Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: aytoguadalajara.com
Result:
HTTP/1.1 200 OK
Date: Sat, 12 Dec 2015 13:16:30 GMT
Accept-Ranges: bytes
ETag: "3d2c605b1761ce1:0"
Server: Microsoft-IIS/8.0
Content-Length: 7057
Content-Type: text/html
Last-Modified: Tue, 04 Jun 2013 11:33:38 GMT
X-Powered-By: ASP.NET
...7057 bytes of data.
GET / HTTP/1.1
Host: aytoguadalajara.com
Result:
HTTP/1.1 200 OK
Date: Sat, 12 Dec 2015 13:16:30 GMT
Accept-Ranges: bytes
ETag: "3d2c605b1761ce1:0"
Server: Microsoft-IIS/8.0
Content-Length: 7057
Content-Type: text/html
Last-Modified: Tue, 04 Jun 2013 11:33:38 GMT
X-Powered-By: ASP.NET
...7057 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: aytoguadalajara.com
Referer: http://www.google.com/search?q=aytoguadalajara.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: aytoguadalajara.com
Referer: http://www.google.com/search?q=aytoguadalajara.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://aytoguadalajara.com/ | HTTP/1.1 200 OK Date: Sat, 12 Dec 2015 13:16:30 GMT Accept-Ranges: bytes ETag: "3d2c605b1761ce1:0" Server: Microsoft-IIS/8.0 Content-Length: 7057 Content-Type: text/html Last-Modified: Tue, 04 Jun 2013 11:33:38 GMT X-Powered-By: ASP.NET | clean |
https://www.facebook.com/ayyildiztim.com.tr | HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate Connection: close Date: Sat, 12 Dec 2015 13:16:30 GMT Pragma: no-cache Vary: Accept-Encoding Content-Type: text/html Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="Facebook does not have a P3P policy. Learn why here: http://fb.me/p3p" Set-Cookie: reg_ext_ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.facebook.com; httponly Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff X-FB-Debug: h2QTDDmyD8uLK3yoVD5xqsU6SNTIAOiameHPU1aJlKChliit+Gw/ZSo1jXXSYC/JoRcZT2CAKc2E8hpdyGyXMg== X-Frame-Options: DENY X-UA-Compatible: IE=edge,chrome=1 X-XSS-Protection: 0 | clean |
https://www.facebook.com/ayyildiztim.com.tr?_fb_noscript=1 | 200 OK Content-Length: 25118 Content-Type: text/html | clean |
https://static.xx.fbcdn.net/rsrc.php/v2/yA/r/WvVw4j-IMhg.js | 200 OK Content-Length: 111529 Content-Type: application/x-javascript | clean |
http://aytoguadalajara.com/recover/initiate?lwv=110 | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/test404page.js | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/r.php?locale=lt_LT | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/help/?ref=404 | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/r.php | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/login/ | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/lite/ | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/mobile/?ref=pf | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/find-friends?ref=pf | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/badges/?ref=pf | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/directory/people/ | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/directory/pages/ | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://aytoguadalajara.com/places/ | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=aytoguadalajara.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://aytoguadalajara.com/
Result: aytoguadalajara.com is not infected or malware details are not published yet.
Result: aytoguadalajara.com is not infected or malware details are not published yet.