Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cecycem.mx
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://cecycem.mx/ | 200 OK Content-Length: 17321 Content-Type: text/html | clean |
http://cecycem.mx/res/x5engine.js | 200 OK Content-Length: 52323 Content-Type: application/javascript | clean |
http://cecycem.mx/res/x5cart.js | 200 OK Content-Length: 15434 Content-Type: application/javascript | clean |
http://feeds.feedburner.com/NoticiasYPublicacionesCecycem?format=sigpro | 200 OK Content-Length: 5100 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: www.noticiasypublicaciones.cecycem.mx document.write("\x3cdiv class\x3d\x22feedburnerFeedBlock\x22 id\x3d\x22NoticiasYPublicacionesCecycem04qjoccn4hrq5vsd2udqb9h8us\x22\x3e"); document.write("\x3cp class\x3d\x22feedTitle\x22\x3e\x3ca href\x3d\x22http://www.noticiasypublicaciones.cecycem.mx\x22\x3eNoticias y Publicaciones CECYCEM\x3c/a\x3e\x3c/p\x3e"); document.write("\x3cul\x3e"); document.write("\x3cli\x3e\x3cspan class\x3d\x22headline\x22\x3e\x3ca href\x3d\x22http://www.noticiasypublicaciones.cecycem.mx/?p\x3d91\x22\x3eCURSO DE COMPUTACION\x3c/a\x3e\x3c/span\x3e"); document.write("\x3cdiv\x3e \xbfPuede imaginar el n\xfamero de oportunidades que surgen para\x26#8230;\x3c/div\x3e"); document.writ ...[4592 bytes skipped]... Decoded script: <div class="feedburnerFeedBlock" id="NoticiasYPublicacionesCecycem04qjoccn4hrq5vsd2udqb9h8us"><p class="feedTitle"><a href="http://www.noticiasypublicaciones.cecycem.mx">Noticias y Publicaciones CECYCEM</a></p><ul><li><span class="headline"><a href="http://www.noticiasypublicaciones.cecycem.mx/?p=91">CURSO DE COMPUTACION</a></span><div> ¿Puede imaginar el número de oportunidades que surgen para…</div><p class="date">1/27/2012</p></li><li><span class="headline"><a href="http://www.noticias ...[3145 bytes skipped]... | ||
http://geoloc3.geovisite.com/private/geotoolbar.js?compte=756288271952 | 200 OK Content-Length: 24842 Content-Type: text/html | clean |
http://geoloc3.geovisite.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cecycem.mx
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 02 Apr 2014 01:11:10 GMT
Accept-Ranges: bytes
ETag: "44207bf-43a9-4f5ce7190880d"
Server: Apache
Content-Length: 17321
Content-Type: text/html
Last-Modified: Sun, 30 Mar 2014 08:08:44 GMT
...17321 bytes of data.
GET / HTTP/1.1
Host: cecycem.mx
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 02 Apr 2014 01:11:10 GMT
Accept-Ranges: bytes
ETag: "44207bf-43a9-4f5ce7190880d"
Server: Apache
Content-Length: 17321
Content-Type: text/html
Last-Modified: Sun, 30 Mar 2014 08:08:44 GMT
...17321 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cecycem.mx
Referer: http://www.google.com/search?q=cecycem.mx
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cecycem.mx
Referer: http://www.google.com/search?q=cecycem.mx
Result:
The result is similar to the first query. There are no suspicious redirects found.