Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: studiu.info
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Date: Thu, 26 Jun 2014 11:20:15 GMT
Pragma: no-cache
Server: Microsoft-IIS/7.5
Content-Length: 17054
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Thu, 26 Jun 2014 11:20:15 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: c0af3fedbc0a559b3db510869b7f7744=uq3jsfmknne3g8fgkok90op816; path=/; HttpOnly
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
...17054 bytes of data.
GET / HTTP/1.1
Host: studiu.info
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Date: Thu, 26 Jun 2014 11:20:15 GMT
Pragma: no-cache
Server: Microsoft-IIS/7.5
Content-Length: 17054
Content-Type: text/html; charset=utf-8
Expires: Mon, 1 Jan 2001 00:00:00 GMT
Last-Modified: Thu, 26 Jun 2014 11:20:15 GMT
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: c0af3fedbc0a559b3db510869b7f7744=uq3jsfmknne3g8fgkok90op816; path=/; HttpOnly
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
...17054 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: studiu.info
Referer: http://www.google.com/search?q=studiu.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: studiu.info
Referer: http://www.google.com/search?q=studiu.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://studiu.info/ | 200 OK Content-Length: 17054 Content-Type: text/html | clean |
http://studiu.info/media/jui/js/jquery.min.js | 200 OK Content-Length: 93107 Content-Type: application/x-javascript | clean |
http://studiu.info/media/jui/js/jquery-noconflict.js | 200 OK Content-Length: 21 Content-Type: application/x-javascript | clean |
http://studiu.info/media/jui/js/jquery-migrate.min.js | 200 OK Content-Length: 7199 Content-Type: application/x-javascript | clean |
http://studiu.info/media/system/js/tabs-state.js | 200 OK Content-Length: 1829 Content-Type: application/x-javascript | clean |
http://studiu.info/media/system/js/mootools-core.js | 200 OK Content-Length: 83893 Content-Type: application/x-javascript | clean |
http://studiu.info/media/system/js/core.js | 200 OK Content-Length: 3821 Content-Type: application/x-javascript | clean |
http://studiu.info/media/system/js/caption.js | 200 OK Content-Length: 501 Content-Type: application/x-javascript | clean |
http://studiu.info/media/jui/js/bootstrap.min.js | 200 OK Content-Length: 29156 Content-Type: application/x-javascript | clean |
http://studiu.info/templates/protostar/js/template.js | 200 OK Content-Length: 1340 Content-Type: application/x-javascript | clean |
http://studiu.info/sample-sites | 200 OK Content-Length: 14026 Content-Type: text/html | clean |
http://studiu.info/sample-sites?tmpl=component&print=1&page= | 200 OK Content-Length: 9413 Content-Type: text/html | clean |
http://studiu.info/parks-home | 200 OK Content-Length: 12590 Content-Type: text/html | clean |
http://studiu.info/park-blog | 200 OK Content-Length: 19137 Content-Type: text/html | clean |
http://studiu.info/park-blog/17-first-blog-post | 200 OK Content-Length: 18046 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=studiu.info
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://studiu.info/
Result: studiu.info is not infected or malware details are not published yet.
Result: studiu.info is not infected or malware details are not published yet.