Share

Question

The domain in question is: eaypyybe.win

It happens just a few times a day while I’m browsing my own domain. Not sure what I can do to see if it’s some spyware on browser or other malware. The redirect is always this URL: http://eaypyybe.win/us3865/index.php?clickid=15427595260414307517035621384161460&zone=1806387-3979200730-0 Any idea how I can figure out what’s going on?

If it helps, my domain is: http://thexeno.com

Thanks.

Answer 1

northivanastan November 22, 2018

Since your website works fine in my browser, I can only assume that this is an error on your side, in which case:

From what I could tell, eaypyybe.win is a spyware site, as well as a malware redirect site. So it is malicious. It’s not a major one, though.

A few things I would try:

Try a different/newer browser; I personally recommend Falkon
Upgrade your server software and install ClamAV on your server and another, preferably new antivirus on your PC and check both for malware.
Ensure that your domain is managed from DigitalOcean’s nameservers.

That the site is hosted on DigitalOcean is likely a coincidence.

GreenSage November 22, 2018

Alright thanks. I use Panda AV and Chromium. I’ll look into Falkon. I also use serverpilot that manages the server for me. I’ll see what else I can do.

Answer 2

GreenSage November 22, 2018

Alright thanks. I use Panda AV and Chromium. I’ll look into Falkon. I also use serverpilot that manages the server for me. I’ll see what else I can do.

Sometimes my domain gets a redirect to another digital ocean domain