Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tonybenson.info
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 15:34:52 GMT
Location: http://www.tbmarketing.co.uk/
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
...237 bytes of data.
GET / HTTP/1.1
Host: tonybenson.info
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 15:34:52 GMT
Location: http://www.tbmarketing.co.uk/
Server: Apache
Content-Length: 237
Content-Type: text/html; charset=iso-8859-1
...237 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tonybenson.info
Referer: http://www.google.com/search?q=tonybenson.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tonybenson.info
Referer: http://www.google.com/search?q=tonybenson.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://tonybenson.info/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 04 Oct 2014 15:34:52 GMT Location: http://www.tbmarketing.co.uk/ Server: Apache Content-Length: 237 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.tbmarketing.co.uk/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Sat, 04 Oct 2014 15:34:56 GMT Pragma: no-cache Location: http://tbmarketing.co.uk/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=5beda23a7aa4f495d19b9eb0c651ddfd; path=/ X-Pingback: http://tbmarketing.co.uk/xmlrpc.php X-Powered-By: PHP/5.3.29 | clean |
http://tbmarketing.co.uk/ | 200 OK Content-Length: 134429 Content-Type: text/html | clean |
http://tbmarketing.co.uk/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 95807 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/plugins/LayerSlider/static/js/layerslider.kreaturamedia.jquery.js?ver=5.1.1 | 200 OK Content-Length: 57000 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/plugins/LayerSlider/static/js/greensock.js?ver=1.11.2 | 200 OK Content-Length: 52295 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js?ver=5.1.1 | 200 OK Content-Length: 21095 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.tools.min.js?rev=4.5.95&ver=4.0 | 200 OK Content-Length: 93487 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?rev=4.5.95&ver=4.0 | 200 OK Content-Length: 105401 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-includes/js/comment-reply.min.js?ver=4.0 | 200 OK Content-Length: 757 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/modernizr-min.js | 200 OK Content-Length: 13133 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/jquery.carouFredSel-6.2.1-min.js | 200 OK Content-Length: 55187 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/jquery.prettyPhoto-min.js | 200 OK Content-Length: 21257 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/jquery.flexslider-min.js | 200 OK Content-Length: 23078 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/jquery.fitvids-min.js | 200 OK Content-Length: 1492 Content-Type: application/javascript | clean |
http://tbmarketing.co.uk/wp-content/themes/Avada/Avada/js/main.js | 200 OK Content-Length: 300963 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=tonybenson.info
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://tonybenson.info/
Result: tonybenson.info is not infected or malware details are not published yet.
Result: tonybenson.info is not infected or malware details are not published yet.