Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=stay.eu.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://stay.eu.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: stay.eu.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Tue, 24 Feb 2015 19:14:47 GMT
Pragma: private
Server: lighttpd/1.4.26
Content-Length: 73519
Content-Type: text/html; charset=WINDOWS-1251
Set-Cookie: sy_sessionhash=fc8ffd7692be9e18bc2fabad7ccbab5f; path=/; domain=.stay.eu.com; HttpOnly
Set-Cookie: sy_lastvisit=1424805286; expires=Wed, 24-Feb-2016 19:14:46 GMT; path=/; domain=.stay.eu.com
Set-Cookie: sy_lastactivity=0; expires=Wed, 24-Feb-2016 19:14:46 GMT; path=/; domain=.stay.eu.com
X-Powered-By: PHP/5.2.6-1+lenny8
...73519 bytes of data.
GET / HTTP/1.1
Host: stay.eu.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Tue, 24 Feb 2015 19:14:47 GMT
Pragma: private
Server: lighttpd/1.4.26
Content-Length: 73519
Content-Type: text/html; charset=WINDOWS-1251
Set-Cookie: sy_sessionhash=fc8ffd7692be9e18bc2fabad7ccbab5f; path=/; domain=.stay.eu.com; HttpOnly
Set-Cookie: sy_lastvisit=1424805286; expires=Wed, 24-Feb-2016 19:14:46 GMT; path=/; domain=.stay.eu.com
Set-Cookie: sy_lastactivity=0; expires=Wed, 24-Feb-2016 19:14:46 GMT; path=/; domain=.stay.eu.com
X-Powered-By: PHP/5.2.6-1+lenny8
...73519 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: stay.eu.com
Referer: http://www.google.com/search?q=stay.eu.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: stay.eu.com
Referer: http://www.google.com/search?q=stay.eu.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://stay.eu.com/ | 200 OK Content-Length: 73519 Content-Type: text/html | clean |
http://stay.eu.com/clientscript/yui/yuiloader-dom-event/yuiloader-dom-event.js?v=410 | 200 OK Content-Length: 58548 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/yui/connection/connection-min.js?v=410 | 200 OK Content-Length: 11604 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin-core.js?v=410 | 200 OK Content-Length: 47796 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin_overlay.js?v=410 | 200 OK Content-Length: 14443 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin_cms.js?v=410 | 200 OK Content-Length: 3798 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin_ajax_htmlloader.js?v=410 | 200 OK Content-Length: 1927 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin_md5.js?v=410 | 200 OK Content-Length: 5464 Content-Type: text/javascript | clean |
http://stay.eu.com/clientscript/vbulletin_lightbox.js?v=410 | 200 OK Content-Length: 12230 Content-Type: text/javascript | clean |
http://www.google.com/jsapi | 200 OK Content-Length: 24552 Content-Type: text/javascript | clean |
http://stay.eu.com/forum.php?s=fc8ffd7692be9e18bc2fabad7ccbab5f | 200 OK Content-Length: 46662 Content-Type: text/html | clean |
http://stay.eu.com/clientscript/vbulletin_read_marker.js?v=410 | 200 OK Content-Length: 3441 Content-Type: text/javascript | clean |
http://stay.eu.com/faq.php?s=fc8ffd7692be9e18bc2fabad7ccbab5f | 200 OK Content-Length: 18107 Content-Type: text/html | clean |
http://stay.eu.com/content.php?s=fc8ffd7692be9e18bc2fabad7ccbab5f | 200 OK Content-Length: 73541 Content-Type: text/html | clean |
http://stay.eu.com/blog.php?s=fc8ffd7692be9e18bc2fabad7ccbab5f | 200 OK Content-Length: 23067 Content-Type: text/html | clean |