Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: hentaicrowd.com
Result:
HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 16 Sep 2014 03:45:22 GMT
Server: Apache/2.2.24 (Unix) mod_hive/3.6 mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_qos/10.10 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.35
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Tue, 16 Sep 2014 03:45:22 GMT
Set-Cookie: SESSfb2f900697f8ab4d406881a7e8a3c43e=g2fs05jpsr1i0pefhsp912j7e5; expires=Thu, 09-Oct-2014 07:18:42 GMT; path=/; domain=.hentaicrowd.com
GET / HTTP/1.1
Host: hentaicrowd.com
Result:
HTTP/1.1 200 OK
Cache-Control: store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 16 Sep 2014 03:45:22 GMT
Server: Apache/2.2.24 (Unix) mod_hive/3.6 mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_qos/10.10 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.35
Content-Type: text/html; charset=utf-8
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Tue, 16 Sep 2014 03:45:22 GMT
Set-Cookie: SESSfb2f900697f8ab4d406881a7e8a3c43e=g2fs05jpsr1i0pefhsp912j7e5; expires=Thu, 09-Oct-2014 07:18:42 GMT; path=/; domain=.hentaicrowd.com
Second query (visit from search engine):
GET / HTTP/1.1
Host: hentaicrowd.com
Referer: http://www.google.com/search?q=hentaicrowd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: hentaicrowd.com
Referer: http://www.google.com/search?q=hentaicrowd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://hentaicrowd.com/ | 200 OK Content-Length: 56559 Content-Type: text/html | clean |
http://hentaicrowd.com/modules/jquery_update/replace/jquery.min.js?k | 200 OK Content-Length: 55780 Content-Type: application/javascript | clean |
http://hentaicrowd.com/misc/drupal.js?k | 200 OK Content-Length: 9780 Content-Type: application/javascript | clean |
http://hentaicrowd.com/modules/fivestar/js/fivestar.js?k | 200 OK Content-Length: 16729 Content-Type: application/javascript | clean |
http://hentaicrowd.com/modules/poormanscron/poormanscron.js?k | 200 OK Content-Length: 616 Content-Type: application/javascript | clean |
http://hentaicrowd.com/modules/extlink/extlink.js?k | 200 OK Content-Length: 4526 Content-Type: application/javascript | clean |
http://hentaicrowd.com/themes/waffles/script.js?k | 200 OK Content-Length: 360 Content-Type: application/javascript | clean |
http://hentaicrowd.com/image | 200 OK Content-Length: 34095 Content-Type: text/html | clean |
http://hentaicrowd.com/modules/bookmark_us/bookmark_us.js?k | 200 OK Content-Length: 2198 Content-Type: application/javascript | clean |
http://ads.juicyads.com/jsclients/jam_min.js | 200 OK Content-Length: 21397 Content-Type: application/x-javascript | clean |
http://adspaces.ero-advertising.com/adspace/138747.js | 200 OK Content-Length: 758 Content-Type: application/javascript | clean |
http://syndication.exoclick.com/splash.php?idzone=803433&type=3 | 200 OK Content-Length: 5825 Content-Type: application/x-javascript | clean |
http://hentaicrowd.com/glossary | 200 OK Content-Length: 46519 Content-Type: text/html | clean |
http://hentaicrowd.com/popular | 200 OK Content-Length: 47679 Content-Type: text/html | clean |
http://hentaicrowd.com/rss.xml | 200 OK Content-Length: 24210 Content-Type: application/rss+xml | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=hentaicrowd.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://hentaicrowd.com/
Result: hentaicrowd.com is not infected or malware details are not published yet.
Result: hentaicrowd.com is not infected or malware details are not published yet.