Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://etifs.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: etifs.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Thu, 14 Aug 2014 03:52:24 GMT Age: 2 Location: http://www.youtube.com/10p6 Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | malicious |
Scanned pages/files
Request | Server response | Status |
http://etifs.com/ | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://etifs.com/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Thu, 14 Aug 2014 03:52:25 GMT Age: 2 Location: http://www.youtube.com/10p6/test404page.js Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | clean |
http://www.youtube.com/10p6/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:27 GMT Location: http://www.youtube.com/user/10p6/test404page.js Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
http://www.youtube.com/user/10p6/test404page.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:27 GMT Location: https://www.youtube.com/user/10p6/test404page.js Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/bin/answer.py?answer=151657&hl=en for more info." Set-Cookie: YSC=IhLwY9--E8A; path=/; domain=.youtube.com; httponly Set-Cookie: VISITOR_INFO1_LIVE=L6UUFeVEbXU; path=/; domain=.youtube.com; expires=Tue, 14-Apr-2015 15:45:27 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
https://www.youtube.com/user/10p6/test404page.js | 200 OK Content-Length: 149202 Content-Type: text/html | clean |
https://www.youtube.com//s.ytimg.com/yts/jsbin/www-scheduler-vflRVH8LE/www-scheduler.js/ | 404 Not Found Content-Length: 513 Content-Type: text/html | clean |
http://www.youtube.com/test404page.js | 404 Not Found Content-Length: 513 Content-Type: text/html | clean |
http://etifs.com//s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Thu, 14 Aug 2014 03:52:28 GMT Age: 1 Location: http://www.youtube.com/10p6/s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | clean |
http://www.youtube.com/10p6/s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:29 GMT Location: http://www.youtube.com/user/10p6/s.ytimg.com%2Fyts%2Fjsbin%2Fspf-vflv_6l8d%2Fspf.js%2F Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
http://www.youtube.com/user/10p6/s.ytimg.com%2fyts%2fjsbin%2fspf-vflv_6l8d%2fspf.js%2f | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:29 GMT Location: https://www.youtube.com/user/10p6/s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/bin/answer.py?answer=151657&hl=en for more info." Set-Cookie: VISITOR_INFO1_LIVE=5f_n335gSag; path=/; domain=.youtube.com; expires=Tue, 14-Apr-2015 15:45:29 GMT Set-Cookie: YSC=L5JFRWbSfvo; path=/; domain=.youtube.com; httponly X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
https://www.youtube.com/user/10p6/s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ | 200 OK Content-Length: 149718 Content-Type: text/html | clean |
https://www.youtube.com//s.ytimg.com/yts/jsbin/spf-vflv_6l8d/spf.js/ | 404 Not Found Content-Length: 513 Content-Type: text/html | clean |
http://etifs.com//s.ytimg.com/yts/jsbin/www-en_US-vflPbudCp/base.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=900 Connection: close Date: Thu, 14 Aug 2014 03:52:29 GMT Age: 2 Location: http://www.youtube.com/10p6/s.ytimg.com/yts/jsbin/www-en_US-vflPbudCp/base.js/ Server: Microsoft-IIS/7.5 Content-Length: 0 Content-Type: text/html X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET | clean |
http://www.youtube.com/10p6/s.ytimg.com/yts/jsbin/www-en_us-vflpbudcp/base.js/ | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:31 GMT Location: http://www.youtube.com/user/10p6/s.ytimg.com%2Fyts%2Fjsbin%2Fwww-en_us-vflpbudcp%2Fbase.js%2F Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
http://www.youtube.com/user/10p6/s.ytimg.com%2fyts%2fjsbin%2fwww-en_us-vflpbudcp%2fbase.js%2f | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Connection: close Date: Thu, 14 Aug 2014 03:52:31 GMT Location: https://www.youtube.com/user/10p6/s.ytimg.com/yts/jsbin/www-en_us-vflpbudcp/base.js/ Server: gwiseguy/2.0 Content-Length: 0 Content-Type: text/html; charset=utf-8 Expires: Tue, 27 Apr 1971 19:44:06 EST Alternate-Protocol: 80:quic P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/bin/answer.py?answer=151657&hl=en for more info." Set-Cookie: VISITOR_INFO1_LIVE=cxej85_sWTM; path=/; domain=.youtube.com; expires=Tue, 14-Apr-2015 15:45:31 GMT Set-Cookie: YSC=Ailety2MZ20; path=/; domain=.youtube.com; httponly X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube | clean |
https://www.youtube.com/user/10p6/s.ytimg.com/yts/jsbin/www-en_us-vflpbudcp/base.js/ | 200 OK Content-Length: 151134 Content-Type: text/html | clean |
https://www.youtube.com//s.ytimg.com/yts/jsbin/www-en_US-vflPbudCp/base.js/ | 404 Not Found Content-Length: 513 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=etifs.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://etifs.com/
Result: etifs.com is not infected or malware details are not published yet.
Result: etifs.com is not infected or malware details are not published yet.