Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: letmevote.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Sun, 29 Nov 2015 20:17:22 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 240planBAK=R2339305415; path=/; expires=Sun, 29-Nov-2015 21:20:24 GMT
Set-Cookie: 240plan=R915000342; path=/; expires=Sun, 29-Nov-2015 21:18:26 GMT
Set-Cookie: d010fc7eb8f1271eb87b412dbdfbdcfc=0f9781fcfb71edbba6fc3598410b4df0; path=/
X-Cacheable: Not cacheable: no-cache
X-Geo: varn05.rbx5
X-Geo-Port: 1003
GET / HTTP/1.1
Host: letmevote.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Sun, 29 Nov 2015 20:17:22 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Set-Cookie: 240planBAK=R2339305415; path=/; expires=Sun, 29-Nov-2015 21:20:24 GMT
Set-Cookie: 240plan=R915000342; path=/; expires=Sun, 29-Nov-2015 21:18:26 GMT
Set-Cookie: d010fc7eb8f1271eb87b412dbdfbdcfc=0f9781fcfb71edbba6fc3598410b4df0; path=/
X-Cacheable: Not cacheable: no-cache
X-Geo: varn05.rbx5
X-Geo-Port: 1003
Second query (visit from search engine):
GET / HTTP/1.1
Host: letmevote.eu
Referer: http://www.google.com/search?q=letmevote.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: letmevote.eu
Referer: http://www.google.com/search?q=letmevote.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://letmevote.eu/ | 200 OK Content-Length: 40656 Content-Type: text/html | clean |
http://letmevote.eu/media/system/js/mootools-core.js | 200 OK Content-Length: 96362 Content-Type: application/javascript | clean |
http://letmevote.eu/media/system/js/core.js | 200 OK Content-Length: 4784 Content-Type: application/javascript | clean |
http://letmevote.eu/media/system/js/caption.js | 200 OK Content-Length: 729 Content-Type: application/javascript | clean |
http://letmevote.eu/media/system/js/mootools-more.js | 200 OK Content-Length: 238331 Content-Type: application/javascript | clean |
https://ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js | 200 OK Content-Length: 94840 Content-Type: text/javascript | clean |
http://letmevote.eu/plugins/system/jqueryeasy/jquerynoconflict.js | 200 OK Content-Length: 20 Content-Type: application/javascript | clean |
https://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js | 200 OK Content-Length: 200719 Content-Type: text/javascript | clean |
http://letmevote.eu/plugins/system/egolttooltip/egolttooltip/jquery.lib.min.js | 200 OK Content-Length: 38404 Content-Type: application/javascript | clean |
http://letmevote.eu/plugins/system/egolttooltip/egolttooltip/initialize.js | 200 OK Content-Length: 6391 Content-Type: application/javascript | clean |
http://www.google.com/jsapi | 200 OK Content-Length: 25240 Content-Type: text/javascript | clean |
http://ajax.googleapis.com/ajax/libs/swfobject/2/swfobject.js | 200 OK Content-Length: 10220 Content-Type: text/javascript | clean |
http://letmevote.eu/index.php | 200 OK Content-Length: 40728 Content-Type: text/html | clean |
http://letmevote.eu/fr/ | 200 OK Content-Length: 40456 Content-Type: text/html | clean |
http://letmevote.eu/de/ | 200 OK Content-Length: 42434 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=letmevote.eu
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://letmevote.eu/
Result: letmevote.eu is not infected or malware details are not published yet.
Result: letmevote.eu is not infected or malware details are not published yet.