Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=yeresbook.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://yeresbook.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: yeresbook.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Fri, 03 Oct 2014 08:05:58 GMT
Location: http://www.yeresbook.com/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Edge-Control: dca=esi, no-store
...0 bytes of data.
GET / HTTP/1.1
Host: yeresbook.com
Result:
HTTP/1.1 302 Found
Connection: close
Date: Fri, 03 Oct 2014 08:05:58 GMT
Location: http://www.yeresbook.com/
Server: Apache
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Edge-Control: dca=esi, no-store
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: yeresbook.com
Referer: http://www.google.com/search?q=yeresbook.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: yeresbook.com
Referer: http://www.google.com/search?q=yeresbook.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://yeresbook.com/ | HTTP/1.1 302 Found Connection: close Date: Fri, 03 Oct 2014 08:05:58 GMT Location: http://www.yeresbook.com/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Edge-Control: dca=esi, no-store | clean |
http://www.yeresbook.com/ | HTTP/1.1 302 Found Connection: close Date: Fri, 03 Oct 2014 08:05:58 GMT Location: http://www.yeresbook.com/tools/goodkeymaster.one?url=aHR0cDovL3d3dy55ZXJlc2Jvb2suY29tLw..&ts=1412323559.0125 Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Edge-Control: dca=esi, no-store P3P: CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC" Set-Cookie: core_pending=yes; path=/; domain=.yeresbook.com | clean |
http://www.yeresbook.com/tools/goodkeymaster.one?url=ahr0cdovl3d3dy55zxjlc2jvb2suy29tlw..&ts=1412323559.0125 | HTTP/1.1 302 Found Cache-Control: no-cache Connection: close Date: Fri, 03 Oct 2014 08:05:59 GMT Pragma: no-cache Location: http://www.yeresbook.com Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Edge-Control: dca=esi, no-store P3P: CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC" | clean |
http://www.yeresbook.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Fri, 03 Oct 2014 08:06:00 GMT Location: http://www.yeresbook.com/tools/goodkeymaster.one?url=aHR0cDovL3d3dy55ZXJlc2Jvb2suY29tL3Rlc3Q0MDRwYWdlLmpz&ts=1412323560.042 Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Edge-Control: dca=esi, no-store P3P: CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC" Set-Cookie: core_pending=yes; path=/; domain=.yeresbook.com | clean |
http://www.yeresbook.com/tools/goodkeymaster.one?url=ahr0cdovl3d3dy55zxjlc2jvb2suy29tl3rlc3q0mdrwywdllmpz&ts=1412323560.042 | HTTP/1.1 302 Found Cache-Control: no-cache Connection: close Date: Fri, 03 Oct 2014 08:06:00 GMT Pragma: no-cache Location: http://www.yeresbook.com Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 Edge-Control: dca=esi, no-store P3P: CP="NOI DEV PSA PSD IVA PVD OTP OUR OTR IND OTC" | clean |