Scanned pages/files
Request | Server response | Status |
http://top.doski.ru/ | 200 OK Content-Length: 324 Content-Type: text/html | clean |
http://top.doski.ru/menu.php | 200 OK Content-Length: 5901 Content-Type: text/html | clean |
http://top.doski.ru/title.php | 200 OK Content-Length: 5227 Content-Type: text/html | clean |
http://top.doski.ru/s.js | 200 OK Content-Length: 599 Content-Type: application/javascript | clean |
http://top.doski.ru/rules.php | 200 OK Content-Length: 2608 Content-Type: text/html | clean |
http://top.doski.ru/addurl.php | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Fri, 04 Apr 2014 12:45:08 GMT Pragma: no-cache Location: addusr.php Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=windows-1251 Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=a69quraulum222s6h3gqr371o2; path=/ X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://top.doski.ru/addusr.php | 200 OK Content-Length: 3206 Content-Type: text/html | clean |
http://top.doski.ru/lostpass.php | 200 OK Content-Length: 1486 Content-Type: text/html | clean |
http://top.doski.ru/test404page.js | 404 Not Found Content-Length: 1883 Content-Type: text/html | clean |
http://top.doski.ru/rdr.php?s=51301&u=http%3A%2F%2Fkresty2.narod.ru | HTTP/1.1 302 Found Connection: close Date: Fri, 04 Apr 2014 12:45:09 GMT Location: http://kresty2.narod.ru Server: Apache/2.2.22 (Ubuntu) Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html; charset=windows-1251 X-Powered-By: PHP/5.3.10-1ubuntu3.4 | clean |
http://kresty2.narod.ru/ | 200 OK Content-Length: 23486 Content-Type: text/html | suspicious |
Suspicious code found <a href="http://pohoroni.info/juk/3184/?button" target="_blank" title="ÐоÑ
оÑонÑ.info ÐÑковÑкий"><img src="http://pohoroni.info/images/cstatimg.php?fid=3184" alt="ÐоÑ
оÑонÑ.info ÐÑковÑкий" title="ÐоÑ
оÑонÑ.info ÐÑковÑкий" border="0"></a> | ||
http://kresty2.narod.ru/abnl/?adsdata=zZ6V8PSTuXzr5smQU0Z5rO0LGQ1IKO7I!^JFf6Ec6Zh7lAqKAPsIzTTQtt^VNFavQ^EkpMRErQYYwWBTOk;;TtlDXtG52UIUkIp9Xc3!5jEo | 200 OK Content-Length: 2409 Content-Type: application/javascript | clean |
http://rtrgt2.com/apu.php?zoneid=12040 | 200 OK Content-Length: 749 Content-Type: application/x-javascript | clean |
http://s214.ucoz.net/src/jquery-1.7.2.js | 200 OK Content-Length: 94840 Content-Type: text/javascript | clean |
http://s214.ucoz.net/src/ulightbox/ulightbox.js | 200 OK Content-Length: 39848 Content-Type: text/javascript | clean |
http://s214.ucoz.net/src/uwnd.js?2 | 200 OK Content-Length: 228798 Content-Type: text/javascript | clean |
http://counter.rambler.ru/top100.jcn?2988359 | 200 OK Content-Length: 6853 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: top.doski.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 04 Apr 2014 12:45:08 GMT
Server: Apache/2.2.22 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 324
Content-Type: text/html; charset=windows-1251
X-Powered-By: PHP/5.3.10-1ubuntu3.4
...324 bytes of data.
GET / HTTP/1.1
Host: top.doski.ru
Result:
HTTP/1.1 200 OK
Connection: close
Date: Fri, 04 Apr 2014 12:45:08 GMT
Server: Apache/2.2.22 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 324
Content-Type: text/html; charset=windows-1251
X-Powered-By: PHP/5.3.10-1ubuntu3.4
...324 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: top.doski.ru
Referer: http://www.google.com/search?q=top.doski.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: top.doski.ru
Referer: http://www.google.com/search?q=top.doski.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=top.doski.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://top.doski.ru/
Result: top.doski.ru is not infected or malware details are not published yet.
Result: top.doski.ru is not infected or malware details are not published yet.