Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=nygayweddingceremonies.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ilmus.com.tr
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Fri, 16 Jan 2015 17:00:37 GMT
Pragma: no-cache
Server: nginx
Content-Encoding: none
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: cfc8c22af954be8995c343ceba41e139=bf5c4f68a697bc2471ceede6f1435d42; path=/
GET / HTTP/1.1
Host: ilmus.com.tr
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Fri, 16 Jan 2015 17:00:37 GMT
Pragma: no-cache
Server: nginx
Content-Encoding: none
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: cfc8c22af954be8995c343ceba41e139=bf5c4f68a697bc2471ceede6f1435d42; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: ilmus.com.tr
Referer: http://www.google.com/search?q=ilmus.com.tr
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ilmus.com.tr
Referer: http://www.google.com/search?q=ilmus.com.tr
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://nygayweddingceremonies.com/ | HTTP/1.1 302 Found Cache-Control: max-age=900 Connection: close Date: Thu, 25 Dec 2014 22:18:31 GMT Age: 1 Location: http://oneheartceremonies.com Server: Microsoft-IIS/7.5 Content-Length: 146 Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | malicious |
http://oneheartceremonies.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Thu, 25 Dec 2014 22:18:33 GMT Pragma: no-cache Location: http://www.oneheartceremonies.com/ Server: Apache mod_fcgid/2.3.10-dev Vary: User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=8db10d8512e6a431aa0d77543166e099; path=/ Set-Cookie: wfvt_2391288771=549c8d3925f52; expires=Thu, 25-Dec-2014 22:48:33 GMT; path=/; httponly X-Pingback: http://www.oneheartceremonies.com/xmlrpc.php X-Powered-By: PHP/5.4.34 | clean |
http://www.oneheartceremonies.com/ | 503 Service Unavailable Content-Length: 1844 Content-Type: text/html | clean |
http://www.oneheartceremonies.com/wp-content/plugins/5sec-maintenance-mode/themes/js/jquery-1.5.1.min.js | 200 OK Content-Length: 85260 Content-Type: application/x-javascript | clean |
http://www.oneheartceremonies.com/wp-content/plugins/5sec-maintenance-mode/themes/js/jquery.countdown.js | 200 OK Content-Length: 30153 Content-Type: application/x-javascript | clean |
http://www.oneheartceremonies.com/wp-content/plugins/5sec-maintenance-mode/themes/js/jquery.progressbar.min.js | 200 OK Content-Length: 2227 Content-Type: application/x-javascript | clean |
http://nygayweddingceremonies.com/test404page.js | HTTP/1.1 302 Found Cache-Control: max-age=900 Connection: close Date: Thu, 25 Dec 2014 22:18:35 GMT Age: 1 Location: http://oneheartceremonies.com/test404page.js Server: Microsoft-IIS/7.5 Content-Length: 161 Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | malicious |
http://oneheartceremonies.com/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Thu, 25 Dec 2014 22:18:37 GMT Pragma: no-cache Location: http://www.oneheartceremonies.com/test404page.js Server: Apache mod_fcgid/2.3.10-dev Vary: User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Set-Cookie: PHPSESSID=71b9e7142c81127f5c2929c2a880c5b8; path=/ Set-Cookie: wfvt_2391288771=549c8d3d24aec; expires=Thu, 25-Dec-2014 22:48:37 GMT; path=/; httponly X-Pingback: http://www.oneheartceremonies.com/xmlrpc.php X-Powered-By: PHP/5.4.34 | clean |
http://www.oneheartceremonies.com/test404page.js | 503 Service Unavailable Content-Length: 1808 Content-Type: text/html | clean |