Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: zhenskoe-mnenie.ru
Result:
HTTP/1.1 200 OK
Cache-Control: public, max-age=300
Connection: close
Date: Tue, 30 Sep 2014 07:47:29 GMT
Server: nginx
Vary: Accept-Encoding
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Tue, 30 Sep 2014 07:52:29 GMT
Last-Modified: Tue, 30 Sep 2014 07:47:29 GMT
X-Powered-By: HostCMS 1264091991 240725707 1215830803
GET / HTTP/1.1
Host: zhenskoe-mnenie.ru
Result:
HTTP/1.1 200 OK
Cache-Control: public, max-age=300
Connection: close
Date: Tue, 30 Sep 2014 07:47:29 GMT
Server: nginx
Vary: Accept-Encoding
Vary: Accept-Encoding
Content-Type: text/html; charset=UTF-8
Expires: Tue, 30 Sep 2014 07:52:29 GMT
Last-Modified: Tue, 30 Sep 2014 07:47:29 GMT
X-Powered-By: HostCMS 1264091991 240725707 1215830803
Second query (visit from search engine):
GET / HTTP/1.1
Host: zhenskoe-mnenie.ru
Referer: http://www.google.com/search?q=zhenskoe-mnenie.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: zhenskoe-mnenie.ru
Referer: http://www.google.com/search?q=zhenskoe-mnenie.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://www.zhenskoe-mnenie.ru/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 30 Sep 2014 07:47:29 GMT Location: http://zhenskoe-mnenie.ru/ Server: nginx Vary: Accept-Encoding Content-Length: 322 Content-Type: text/html; charset=iso-8859-1 | clean |
http://zhenskoe-mnenie.ru/ | 200 OK Content-Length: 300771 Content-Type: text/html | clean |
http://zhenskoe-mnenie.ru/zmfiles/jquery-1.7.2.min.js | 200 OK Content-Length: 94840 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/hostcmsfiles/ajax/ajax.js | 200 OK Content-Length: 3770 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/themes/mnenie/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 30 Sep 2014 07:47:31 GMT Location: http://zhenskoe-mnenie.ru/themes/mnenie/ Server: nginx Vary: Accept-Encoding Content-Length: 336 Content-Type: text/html; charset=iso-8859-1 | clean |
http://zhenskoe-mnenie.ru/themes/mnenie/ | 200 OK Content-Length: 39470 Content-Type: text/html | clean |
https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js | 200 OK Content-Length: 94840 Content-Type: text/javascript | clean |
http://www.zhenskoe-mnenie.ru/hostcmsfiles/ajax/JsHttpRequest.js | 200 OK Content-Length: 13634 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/zmfiles/swfobject.js | 200 OK Content-Length: 10220 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 30 Sep 2014 07:47:32 GMT Location: http://zhenskoe-mnenie.ru/pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ Server: nginx Vary: Accept-Encoding Content-Length: 377 Content-Type: text/html; charset=iso-8859-1 | clean |
http://zhenskoe-mnenie.ru/pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | 404 Not Found Content-Length: 10501 Content-Type: text/html | clean |
http://zhenskoe-mnenie.ru/hostcmsfiles/ajax/JsHttpRequest.js | 200 OK Content-Length: 13634 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/hostcmsfiles/main.js | 200 OK Content-Length: 11387 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/zmfiles/jquery-ui.min.js | 200 OK Content-Length: 201875 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/zmfiles/jspopup.js | 200 OK Content-Length: 10426 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/zmfiles/tabs-functions.js | 200 OK Content-Length: 1848 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/zmfiles/myjquery.js | 200 OK Content-Length: 0 Content-Type: application/x-javascript | clean |
http://www.zhenskoe-mnenie.ru/themes/health/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 30 Sep 2014 07:47:34 GMT Location: http://zhenskoe-mnenie.ru/themes/health/ Server: nginx Vary: Accept-Encoding Content-Length: 336 Content-Type: text/html; charset=iso-8859-1 | clean |
http://zhenskoe-mnenie.ru/themes/health/ | 200 OK Content-Length: 109233 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=zhenskoe-mnenie.ru
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://zhenskoe-mnenie.ru/
Result: zhenskoe-mnenie.ru is not infected or malware details are not published yet.
Result: zhenskoe-mnenie.ru is not infected or malware details are not published yet.
