Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=bus-lara.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://bus-lara.ru/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: bus-lara.ru
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=1
Connection: close
Date: Wed, 17 Sep 2014 03:01:28 GMT
Server: nginx
Vary: Accept-Encoding
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=UTF-8
Expires: Wed, 17 Sep 2014 03:01:03 GMT
Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Ce82eccf4081a6497f848472476c7dcc8; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/wp-content/plugins; httponly
Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Ce82eccf4081a6497f848472476c7dcc8; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/wp-admin; httponly
Set-Cookie: wordpress_logged_in_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Cab1ebfbcfbc07b6cd889d57a5b63f678; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/; httponly
X-Pingback: http://bus-lara.ru/xmlrpc.php
GET / HTTP/1.1
Host: bus-lara.ru
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=1
Connection: close
Date: Wed, 17 Sep 2014 03:01:28 GMT
Server: nginx
Vary: Accept-Encoding
Vary: Accept-Encoding,User-Agent
Content-Type: text/html; charset=UTF-8
Expires: Wed, 17 Sep 2014 03:01:03 GMT
Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Ce82eccf4081a6497f848472476c7dcc8; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/wp-content/plugins; httponly
Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Ce82eccf4081a6497f848472476c7dcc8; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/wp-admin; httponly
Set-Cookie: wordpress_logged_in_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132488%7Cab1ebfbcfbc07b6cd889d57a5b63f678; expires=Wed, 01-Oct-2014 03:01:28 GMT; path=/; httponly
X-Pingback: http://bus-lara.ru/xmlrpc.php
Second query (visit from search engine):
GET / HTTP/1.1
Host: bus-lara.ru
Referer: http://www.google.com/search?q=bus-lara.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: bus-lara.ru
Referer: http://www.google.com/search?q=bus-lara.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://bus-lara.ru/ | 200 OK Content-Length: 146804 Content-Type: text/html | clean |
http://lite.piclens.com/current/piclens_optimized.js?ver=3.4.1 | 200 OK Content-Length: 21750 Content-Type: application/x-javascript | clean |
http://bus-lara.ru/wp-admin | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=1 Connection: close Date: Wed, 17 Sep 2014 03:01:31 GMT Location: http://bus-lara.ru/wp-admin/ Server: nginx Content-Length: 236 Content-Type: text/html; charset=iso-8859-1 Expires: Wed, 17 Sep 2014 03:01:07 GMT | clean |
http://bus-lara.ru/wp-admin/ | HTTP/1.1 302 Found Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Wed, 17 Sep 2014 03:01:32 GMT Pragma: no-cache Location: http://bus-lara.ru/wp-login.php?redirect_to=http%3A%2F%2Fbus-lara.ru%2Fwp-admin%2F&reauth=1 Server: nginx Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html Expires: Wed, 11 Jan 1984 05:00:00 GMT Last-Modified: Wed, 17 Sep 2014 03:01:32 GMT Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132492%7C8a06ef5ed07f0a5b658cef29fe0308c9; expires=Wed, 01-Oct-2014 03:01:32 GMT; path=/wp-content/plugins; httponly Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132492%7C8a06ef5ed07f0a5b658cef29fe0308c9; expires=Wed, 01-Oct-2014 03:01:32 GMT; path=/wp-admin; httponly Set-Cookie: wordpress_logged_in_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132492%7C2c95b3b60b08435fb11c4e6e5413b343; expires=Wed, 01-Oct-2014 03:01:32 GMT; path=/; httponly | clean |
http://bus-lara.ru/wp-login.php?redirect_to=http%3a%2f%2fbus-lara.ru%2fwp-admin%2f&reauth=1 | 200 OK Content-Length: 2093 Content-Type: text/html | clean |
http://bus-lara.ru/wp-login.php?action=lostpassword | 200 OK Content-Length: 1713 Content-Type: text/html | clean |
http://bus-lara.ru/wp-login.php | 200 OK Content-Length: 2093 Content-Type: text/html | clean |
http://bus-lara.ru/test404page.js | 404 Not Found Content-Length: 331 Content-Type: text/html | clean |
http://bus-lara.ru/news | 404 Not Found Content-Length: 321 Content-Type: text/html | clean |
http://bus-lara.ru/sitemap.xml | 200 OK Content-Length: 47185 Content-Type: application/xml | clean |
http://bus-lara.ru/?p=105 | 200 OK Content-Length: 301409 Content-Type: text/html | clean |
http://bus-lara.ru/?cat=11 | 200 OK Content-Length: 142914 Content-Type: text/html | clean |
http://bus-lara.ru/?feed=rss2&p=105 | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=1 Connection: close Date: Wed, 17 Sep 2014 03:01:37 GMT ETag: "99b889a9cd748e8b4eca0eb3758d138d" Location: http://bus-lara.ru/?feed=rss2&p=105 Server: nginx Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html Expires: Wed, 17 Sep 2014 03:01:13 GMT Last-Modified: GMT Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132497%7Cae16cbc87cbe080903532153adb73609; expires=Wed, 01-Oct-2014 03:01:37 GMT; path=/wp-content/plugins; httponly Set-Cookie: wordpress_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132497%7Cae16cbc87cbe080903532153adb73609; expires=Wed, 01-Oct-2014 03:01:37 GMT; path=/wp-admin; httponly Set-Cookie: wordpress_logged_in_0cb3b13e11a1b5e42c6142a689446f8d=%7C1412132497%7C3d322bc2ba702e9a9679f317999993af; expires=Wed, 01-Oct-2014 03:01:37 GMT; path=/; httponly X-Pingback: http://bus-lara.ru/xmlrpc.php | clean |
http://bus-lara.ru/?feed=rss2&p=105 | 200 OK Content-Length: 1878 Content-Type: text/xml | clean |
http://bus-lara.ru/?p=104 | 200 OK Content-Length: 301409 Content-Type: text/html | clean |
http://bus-lara.ru/?p=252 | 200 OK Content-Length: 300269 Content-Type: text/html | clean |
http://bus-lara.ru/?p=242 | 200 OK Content-Length: 300269 Content-Type: text/html | clean |
http://bus-lara.ru/?p=93 | 200 OK Content-Length: 301409 Content-Type: text/html | clean |