Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: klinika.lt
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 27 Aug 2014 13:03:22 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Set-Cookie: qtrans_cookie_test=qTranslate+Cookie+Test; path=/; domain=klinika.lt
X-Pingback: http://klinika.lt/xmlrpc.php
GET / HTTP/1.1
Host: klinika.lt
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 27 Aug 2014 13:03:22 GMT
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Set-Cookie: qtrans_cookie_test=qTranslate+Cookie+Test; path=/; domain=klinika.lt
X-Pingback: http://klinika.lt/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: klinika.lt
Referer: http://www.google.com/search?q=klinika.lt
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: klinika.lt
Referer: http://www.google.com/search?q=klinika.lt
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.klinika.lt/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Wed, 27 Aug 2014 13:03:20 GMT Location: http://klinika.lt/ Server: Apache Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 Set-Cookie: qtrans_cookie_test=qTranslate+Cookie+Test; path=/; domain=www.klinika.lt X-Pingback: http://klinika.lt/xmlrpc.php | clean |
http://klinika.lt/ | 200 OK Content-Length: 20642 Content-Type: text/html | clean |
http://web.netmaster.lt/tomma/wp-content/themes/Langasa/jquery.js?ver=3.5 | 200 OK Content-Length: 93868 Content-Type: text/javascript | clean |
http://web.netmaster.lt/tomma/wp-content/plugins/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=3.0.2 | 200 OK Content-Length: 17582 Content-Type: text/javascript | clean |
http://web.netmaster.lt/tomma/wp-content/plugins/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0 | 200 OK Content-Length: 8101 Content-Type: text/javascript | clean |
https://apis.google.com/js/plusone.js | 200 OK Content-Length: 12388 Content-Type: application/javascript | clean |
http://klinika.lt/wp-includes/js/jquery/jquery.js?ver=1.8.3 | 200 OK Content-Length: 93658 Content-Type: text/javascript | clean |
http://klinika.lt/wp-content/plugins/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=3.0.2 | 200 OK Content-Length: 17582 Content-Type: text/javascript | clean |
http://klinika.lt/wp-content/plugins/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0 | 200 OK Content-Length: 8101 Content-Type: text/javascript | clean |
http://www.klinika.lt/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 27 Aug 2014 13:03:24 GMT Pragma: no-cache Location: http://klinika.lt/test404page.js Server: Apache Vary: Accept-Encoding Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: qtrans_cookie_test=qTranslate+Cookie+Test; path=/; domain=www.klinika.lt X-Pingback: http://klinika.lt/xmlrpc.php | clean |
http://klinika.lt/test404page.js | 404 Not Found Content-Length: 10825 Content-Type: text/html | clean |
http://klinika.lt/kainos/ | 200 OK Content-Length: 14059 Content-Type: text/html | clean |
http://klinika.lt/apie-klinika/ | 200 OK Content-Length: 12226 Content-Type: text/html | clean |
http://klinika.lt/kontaktai/ | 200 OK Content-Length: 17330 Content-Type: text/html | clean |
https://maps.googleapis.com/maps/api/js?v=3&sensor=false | 200 OK Content-Length: 5111 Content-Type: text/javascript | clean |
http://klinika.lt/wp-content/themes/KALVE/infobox.js | 200 OK Content-Length: 22948 Content-Type: text/javascript | clean |
http://klinika.lt/en | 200 OK Content-Length: 19703 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=klinika.lt
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://klinika.lt/
Result: klinika.lt is not infected or malware details are not published yet.
Result: klinika.lt is not infected or malware details are not published yet.