Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: jijona.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 08 Jan 2015 17:39:16 GMT
Pragma: no-cache
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_python/3.5.0- Python/2.7.5
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=3oq6a0dsfvuvdog6ht4c50fil4; path=/
X-Pingback: http://jijona.com/xmlrpc.php
X-Powered-By: PHP/5.4.16
GET / HTTP/1.1
Host: jijona.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Thu, 08 Jan 2015 17:39:16 GMT
Pragma: no-cache
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_python/3.5.0- Python/2.7.5
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=3oq6a0dsfvuvdog6ht4c50fil4; path=/
X-Pingback: http://jijona.com/xmlrpc.php
X-Powered-By: PHP/5.4.16
Second query (visit from search engine):
GET / HTTP/1.1
Host: jijona.com
Referer: http://www.google.com/search?q=jijona.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: jijona.com
Referer: http://www.google.com/search?q=jijona.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.jijona.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Thu, 08 Jan 2015 17:39:15 GMT Pragma: no-cache Location: http://jijona.com/ Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 mod_python/3.5.0- Python/2.7.5 Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=q4sppr8s0efdfdb1ckuj8l2uq7; path=/ X-Pingback: http://jijona.com/xmlrpc.php X-Powered-By: PHP/5.4.16 | clean |
http://jijona.com/ | 200 OK Content-Length: 28488 Content-Type: text/html | clean |
http://jijona.com/wp-content/plugins/nextgen-gallery/shutter/shutter-reloaded.js?ver=1.3.3 | 200 OK Content-Length: 9986 Content-Type: application/javascript | clean |
http://jijona.com/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://jijona.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7199 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/plugins/nextgen-gallery/js/jquery.cycle.all.min.js?ver=2.9995 | 200 OK Content-Length: 26590 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/plugins/nextgen-gallery/js/ngg.slideshow.min.js?ver=1.06 | 200 OK Content-Length: 1791 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/plugins/cookie-law-info/js/cookielawinfo.js?ver=3.9.1 | 200 OK Content-Length: 6032 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/sliders/cycle/jquery.cycle.all.min.js?ver=2.99 | 200 OK Content-Length: 32046 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/sliders/cycle/jquery.easing.1.3.js?ver=1.3 | 200 OK Content-Length: 8101 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/sliders/cycle/cycle3/cycle3_script.js?ver=1.0.0 | 200 OK Content-Length: 2574 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/scripts/prettyPhoto/js/jquery.prettyPhoto.js?ver=3.1.3 | 200 OK Content-Length: 24867 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/scripts/superfish-1.4.8/js/superfish.combined.js?ver=1.0.0 | 200 OK Content-Length: 5387 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/themes/u-design/scripts/script.js?ver=1.0 | 200 OK Content-Length: 7253 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.50.0-2014.02.05 | 200 OK Content-Length: 16305 Content-Type: application/javascript | clean |
http://jijona.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.8.1 | 200 OK Content-Length: 9630 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=jijona.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://jijona.com/
Result: jijona.com is not infected or malware details are not published yet.
Result: jijona.com is not infected or malware details are not published yet.