Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: greenteacher.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 19 Mar 2015 03:09:15 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=72ar5q385l8jsc50q4fr41ive3; path=/
GET / HTTP/1.1
Host: greenteacher.org
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 19 Mar 2015 03:09:15 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=72ar5q385l8jsc50q4fr41ive3; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: greenteacher.org
Referer: http://www.google.com/search?q=greenteacher.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: greenteacher.org
Referer: http://www.google.com/search?q=greenteacher.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://greenteacher.org/ | 200 OK Content-Length: 46553 Content-Type: text/html | clean |
http://greenteacher.org/Files2011/scripts/AC_RunActiveContent.js | 200 OK Content-Length: 8322 Content-Type: application/javascript | clean |
http://greenteacher.org/?page_id=1 | 200 OK Content-Length: 46553 Content-Type: text/html | clean |
http://greenteacher.org/forums/index.php?action=login | HTTP/1.1 302 Moved Temporarily Cache-Control: private Connection: close Date: Thu, 19 Mar 2015 03:09:18 GMT Pragma: no-cache Location: http://www.greenteacher.org/forums/index.php?PHPSESSID=l584rl8b3sckjm9hbv0meonpe1;www;action=login Server: Apache Content-Length: 0 Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=l584rl8b3sckjm9hbv0meonpe1; path=/ | clean |
http://www.greenteacher.org/forums/index.php?phpsessid=l584rl8b3sckjm9hbv0meonpe1;www;action=login | 200 OK Content-Length: 12220 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/Themes/default/script.js?fin11 | 200 OK Content-Length: 13506 Content-Type: application/javascript | clean |
http://www.greenteacher.org/forums/Themes/default/sha1.js | 200 OK Content-Length: 12815 Content-Type: application/javascript | clean |
http://greenteacher.org/forums/ | HTTP/1.1 302 Moved Temporarily Cache-Control: private Connection: close Date: Thu, 19 Mar 2015 03:09:20 GMT Pragma: no-cache Location: http://www.greenteacher.org/forums/index.php?PHPSESSID=cne3872300effek9js5ghojh17;www Server: Apache Content-Length: 0 Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=cne3872300effek9js5ghojh17; path=/ | clean |
http://www.greenteacher.org/forums/index.php?phpsessid=cne3872300effek9js5ghojh17;www | 200 OK Content-Length: 17956 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/ | 200 OK Content-Length: 17956 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=login | 200 OK Content-Length: 12220 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=register | 200 OK Content-Length: 10649 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=search;advanced | 200 OK Content-Length: 16788 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057& | 200 OK Content-Length: 17956 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=help | 200 OK Content-Length: 45423 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=search | 200 OK Content-Length: 16788 Content-Type: text/html | clean |
http://www.greenteacher.org/forums/index.php?PHPSESSID=c39lcchub2cda30l2poql1d057&action=calendar | 200 OK Content-Length: 10646 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=greenteacher.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://greenteacher.org/
Result: greenteacher.org is not infected or malware details are not published yet.
Result: greenteacher.org is not infected or malware details are not published yet.