Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kr.gamcore.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kr.gamcore.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://kr.gamcore.com/ | 200 OK Content-Length: 47597 Content-Type: text/html | clean |
http://lv7.fgn.me/common/static/123/site.js?1411048731 | 200 OK Content-Length: 163926 Content-Type: application/javascript | clean |
http://lv7.fgn.me/common/static/123/games.js?1411048731 | 200 OK Content-Length: 17546 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below)  var swfobject=function(){var b="undefined",Q="object",n="Shockwave Flash",p="ShockwaveFlash.ShockwaveFlash",P="application/x-shockwave-flash",m="SWFObjectExprInst",j=window,K=document,T=navigator,o=[],N=[],i=[],d=[],J,Z=null,M=null,l=null,e=false,A=false;var h=function(){var v=typeof K.getElementById!=b&&typeof K.getElementsByTagName!=b&&typeof K.createElement!=b,AC=[0,0,0],x=null;if(typeof T.plugins!=b&&typeof T.plugins[n]==Q){x=T.plugins[n].description;if(x& $('.cpm_game a').attr('href', cpmStar.getLink()); $('.cpm_game .title').html(cpmStar.getTitle()); $('.cpm_game p').html(cpmStar.getDescription()); } }); var fswin = null; var width = null; var height = null; var fixed_size = null; var loadedprogress=0; var LoadingInterval=0; w = h = 0; swf_w = 0; swf_h = 0; Antivirus reports:
| ||
http://apis.google.com/js/plusone.js | 200 OK Content-Length: 12803 Content-Type: application/javascript | clean |
http://webmasters.totemcash.com/js/Peeljav.js | 200 OK Content-Length: 89500 Content-Type: application/javascript | clean |
http://webmasters.totemcash.com/js/mblpeel.js | 200 OK Content-Length: 5451 Content-Type: application/javascript | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6898 Content-Type: text/javascript | clean |
http://ads.adxpansion.com/public/js/showads.php?zone_id=44086&ver=1 | 200 OK Content-Length: 2736 Content-Type: text/javascript | clean |
http://counter.rambler.ru/top100.jcn?1361390 | 200 OK Content-Length: 6853 Content-Type: application/x-javascript | clean |
http://kr.gamcore.com/games | 200 OK Content-Length: 47641 Content-Type: text/html | clean |
http://kr.gamcore.com/tags | 200 OK Content-Length: 32988 Content-Type: text/html | clean |
http://kr.gamcore.com/favourites | HTTP/1.1 302 Moved Temporarily Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Sat, 13 Dec 2014 05:30:13 GMT Pragma: no-cache Location: /login Server: nginx Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: sid=ba25asjnj4tgk0vid2pqgn9ih3; expires=Thu, 18-Dec-2014 05:30:13 GMT; path=/; domain=.gamcore.com X-Powered-By: PHP/5.3.28 | clean |
http://kr.gamcore.com/login | 200 OK Content-Length: 18866 Content-Type: text/html | clean |
http://lv7.fgn.me/common/static/123/user.js?1411048731 | 200 OK Content-Length: 1017 Content-Type: application/javascript | clean |
http://kr.gamcore.com/history | 200 OK Content-Length: 23284 Content-Type: text/html | clean |
http://kr.gamcore.com/register | 200 OK Content-Length: 26686 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kr.gamcore.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 13 Dec 2014 05:30:10 GMT
Pragma: no-cache
Server: nginx
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: sid=8moqjhmn38v76hsn2opmssect5; expires=Thu, 18-Dec-2014 05:30:10 GMT; path=/; domain=.gamcore.com
X-Powered-By: PHP/5.3.28
GET / HTTP/1.1
Host: kr.gamcore.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 13 Dec 2014 05:30:10 GMT
Pragma: no-cache
Server: nginx
Content-Type: text/html; charset=UTF-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: sid=8moqjhmn38v76hsn2opmssect5; expires=Thu, 18-Dec-2014 05:30:10 GMT; path=/; domain=.gamcore.com
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: kr.gamcore.com
Referer: http://www.google.com/search?q=kr.gamcore.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kr.gamcore.com
Referer: http://www.google.com/search?q=kr.gamcore.com
Result:
The result is similar to the first query. There are no suspicious redirects found.