Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ehtr.co.kr
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ehtr.co.kr
Result:
HTTP/1.1 302 Object moved
Cache-Control: private
Date: Thu, 04 Sep 2014 18:42:20 GMT
Location: http://ehtr.co.kr/main
Server: Microsoft-IIS/6.0
Content-Length: 143
Content-Type: text/html
P3P: CP=ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC
Set-Cookie: PUID=906D7F7E39E14114908EA78768D84DDD; domain=ehtr.co.kr; path=/
Set-Cookie: ASPSESSIONIDACSTATSQ=JKPLJCNDNFEKHIMBHEPOBKJF; path=/
...143 bytes of data.
GET / HTTP/1.1
Host: ehtr.co.kr
Result:
HTTP/1.1 302 Object moved
Cache-Control: private
Date: Thu, 04 Sep 2014 18:42:20 GMT
Location: http://ehtr.co.kr/main
Server: Microsoft-IIS/6.0
Content-Length: 143
Content-Type: text/html
P3P: CP=ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC
Set-Cookie: PUID=906D7F7E39E14114908EA78768D84DDD; domain=ehtr.co.kr; path=/
Set-Cookie: ASPSESSIONIDACSTATSQ=JKPLJCNDNFEKHIMBHEPOBKJF; path=/
...143 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ehtr.co.kr
Referer: http://www.google.com/search?q=ehtr.co.kr
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ehtr.co.kr
Referer: http://www.google.com/search?q=ehtr.co.kr
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://ehtr.co.kr/ | HTTP/1.1 302 Object moved Cache-Control: private Date: Thu, 04 Sep 2014 18:42:20 GMT Location: http://ehtr.co.kr/main Server: Microsoft-IIS/6.0 Content-Length: 143 Content-Type: text/html P3P: CP=ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC Set-Cookie: PUID=906D7F7E39E14114908EA78768D84DDD; domain=ehtr.co.kr; path=/ Set-Cookie: ASPSESSIONIDACSTATSQ=JKPLJCNDNFEKHIMBHEPOBKJF; path=/ | clean |
http://ehtr.co.kr/main | HTTP/1.1 301 Moved Permanently Date: Thu, 04 Sep 2014 18:42:21 GMT Location: http://ehtr.co.kr/main/ Server: Microsoft-IIS/6.0 Content-Length: 169 Content-Type: text/html | clean |
http://ehtr.co.kr/main/ | HTTP/1.1 302 Object moved Cache-Control: private Date: Thu, 04 Sep 2014 18:42:24 GMT Location: /main/main_real.asp Server: Microsoft-IIS/6.0 Content-Length: 140 Content-Type: text/html P3P: CP=ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC Set-Cookie: PUID=ECCF65951C18447CBD0D8D0A45565561; domain=ehtr.co.kr; path=/ Set-Cookie: ASPSESSIONIDACSTATSQ=LKPLJCNDIMJJNMIIEONLMGFG; path=/ | clean |
http://ehtr.co.kr/main/main_real.asp | 200 OK Content-Length: 71827 Content-Type: text/html | clean |
http://ehtr.co.kr/jscript/common.js | 200 OK Content-Length: 22682 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/embed.js | 200 OK Content-Length: 2953 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/ajax.js | 200 OK Content-Length: 2356 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/json.js | 200 OK Content-Length: 5093 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/rollover.js | 200 OK Content-Length: 1033 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/user_func.js | 200 OK Content-Length: 2552 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/sns.js | 200 OK Content-Length: 3789 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/default.asp | HTTP/1.1 302 Object moved Cache-Control: private Date: Thu, 04 Sep 2014 18:42:42 GMT Location: http://ehtr.co.kr/main Server: Microsoft-IIS/6.0 Content-Length: 143 Content-Type: text/html P3P: CP=ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC Set-Cookie: PUID=DDB982D90F884CA3A0B345D1CBF5E260; domain=ehtr.co.kr; path=/ Set-Cookie: ASPSESSIONIDACSTATSQ=PKPLJCNDBDNKAANJLBNOGHEP; path=/ | clean |
http://ehtr.co.kr/test404page.js | 404 Not Found Content-Length: 1466 Content-Type: text/html | clean |
http://ehtr.co.kr/member/regist_agree.asp | 200 OK Content-Length: 49756 Content-Type: text/html | clean |
http://ehtr.co.kr/jscript/cookie.js | 200 OK Content-Length: 1022 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/floating.js | 200 OK Content-Length: 3636 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/jscript/left_floating.js | 200 OK Content-Length: 3732 Content-Type: application/x-javascript | clean |
http://ehtr.co.kr/member/find_id.asp | 200 OK Content-Length: 35453 Content-Type: text/html | clean |
http://ehtr.co.kr/page.asp?uid=13 | 200 OK Content-Length: 23422 Content-Type: text/html | clean |