Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=koreasafety.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.koreasafety.com/ | 200 OK Content-Length: 10531 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) <!-- var url="http://www.koreasafety.com" var title="³ì»öžç - »ê¼Ò°ø±Þ±â °ø±âÈ£Èí±â" function addfavorites() { if (document.all) window.external.AddFavorite(url,title) } function MM_reloadPage(init) { if (init==true) with (navigator) {if ((appName=="Netscape")&&(parseInt(appVersion)==4)) { document.MM_pgW=innerWidth; document.MM_pgH=innerHeight; onresize=MM_reloadPage; }} else if (innerWidth!=document.MM_pg if(life==5) window.open('http://lot.kbstar.com/quics?page=A005345','','width=550,height=500,left=50,top=50,resizable=yes,scrollbars=yes') } function MM_jumpMenu(targ,selObj,restore){ eval(targ+".location='"+selObj.options[selObj.selectedIndex].value+"'"); if (restore) selObj.selectedIndex=0; } function MM_openBrWindow(theURL,winName,features) { window.open(theURL,winName,features); } Antivirus reports:
| ||
http://www.koreasafety.com/totalview/stm31.js | HTTP/1.1 302 Found Connection: close Date: Thu, 25 Dec 2014 18:46:23 GMT Location: http://html.j0277.com/404.html Server: Apache Content-Type: text/html; charset=iso-8859-1 | clean |
http://html.j0277.com/404.html | 200 OK Content-Length: 2958 Content-Type: text/html | clean |
http://html.j0277.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Thu, 25 Dec 2014 18:46:23 GMT Location: http://html.gethompy.com/error/error_request.php Server: nginx/1.4.3p1 Content-Length: 296 Content-Type: text/html; charset=iso-8859-1 | clean |
http://html.gethompy.com/error/error_request.php | 200 OK Content-Length: 211 Content-Type: text/html | clean |
http://html.gethompy.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Thu, 25 Dec 2014 18:46:25 GMT Location: http://html.gethompy.com/error/error_request.php Server: nginx/1.4.3p1 Content-Length: 299 Content-Type: text/html; charset=iso-8859-1 | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: koreasafety.com
Result:
GET / HTTP/1.1
Host: koreasafety.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: koreasafety.com
Referer: http://www.google.com/search?q=koreasafety.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: koreasafety.com
Referer: http://www.google.com/search?q=koreasafety.com
Result:
The result is similar to the first query. There are no suspicious redirects found.