Mobile app version of vmapp.org
Login or Join
Si4351233

: What is the notified-CompliancePage page? I sometimes have bots (I assume) hitting pages such as: /notified-CompliancePage?aHR0cDovL3d3dy5teXBpdm90cy5jb20vZGFpbHlub3Rlcw== /verify-CompliancePage?aHR0cDovL3d3dy5teXBpdm90cy5jb20vZGFpbHlub3Rlc

@Si4351233

Posted in: #WebCrawlers

I sometimes have bots (I assume) hitting pages such as:

/notified-CompliancePage?aHR0cDovL3d3dy5teXBpdm90cy5jb20vZGFpbHlub3Rlcw==

/verify-CompliancePage?aHR0cDovL3d3dy5teXBpdm90cy5jb20vZGFpbHlub3Rlcw==

Any idea what these pages are intended for or what the bots are looking for?

Referring source: compliance.ubp.internet/notify-CompliancePage... which is obviously not going to resolve because there is no .internet TLD

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Si4351233

2 Comments

Sorted by latest first Latest Oldest Best

 

@Welton855

I think it's more likeley that it's an example of this gone bad: bto.bluecoat.com/tech-brief/creating-notification-policies-coaching-splash-and-compliance
BlueCoat can be configured to show a notification to the user that they have to accept before moving on to the destination page. In my example, it's sending almost everyone who gets one of those to a 404 page on the destination site, because something is wrong/off in the redirect.

10% popularity Vote Up Vote Down


 

@Ravi8258870

Bit of digging turns up this old thread from Webmaster World, another thread from ServerFault. The conclusion seems to be that it's caused by a bot looking for installations of a Bluecoat product called ProxySG to attack.


Seems a security product called ProxySG uses requests like
verify-SNL_Splash. Meant to be on the LAN side but apparently it may
be possible to attack the product and the external hits you are seeing
may be bot's probing to find users of ProxySG.


Googling the term shows a lot of odd results including some sites which have dedicated sales and advertising pages to 'notified-CompliancePage' so it seems like a common enough problem that spammers are taking advantage of the confusion...

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme