Transport-Security: max-age=20000000 | clean |
https://lessbuttons.com/left.js?redirectcnt=1 | HTTP/1.1 302 Found Connection: close Date: Thu, 09 Oct 2014 21:28:44 GMT Location: https://lessbuttons.com/left.js?redirectcnt=1&redirectCnt=1 Server: nginx Content-Type: text/html Set-Cookie: uid=c2eca7107f9e2c0315dc6d0b53c445fb; expires=Fri, 09-Oct-2015 21:28:44 GMT; Max-Age=31536000; path=/ Strict-Transport-Security: max-age=20000000 | clean |
https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1 | HTTP/1.1 302 Found Connection: close Date: Thu, 09 Oct 2014 21:28:45 GMT Location: https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1&redirectCnt=1 Server: nginx Content-Type: text/html Set-Cookie: uid=4a9bef50a69eace11699e96e6530d3ac; expires=Fri, 09-Oct-2015 21:28:45 GMT; Max-Age=31536000; path=/ Strict-Transport-Security: max-age=20000000 | clean |
https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1&redirectcnt=1 | HTTP/1.1 302 Found Connection: close Date: Thu, 09 Oct 2014 21:28:45 GMT Location: https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1&redirectcnt=1&redirectCnt=1 Server: nginx Content-Type: text/html Set-Cookie: uid=0b89cbfe24461dc7f988f16702972002; expires=Fri, 09-Oct-2015 21:28:45 GMT; Max-Age=31536000; path=/ Strict-Transport-Security: max-age=20000000 | clean |
https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1&redirectcnt=1&redirectcnt=1 | HTTP/1.1 302 Found Connection: close Date: Thu, 09 Oct 2014 21:28:45 GMT Location: https://lessbuttons.com/left.js?redirectcnt=1&redirectcnt=1&redirectcnt=1&redirectcnt=1&redirectCnt=1 Server: nginx Content-Type: text/html Set-Cookie: uid=221f08cd65283093be2b4ee79ba6d2b4; expires=Fri, 09-Oct-2015 21:28:45 GMT; Max-Age=31536000; path=/ Strict-Transport-Security: max-age=20000000 | clean |
http://lessbuttons.com/test404page.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Thu, 09 Oct 2014 21:28:46 GMT Location: https://lessbuttons.com/test404page.js Server: nginx Content-Length: 178 Content-Type: text/html | clean |
https://lessbuttons.com/test404page.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Thu, 09 Oct 2014 21:28:46 GMT Location: / Server: nginx Content-Type: text/html Strict-Transport-Security: max-age=20000000 | clean |
https://lessbuttons.com/ | 200 OK Content-Length: 7534 Content-Type: text/html | clean |
https://d3p4u3kahacfyu.cloudfront.net/images/js/jquery.min.js | 200 OK Content-Length: 96381 Content-Type: application/x-javascript | clean |
https://d3p4u3kahacfyu.cloudfront.net/images/js/bootstrap.min.js | 200 OK Content-Length: 29110 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=estetikistanbul.info
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://estetikistanbul.info/
Result: estetikistanbul.info is not infected or malware details are not published yet.
Result: estetikistanbul.info is not infected or malware details are not published yet.