Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=bada-phone.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://bada-phone.ru/
Result: The website is marked by Yandex as SMS-fraud resource. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as SMS-fraud resource. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: bada-phone.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 14 Dec 2014 05:57:12 GMT
Server: nginx
Content-Type: text/html; charset=utf-8
Set-Cookie: zhamphqt_=%D0%BD%D0%B0%D1%82%D0%B0%D0%BD+%D0%B4%D1%83%D0%B1%D0%BE%D0%B2%D0%B8%D1%86%D0%BA%D0%B8%D0%B9+%D0%BC%D0%B0%D1%88%D0%B8%D0%BD%D0%BA%D0%B0+%D0%B8+%D0%B2%D0%B5%D0%BB%D0%B8%D0%BA+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+fb2; expires=Sun, 14-Dec-2014 05:58:37 GMT; path=/; domain=.bada-phone.ru
X-Powered-By: PHP/5.4.35
GET / HTTP/1.1
Host: bada-phone.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 14 Dec 2014 05:57:12 GMT
Server: nginx
Content-Type: text/html; charset=utf-8
Set-Cookie: zhamphqt_=%D0%BD%D0%B0%D1%82%D0%B0%D0%BD+%D0%B4%D1%83%D0%B1%D0%BE%D0%B2%D0%B8%D1%86%D0%BA%D0%B8%D0%B9+%D0%BC%D0%B0%D1%88%D0%B8%D0%BD%D0%BA%D0%B0+%D0%B8+%D0%B2%D0%B5%D0%BB%D0%B8%D0%BA+%D1%81%D0%BA%D0%B0%D1%87%D0%B0%D1%82%D1%8C+fb2; expires=Sun, 14-Dec-2014 05:58:37 GMT; path=/; domain=.bada-phone.ru
X-Powered-By: PHP/5.4.35
Second query (visit from search engine):
GET / HTTP/1.1
Host: bada-phone.ru
Referer: http://www.google.com/search?q=bada-phone.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: bada-phone.ru
Referer: http://www.google.com/search?q=bada-phone.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://bada-phone.ru/ | 200 OK Content-Length: 53980 Content-Type: text/html | clean |
http://bada-phone.ru/js/default.js | 200 OK Content-Length: 10981 Content-Type: application/x-javascript | clean |
http://bada-phone.ru/js/qsearch.js | 200 OK Content-Length: 801 Content-Type: application/x-javascript | clean |
http://news.yandex.ru/common.js | 200 OK Content-Length: 377 Content-Type: application/x-javascript | clean |
http://news.yandex.ru/ru/movies3.utf8.js | 200 OK Content-Length: 2561 Content-Type: application/javascript | clean |
http://bada-phone.ru/2 | 404 Not Found Content-Length: 26241 Content-Type: text/html | clean |
http://bada-phone.ru/rss | 200 OK Content-Length: 5429 Content-Type: text/xml | clean |
http://bada-phone.ru/test404page.js | 404 Not Found Content-Length: 26402 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/ | 404 Not Found Content-Length: 26282 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/ | 404 Not Found Content-Length: 26369 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/2/ | 404 Not Found Content-Length: 26262 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/2/2/ | 404 Not Found Content-Length: 26446 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/2/2/2/ | 404 Not Found Content-Length: 26332 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/2/2/2/2/ | 404 Not Found Content-Length: 26369 Content-Type: text/html | clean |
http://bada-phone.ru//novie_post/2/2/2/2/2/2/ | 404 Not Found Content-Length: 26237 Content-Type: text/html | clean |