Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=odnoksoft.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 2cconnect.com
Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:43 GMT
Accept-Ranges: bytes
ETag: "84d1de43c914d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10716
Content-Location: http://2cconnect.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 22:33:05 GMT
X-Powered-By: ASP.NET
...10716 bytes of data.
GET / HTTP/1.1
Host: 2cconnect.com
Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 05:17:43 GMT
Accept-Ranges: bytes
ETag: "84d1de43c914d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 10716
Content-Location: http://2cconnect.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 22:33:05 GMT
X-Powered-By: ASP.NET
...10716 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 2cconnect.com
Referer: http://www.google.com/search?q=2cconnect.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 2cconnect.com
Referer: http://www.google.com/search?q=2cconnect.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://odnoksoft.ru/ | 200 OK Content-Length: 6759 Content-Type: text/html | clean |
http://odnoksoft.ru/download.php | HTTP/1.1 302 Found Connection: close Date: Tue, 24 Jun 2014 19:05:07 GMT Location: http://ploms.net/e/9066 Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.3.10-1ubuntu3.6 | malicious |
http://ploms.net/e/9066 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 24 Jun 2014 19:05:07 GMT Pragma: no-cache Location: http://ilopr.com/m/KBqA2wmTGir4yLLVXq0UvTirbRO Server: nginx Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: phpsid=2ibuputf2i6baag70g1fcvq2r5; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://ilopr.com/m/kbqa2wmtgir4yllvxq0uvtirbro | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 24 Jun 2014 19:05:07 GMT Pragma: no-cache Location: /e/2 Server: nginx Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: phpsid=rshrih0tvb64d61m5f7mcf54a2; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://ilopr.com/e/2 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 24 Jun 2014 19:05:07 GMT Pragma: no-cache Location: http://zopla.net/l/2TqxwHyvJZPoE6jg4Y6eA8MExfE Server: nginx Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: phpsid=tvabrmpa46iidpfiv53kc3t6q1; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | malicious |
http://zopla.net/l/2tqxwhyvjzpoe6jg4y6ea8mexfe | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 24 Jun 2014 19:05:08 GMT Pragma: no-cache Location: /e/2 Server: nginx Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: phpsid=5ti4blfk7pdcarqk2256c4i9c3; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://zopla.net/e/2 | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 24 Jun 2014 19:05:08 GMT Pragma: no-cache Location: http://zopla.net/l/6o8gab4O0Xu0AtcvA2zSsyMnT9e Server: nginx Content-Type: text/html; charset=utf-8 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: phpsid=gla8ln7bk603ogqdf2sb97ear6; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://zopla.net/test404page.js | 404 Not Found Content-Length: 13 Content-Type: text/html | clean |
http://odnoksoft.ru/ofert.htm | 200 OK Content-Length: 10858 Content-Type: text/html | clean |