Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=9443083.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: bedandbreakfast-emporium.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 12 Jan 2015 20:44:29 GMT
Location: http://www.bedandbreakfast-emporium.com/
Server: Apache
Content-Length: 248
Content-Type: text/html; charset=iso-8859-1
...248 bytes of data.
GET / HTTP/1.1
Host: bedandbreakfast-emporium.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Mon, 12 Jan 2015 20:44:29 GMT
Location: http://www.bedandbreakfast-emporium.com/
Server: Apache
Content-Length: 248
Content-Type: text/html; charset=iso-8859-1
...248 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: bedandbreakfast-emporium.com
Referer: http://www.google.com/search?q=bedandbreakfast-emporium.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: bedandbreakfast-emporium.com
Referer: http://www.google.com/search?q=bedandbreakfast-emporium.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://9443083.ru/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 23 May 2014 01:13:43 GMT Location: http://chemservice.ru/ Server: nginx/0.6.35 Content-Type: text/html; charset=iso-8859-1 | malicious |
http://chemservice.ru/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 23 May 2014 01:13:43 GMT Location: http://www.chemservice.ru/ Server: nginx/0.6.35 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.chemservice.ru/ | 200 OK Content-Length: 18078 Content-Type: text/html | clean |
http://www.chemservice.ru/js/system.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 23 May 2014 01:13:46 GMT Pragma: no-cache Location: /404/ Server: nginx/0.6.35 Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=217a5ca26c61b56e6295a4c7af824f07; path=/ Set-Cookie: last_visit=0; expires=Sat, 23-May-2015 01:13:46 GMT; path=/ Set-Cookie: last_visit_filter=0; expires=Sat, 24-May-2014 01:13:46 GMT; path=/ Set-Cookie: last_visit=1400807626; expires=Sat, 23-May-2015 01:13:46 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://www.chemservice.ru/404/ | 200 OK Content-Length: 16150 Content-Type: text/html | clean |
http://www.chemservice.ru/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 23 May 2014 01:13:46 GMT Pragma: no-cache Location: /404/ Server: nginx/0.6.35 Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=d6b3fa9e761f3ef9ea8a4e7937d05ac6; path=/ Set-Cookie: last_visit=0; expires=Sat, 23-May-2015 01:13:46 GMT; path=/ Set-Cookie: last_visit_filter=0; expires=Sat, 24-May-2014 01:13:46 GMT; path=/ Set-Cookie: last_visit=1400807626; expires=Sat, 23-May-2015 01:13:46 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |