Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: volgnarodsobor.ru
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Sun, 05 Oct 2014 07:06:38 GMT
Server: nginx/1.4.4
Content-Type: text/html; charset=utf-8
Expires:
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: b327386b8612d0f3714487aac737f950=993deb2c7790b996040b1a7c1cebf2b4; path=/
Set-Cookie: ja_teline_iv_tpl=ja_teline_iv; expires=Fri, 25-Sep-2015 07:06:36 GMT; path=/
X-Powered-By: PHP/5.3.28
GET / HTTP/1.1
Host: volgnarodsobor.ru
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Sun, 05 Oct 2014 07:06:38 GMT
Server: nginx/1.4.4
Content-Type: text/html; charset=utf-8
Expires:
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: b327386b8612d0f3714487aac737f950=993deb2c7790b996040b1a7c1cebf2b4; path=/
Set-Cookie: ja_teline_iv_tpl=ja_teline_iv; expires=Fri, 25-Sep-2015 07:06:36 GMT; path=/
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: volgnarodsobor.ru
Referer: http://www.google.com/search?q=volgnarodsobor.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: volgnarodsobor.ru
Referer: http://www.google.com/search?q=volgnarodsobor.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://volgnarodsobor.ru/ | 200 OK Content-Length: 202425 Content-Type: text/html | clean |
http://volgnarodsobor.ru/media/system/js/core.js | 200 OK Content-Length: 4323 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/media/system/js/mootools-core.js | 200 OK Content-Length: 88612 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/media/system/js/mootools-more.js | 200 OK Content-Length: 238226 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/plugins/system/jat3/jat3/base-themes/default/js/core.js | 200 OK Content-Length: 5492 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/templates/ja_teline_iv/js/menu/mega.js | 200 OK Content-Length: 18652 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/plugins/system/zt_autolink_system/zt_autolink_system/js/highslide-full.js | 200 OK Content-Length: 99342 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/plugins/system/zt_autolink_system/zt_autolink_system/js/highslide.config.js | 200 OK Content-Length: 512 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/media/system/js/caption.js | 200 OK Content-Length: 898 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/plugins/system/jcemediabox/js/jcemediabox.js?version=112 | 200 OK Content-Length: 51748 Content-Type: application/javascript | clean |
http://ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: text/javascript | clean |
http://volgnarodsobor.ru/modules/mod_ariimageslider/mod_ariimageslider/js/jquery.noconflict.js | 200 OK Content-Length: 179 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/modules/mod_ariimageslider/mod_ariimageslider/js/jquery.nivo.slider.js | 200 OK Content-Length: 6601 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/modules/mod_zt_tabs/assets/js/zt_tab_news.js | 200 OK Content-Length: 5033 Content-Type: application/javascript | clean |
http://volgnarodsobor.ru/modules/mod_janewspro/assets/js/script.js | 200 OK Content-Length: 4829 Content-Type: application/javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=volgnarodsobor.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://volgnarodsobor.ru/
Result: volgnarodsobor.ru is not infected or malware details are not published yet.
Result: volgnarodsobor.ru is not infected or malware details are not published yet.