Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: the804.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 22 Aug 2014 04:56:20 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.7a mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_fcgid/2.3.6 Sun-ONE-ASP/4.0.3
Content-Type: text/html; charset=UTF-8
X-Pingback: http://the804.com/xmlrpc.php
X-Powered-By: PHP/5.3.24
GET / HTTP/1.1
Host: the804.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 22 Aug 2014 04:56:20 GMT
Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.7a mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_fcgid/2.3.6 Sun-ONE-ASP/4.0.3
Content-Type: text/html; charset=UTF-8
X-Pingback: http://the804.com/xmlrpc.php
X-Powered-By: PHP/5.3.24
Second query (visit from search engine):
GET / HTTP/1.1
Host: the804.com
Referer: http://www.google.com/search?q=the804.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: the804.com
Referer: http://www.google.com/search?q=the804.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.the804.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 22 Aug 2014 04:56:20 GMT Location: http://the804.com/ Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.7a mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_fcgid/2.3.6 Sun-ONE-ASP/4.0.3 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://the804.com/xmlrpc.php X-Powered-By: PHP/5.3.24 | clean |
http://the804.com/ | 200 OK Content-Length: 26246 Content-Type: text/html | clean |
http://the804.com/wp-includes/js/l10n.js?ver=20101110 | 200 OK Content-Length: 308 Content-Type: application/x-javascript | clean |
http://the804.com/wp-includes/js/jquery/jquery.js?ver=1.6.1 | 200 OK Content-Length: 91363 Content-Type: application/x-javascript | clean |
http://the804.com/wp-content/themes/genesis/lib/js/menu/superfish.js?ver=1.4.8 | 200 OK Content-Length: 3083 Content-Type: application/x-javascript | clean |
http://the804.com/wp-content/themes/genesis/lib/js/menu/superfish.args.js?ver=1.7.1 | 200 OK Content-Length: 339 Content-Type: application/x-javascript | clean |
http://www.the804.com/ttp://realestate.yahoo.com/search/Virginia/Richmond/homes-for-sale | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Fri, 22 Aug 2014 04:56:28 GMT Pragma: no-cache Location: http://the804.com/ttp:/realestate.yahoo.com/search/Virginia/Richmond/homes-for-sale Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.7a mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_fcgid/2.3.6 Sun-ONE-ASP/4.0.3 Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Fri, 22 Aug 2014 04:56:28 GMT X-Pingback: http://the804.com/xmlrpc.php X-Powered-By: PHP/5.3.24 | clean |
http://the804.com/ttp:/realestate.yahoo.com/search/virginia/richmond/homes-for-sale | 404 Not Found Content-Length: 16184 Content-Type: text/html | clean |
http://the804.com/classifieds/ | 200 OK Content-Length: 14928 Content-Type: text/html | clean |
http://the804.com/wp-includes/js/comment-reply.js?ver=20090102 | 200 OK Content-Length: 786 Content-Type: application/x-javascript | clean |
http://the804.com/category/blog/ | 200 OK Content-Length: 39823 Content-Type: text/html | clean |
http://the804.com/dossier-shockoe-valley-heights/ | 200 OK Content-Length: 18443 Content-Type: text/html | clean |
http://the804.com/author/ | 404 Not Found Content-Length: 16184 Content-Type: text/html | clean |
http://the804.com/richmond_auctions/ | 200 OK Content-Length: 17036 Content-Type: text/html | clean |
http://the804.com/richmond_auctions/sorttable.js | 404 Not Found Content-Length: 16184 Content-Type: text/html | clean |
http://the804.com/richmond_realtors/ | 200 OK Content-Length: 58878 Content-Type: text/html | clean |
http://the804.com/richmond_realtors/sorttable.js | 404 Not Found Content-Length: 16184 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=the804.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://the804.com/
Result: the804.com is not infected or malware details are not published yet.
Result: the804.com is not infected or malware details are not published yet.