Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: travelingtalisman.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 19:54:02 GMT
Location: http://www.travelingtalisman.com/
Server: nginx/1.6.2
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.travelingtalisman.com/xmlrpc.php
...0 bytes of data.
GET / HTTP/1.1
Host: travelingtalisman.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 04 Oct 2014 19:54:02 GMT
Location: http://www.travelingtalisman.com/
Server: nginx/1.6.2
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.travelingtalisman.com/xmlrpc.php
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: travelingtalisman.com
Referer: http://www.google.com/search?q=travelingtalisman.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: travelingtalisman.com
Referer: http://www.google.com/search?q=travelingtalisman.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://travelingtalisman.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 04 Oct 2014 19:54:02 GMT Location: http://www.travelingtalisman.com/ Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.travelingtalisman.com/xmlrpc.php | clean |
http://www.travelingtalisman.com/ | 200 OK Content-Length: 22840 Content-Type: text/html | clean |
http://ajax.googleapis.com/ajax/libs/swfobject/2.2/swfobject.js?ver=2.2 | 200 OK Content-Length: 10220 Content-Type: text/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/flexo-archives-widget/flexo.js?ver=3.0 | 200 OK Content-Length: 7248 Content-Type: application/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/ajax-calendar2/js/microajax.js | 200 OK Content-Length: 893 Content-Type: application/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/ajax-comments-wpmuified/ajax-comments/scriptaculous/prototype.js | 200 OK Content-Length: 71261 Content-Type: application/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/ajax-comments-wpmuified/ajax-comments/scriptaculous/scriptaculous.js | 200 OK Content-Length: 2404 Content-Type: application/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/ajax-comments-wpmuified/ajax-comments/ajax-comments.js | 200 OK Content-Length: 3589 Content-Type: application/javascript | clean |
http://www.travelingtalisman.com/wp-content/plugins/shutter-reloaded/shutter-reloaded.js?ver=2.4 | 200 OK Content-Length: 8036 Content-Type: application/javascript | clean |
http://travelingtalisman.com/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Sat, 04 Oct 2014 19:54:09 GMT Pragma: no-cache Location: http://www.travelingtalisman.com/test404page.js Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Sat, 04 Oct 2014 19:54:08 GMT X-Pingback: http://www.travelingtalisman.com/xmlrpc.php | clean |
http://www.travelingtalisman.com/test404page.js | 404 Not Found Content-Length: 21078 Content-Type: text/html | clean |
http://www.travelingtalisman.com/?page_id=12 | HTTP/1.1 301 Moved Permanently Connection: close Date: Sat, 04 Oct 2014 19:54:11 GMT Location: http://www.travelingtalisman.com/ Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.travelingtalisman.com/xmlrpc.php | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=travelingtalisman.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://travelingtalisman.com/
Result: travelingtalisman.com is not infected or malware details are not published yet.
Result: travelingtalisman.com is not infected or malware details are not published yet.