Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=airomobila.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://airomobila.ru/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: airomobila.ru
Result:
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Sun, 11 Jan 2015 13:47:50 GMT
Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=%D0%B3%D0%B4%D0%B7+%D0%BF%D0%BE+%D0%B3%D0%B5%D0%BE%D0%B3%D1%80%D0%B0%D1%84%D0%B8%D0%B8+%D0%B4%D0%BE%D0%BC%D0%BE%D0%B3%D0%B0%D1%86%D0%BA%D0%B8%D1%85+6%D0%BA%D0%BB%D0%B0%D1%81%D1%81&v=3&id_mark=2246
Server: nginx/1.4.3
Content-Type: text/html
X-Powered-By: PHP/5.4.21-1~dotdeb.1
GET / HTTP/1.1
Host: airomobila.ru
Result:
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Sun, 11 Jan 2015 13:47:50 GMT
Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=%D0%B3%D0%B4%D0%B7+%D0%BF%D0%BE+%D0%B3%D0%B5%D0%BE%D0%B3%D1%80%D0%B0%D1%84%D0%B8%D0%B8+%D0%B4%D0%BE%D0%BC%D0%BE%D0%B3%D0%B0%D1%86%D0%BA%D0%B8%D1%85+6%D0%BA%D0%BB%D0%B0%D1%81%D1%81&v=3&id_mark=2246
Server: nginx/1.4.3
Content-Type: text/html
X-Powered-By: PHP/5.4.21-1~dotdeb.1
Second query (visit from search engine):
GET / HTTP/1.1
Host: airomobila.ru
Referer: http://www.google.com/search?q=airomobila.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: airomobila.ru
Referer: http://www.google.com/search?q=airomobila.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://airomobila.ru/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:47:50 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=%D0%B3%D0%B4%D0%B7+%D0%BF%D0%BE+%D0%B3%D0%B5%D0%BE%D0%B3%D1%80%D0%B0%D1%84%D0%B8%D0%B8+%D0%B4%D0%BE%D0%BC%D0%BE%D0%B3%D0%B0%D1%86%D0%BA%D0%B8%D1%85+6%D0%BA%D0%BB%D0%B0%D1%81%D1%81&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://rublevskiypirs.ru/books?charset=utf-8&keyword=%d0%b3%d0%b4%d0%b7+%d0%bf%d0%be+%d0%b3%d0%b5%d0%be%d0%b3%d1%80%d0%b0%d1%84%d0%b8%d0%b8+%d0%b4%d0%be%d0%bc%d0%be%d0%b3%d0%b0%d1%86%d0%ba%d0%b8%d1%85+6%d0%ba%d0%bb%d0%b0%d1%81%d1%81&v=3&id_mark=2246 | HTTP/1.1 302 Found Cache-Control: max-age=0 Connection: close Date: Sun, 11 Jan 2015 13:47:50 GMT Pragma: no-cache Location: http://fporno.free-best-hosting.com Server: nginx/1.0.15 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Thu, 21 Jul 1977 07:30:00 GMT Last-Modified: Sun, 11 Jan 2015 13:47:50 GMT X-Powered-By: PHP/5.4.34 | clean |
http://fporno.free-best-hosting.com/ | 200 OK Content-Length: 44677 Content-Type: text/html | clean |
http://fporno.free-best-hosting.com//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js/ | 200 OK Content-Length: 14 Content-Type: text/html | clean |
http://fporno.free-best-hosting.com/test404page.js | 200 OK Content-Length: 14 Content-Type: text/html | clean |
http://airomobila.ru/wp-includes/js/jquery/jquery-migrate.min.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:47:59 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 | HTTP/1.1 302 Found Cache-Control: max-age=0 Connection: close Date: Sun, 11 Jan 2015 13:47:59 GMT Pragma: no-cache Location: http://fporno.free-best-hosting.com Server: nginx/1.0.15 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Thu, 21 Jul 1977 07:30:00 GMT Last-Modified: Sun, 11 Jan 2015 13:47:59 GMT X-Powered-By: PHP/5.4.34 | clean |
http://airomobila.ru/wp-content/themes/KoRuDoTheme/js/modernizr.min.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:00 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://airomobila.ru/wp-content/themes/KoRuDoTheme/js/jquery.plugins.min.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:01 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://airomobila.ru/wp-includes/js/masonry.min.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:02 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://airomobila.ru/wp-includes/js/jquery/jquery.masonry.min.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:03 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://airomobila.ru/wp-content/themes/KoRuDoTheme/js/jquery.fitvids.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:03 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |
http://airomobila.ru/wp-content/themes/KoRuDoTheme/js/theme.js | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 13:48:04 GMT Location: http://rublevskiypirs.ru/books?charset=utf-8&keyword=&v=3&id_mark=2246 Server: nginx/1.4.3 Content-Type: text/html X-Powered-By: PHP/5.4.21-1~dotdeb.1 | clean |