Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=votedayhoff.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://votedayhoff.org/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://votedayhoff.org/ | 200 OK Content-Length: 45189 Content-Type: text/html | clean |
http://votedayhoff.org/Hoverad.js | 200 OK Content-Length: 5881 Content-Type: application/x-javascript | clean |
http://votedayhoff.org/Company.asp | 200 OK Content-Length: 22640 Content-Type: text/html | clean |
http://votedayhoff.org/PressRoom.asp | 200 OK Content-Length: 19028 Content-Type: text/html | clean |
http://votedayhoff.org/Investors.asp | 200 OK Content-Length: 26457 Content-Type: text/html | clean |
http://votedayhoff.org/Subscriptions.asp | 200 OK Content-Length: 25342 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: ww.robint.us <html> <head> <meta http-equiv="Content-Language" content="en-us"> <title>CampaignSecrets.com - Subscriptions</title> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <link rel="stylesheet" type="text/css" href="master.css"> <style> <!-- li.normaltext2 {mso-style-parent:""; margin-bottom:.0001pt; font-size ...[4722 bytes skipped]... | ||
http://ww.robint.us/u.js | 200 OK Content-Length: 0 | clean |
http://ww.robint.us/test404page.js | 200 OK Content-Length: 0 | clean |
http://2677.in/yahoo.js | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://votedayhoff.org/ContactUs.asp | 200 OK Content-Length: 22169 Content-Type: text/html | clean |
http://votedayhoff.org/PrivacyPolicy.asp | 200 OK Content-Length: 43935 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: votedayhoff.org
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Thu, 02 Oct 2014 00:57:34 GMT
Server: Microsoft-IIS/6.0
Content-Length: 45189
Content-Type: text/html
Set-Cookie: PopCount=asdf; path=/
Set-Cookie: ASPSESSIONIDSQSSRADT=IKOFNKADDGGNPIIOOANKEJOD; path=/
X-Powered-By: ASP.NET
...45189 bytes of data.
GET / HTTP/1.1
Host: votedayhoff.org
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Thu, 02 Oct 2014 00:57:34 GMT
Server: Microsoft-IIS/6.0
Content-Length: 45189
Content-Type: text/html
Set-Cookie: PopCount=asdf; path=/
Set-Cookie: ASPSESSIONIDSQSSRADT=IKOFNKADDGGNPIIOOANKEJOD; path=/
X-Powered-By: ASP.NET
...45189 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: votedayhoff.org
Referer: http://www.google.com/search?q=votedayhoff.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: votedayhoff.org
Referer: http://www.google.com/search?q=votedayhoff.org
Result:
The result is similar to the first query. There are no suspicious redirects found.