Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: avitelecom.ro
Result:
HTTP/1.1 403 Forbidden
Connection: close
Date: Thu, 25 Dec 2014 14:13:48 GMT
Server: nginx admin
Content-Length: 321
Content-Type: text/html; charset=iso-8859-1
...321 bytes of data.
GET / HTTP/1.1
Host: avitelecom.ro
Result:
HTTP/1.1 403 Forbidden
Connection: close
Date: Thu, 25 Dec 2014 14:13:48 GMT
Server: nginx admin
Content-Length: 321
Content-Type: text/html; charset=iso-8859-1
...321 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: avitelecom.ro
Referer: http://www.google.com/search?q=avitelecom.ro
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: avitelecom.ro
Referer: http://www.google.com/search?q=avitelecom.ro
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://garingzone.com/news | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 12 Jan 2015 14:53:49 GMT Location: http://garingzone.com/news/ Server: LiteSpeed Vary: User-Agent Content-Length: 1147 Content-Type: text/html | clean |
http://garingzone.com/news/ | HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Connection: close Date: Mon, 12 Jan 2015 14:53:50 GMT Location: http://com-19or.net/space.php?a=218848&c=wl_con&s=d784 Server: LiteSpeed Vary: User-Agent Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.3.28 | malicious |
http://com-19or.net/space.php?a=218848&c=wl_con&s=d784 | HTTP/1.1 302 Found Connection: close Date: Mon, 12 Jan 2015 14:53:51 GMT Location: http://com-4zof.net/space.php?a=218848&c=wl_con&s=d784 Server: nginx Content-Length: 0 Content-Type: text/html; charset=UTF-8 Set-Cookie: AFFID=218848; expires=Wed, 11-Feb-2015 14:48:15 GMT; path=/; domain=.com-19or.net Set-Cookie: SID=d784; expires=Wed, 11-Feb-2015 14:48:15 GMT; path=/; domain=.com-19or.net | clean |
http://com-4zof.net/space.php?a=218848&c=wl_con&s=d784 | HTTP/1.1 302 Found Connection: close Date: Mon, 12 Jan 2015 14:53:51 GMT Location: http://209-weightloss.com-4zof.net/drsmartgam/intforsgam/ Server: nginx Content-Length: 0 Content-Type: text/html; charset=UTF-8 Set-Cookie: AFFID=218848; expires=Wed, 11-Feb-2015 14:48:15 GMT; path=/; domain=.com-4zof.net Set-Cookie: SID=d784; expires=Wed, 11-Feb-2015 14:48:15 GMT; path=/; domain=.com-4zof.net | clean |
http://209-weightloss.com-4zof.net/drsmartgam/intforsgam/ | 200 OK Content-Length: 18275 Content-Type: text/html | clean |
http://209-weightloss.com-4zof.net/drsmartgam/intforsgam/js/jquery.min.js | 200 OK Content-Length: 95785 Content-Type: text/javascript | clean |
http://garingzone.com/js/today.js | 404 Not Found Content-Length: 169713 Content-Type: text/html | clean |
http://garingzone.com/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 95807 Content-Type: application/javascript | clean |
http://garingzone.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7199 Content-Type: application/javascript | clean |
http://garingzone.com/wp-content/plugins/tagDiv-social-icons/social-icons.js?ver=4.1 | 200 OK Content-Length: 109 Content-Type: application/javascript | clean |
http://garingzone.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=4.1 | 200 OK Content-Length: 83872 Content-Type: application/javascript | clean |
http://garingzone.com/wp-includes/js/json2.min.js?ver=2011-02-23 | 200 OK Content-Length: 17412 Content-Type: application/javascript | clean |
http://garingzone.com//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Mon, 12 Jan 2015 14:54:02 GMT Pragma: no-cache Location: http://garingzone.com/pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ Server: LiteSpeed Vary: User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT X-Pingback: http://garingzone.com/xmlrpc.php X-Powered-By: PHP/5.3.28 | clean |
http://garingzone.com/pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | 404 Not Found Content-Length: 169800 Content-Type: text/html | clean |
http://garingzone.com/wp-content/plugins/myMail/assets/js/form.js?ver=1.6.2.2 | 200 OK Content-Length: 1572 Content-Type: application/javascript | clean |
http://garingzone.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 | 200 OK Content-Length: 15248 Content-Type: application/javascript | clean |
http://garingzone.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.0.3 | 200 OK Content-Length: 9658 Content-Type: application/javascript | clean |
http://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=201503 | 200 OK Content-Length: 9301 Content-Type: application/x-javascript | clean |
http://s.gravatar.com/js/gprofiles.js?ver=2015Janaa | 200 OK Content-Length: 21442 Content-Type: application/x-javascript | clean |
http://garingzone.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=4.1 | 200 OK Content-Length: 959 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=garingzone.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://garingzone.com/
Result: garingzone.com is not infected or malware details are not published yet.
Result: garingzone.com is not infected or malware details are not published yet.