Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ogretmensozluk.com
Result:
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 05 Apr 2014 09:48:11 GMT
Pragma: no-cache
Location: http://www.ogretmensozluk.com/
Server: LiteSpeed
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=823b486ac4f6ffc41220cb37b97577fe; path=/
Set-Cookie: wassup=N2M0MzRmNGIwNWEzYTJlZDkyYzIwMWY3NzIyZjA2ZTY6OjEzOTY2OTM5OTE6Ojo6NzguMTU4LjExLjIyNjo6Y2wtNzgtMTU4LTExLTIyNi5mYXN0bGluay5sdDo6; expires=Sat, 05-Apr-2014 10:38:11 GMT; path=/
X-Pingback: http://www.ogretmensozluk.com/xmlrpc.php
...0 bytes of data.
GET / HTTP/1.1
Host: ogretmensozluk.com
Result:
HTTP/1.1 301 Moved Permanently
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 05 Apr 2014 09:48:11 GMT
Pragma: no-cache
Location: http://www.ogretmensozluk.com/
Server: LiteSpeed
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=823b486ac4f6ffc41220cb37b97577fe; path=/
Set-Cookie: wassup=N2M0MzRmNGIwNWEzYTJlZDkyYzIwMWY3NzIyZjA2ZTY6OjEzOTY2OTM5OTE6Ojo6NzguMTU4LjExLjIyNjo6Y2wtNzgtMTU4LTExLTIyNi5mYXN0bGluay5sdDo6; expires=Sat, 05-Apr-2014 10:38:11 GMT; path=/
X-Pingback: http://www.ogretmensozluk.com/xmlrpc.php
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ogretmensozluk.com
Referer: http://www.google.com/search?q=ogretmensozluk.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ogretmensozluk.com
Referer: http://www.google.com/search?q=ogretmensozluk.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://ogretmensozluk.com/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Sat, 05 Apr 2014 09:48:11 GMT Pragma: no-cache Location: http://www.ogretmensozluk.com/ Server: LiteSpeed Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=823b486ac4f6ffc41220cb37b97577fe; path=/ Set-Cookie: wassup=N2M0MzRmNGIwNWEzYTJlZDkyYzIwMWY3NzIyZjA2ZTY6OjEzOTY2OTM5OTE6Ojo6NzguMTU4LjExLjIyNjo6Y2wtNzgtMTU4LTExLTIyNi5mYXN0bGluay5sdDo6; expires=Sat, 05-Apr-2014 10:38:11 GMT; path=/ X-Pingback: http://www.ogretmensozluk.com/xmlrpc.php | clean |
http://www.ogretmensozluk.com/ | 200 OK Content-Length: 17252 Content-Type: text/html | clean |
http://www.ogretmensozluk.com/wp-content/plugins/proplayer/js/swfobject.js | 200 OK Content-Length: 10250 Content-Type: application/javascript | clean |
http://www.ogretmensozluk.com/wp-content/themes/eksiblog/js/jquery.js | 200 OK Content-Length: 58507 Content-Type: application/javascript | clean |
http://www.ogretmensozluk.com/wp-content/themes/eksiblog/js/nav.js | 200 OK Content-Length: 2772 Content-Type: application/javascript | clean |
http://www.ogretmensozluk.com/wp-content/themes/eksiblog/js/switch.js | 200 OK Content-Length: 1840 Content-Type: application/javascript | clean |
http://medicswap.com/js/widget.js | 500 Server closed connection without sending any data back Content-Length: 105 Content-Type: text/plain | clean |
http://medicswap.com/test404page.js | 500 Server closed connection without sending any data back Content-Length: 105 Content-Type: text/plain | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ogretmensozluk.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ogretmensozluk.com/
Result: ogretmensozluk.com is not infected or malware details are not published yet.
Result: ogretmensozluk.com is not infected or malware details are not published yet.