Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: instalmontaj.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Jul 2014 15:04:18 GMT
Server: nginx/1.6.0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://instalmontaj.eu/xmlrpc.php
GET / HTTP/1.1
Host: instalmontaj.eu
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 18 Jul 2014 15:04:18 GMT
Server: nginx/1.6.0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://instalmontaj.eu/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: instalmontaj.eu
Referer: http://www.google.com/search?q=instalmontaj.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: instalmontaj.eu
Referer: http://www.google.com/search?q=instalmontaj.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.instalmontaj.eu/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 18 Jul 2014 15:04:17 GMT Location: http://instalmontaj.eu/ Server: nginx/1.6.0 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://instalmontaj.eu/xmlrpc.php | clean |
http://instalmontaj.eu/ | 200 OK Content-Length: 18757 Content-Type: text/html | clean |
http://instalmontaj.eu/wp-content/themes/2colours/js/cufon-yui.js | 200 OK Content-Length: 18258 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/themes/2colours/js/2colours_400.font.js | 200 OK Content-Length: 32031 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 | 200 OK Content-Length: 9986 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-includes/js/jquery/jquery.js?ver=1.8.3 | 200 OK Content-Length: 93658 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995 | 200 OK Content-Length: 26590 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06 | 200 OK Content-Length: 1791 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/plugins/slideshow-gallery/js/gallery.js?ver=1.0 | 200 OK Content-Length: 6454 Content-Type: application/javascript | clean |
http://instalmontaj.eu/wp-content/plugins/slideshow-gallery/js/colorbox.js?ver=1.3.19 | 200 OK Content-Length: 25509 Content-Type: application/javascript | clean |
https://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js | 200 OK Content-Length: 93868 Content-Type: text/javascript | clean |
http://instalmontaj.eu/wp-content/themes/2colours/js/featuredcontentglider.js | 200 OK Content-Length: 7314 Content-Type: application/javascript | clean |
http://www.instalmontaj.eu/servicii/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 18 Jul 2014 15:04:27 GMT Location: http://instalmontaj.eu/servicii Server: nginx/1.6.0 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://instalmontaj.eu/xmlrpc.php | clean |
http://instalmontaj.eu/servicii | 200 OK Content-Length: 24398 Content-Type: text/html | clean |
http://instalmontaj.eu/despre-noi | 200 OK Content-Length: 29838 Content-Type: text/html | clean |
http://instalmontaj.eu/despre-noi/divizia-sisteme-fixe-de-stingere-cu-apa-si-spuma | 200 OK Content-Length: 24949 Content-Type: text/html | clean |
http://instalmontaj.eu/despre-noi/divizia-sisteme-fixe-de-stingere-cu-inundare-cu-agenti-gazosi-ecologici | 200 OK Content-Length: 24904 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=instalmontaj.eu
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://instalmontaj.eu/
Result: instalmontaj.eu is not infected or malware details are not published yet.
Result: instalmontaj.eu is not infected or malware details are not published yet.