Scanned pages/files
Request | Server response | Status |
http://queviet.eu/ | 200 OK Content-Length: 75642 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: !--Hacked by -- <!--Hacked by -->
<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="vi-vn" lang="vi-vn" dir="ltr"><head><base href="http://queviet.eu" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><link href='http://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,300italic,700&subset=latin,vietnamese' rel='stylesheet' type='text/css'><link href='http://fonts.g ...[89568 bytes skipped]... | ||
http://queviet.eu/media/jui/js/jquery.min.js | 200 OK Content-Length: 96381 Content-Type: application/javascript | clean |
http://queviet.eu/media/jui/js/jquery-noconflict.js | 200 OK Content-Length: 21 Content-Type: application/javascript | clean |
http://queviet.eu/media/jui/js/jquery-migrate.min.js | 200 OK Content-Length: 7199 Content-Type: application/javascript | clean |
http://queviet.eu/media/jui/js/bootstrap.min.js | 200 OK Content-Length: 29156 Content-Type: application/javascript | clean |
http://queviet.eu/templates/tthqv/js/template.min.js | 200 OK Content-Length: 5424 Content-Type: application/javascript | clean |
http://queviet.eu/media/system/js/mootools-core.js | 200 OK Content-Length: 83893 Content-Type: application/javascript | clean |
http://queviet.eu/media/system/js/core.js | 200 OK Content-Length: 3821 Content-Type: application/javascript | clean |
http://queviet.eu//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js/ | 200 OK Content-Length: 35971 Content-Type: text/html | clean |
http://queviet.eu/hoi-nguoi-viet-nam-tai-ba-lan | 200 OK Content-Length: 23242 Content-Type: text/html | clean |
http://queviet.eu/media/system/js/tabs-state.js | 200 OK Content-Length: 1829 Content-Type: application/javascript | clean |
http://queviet.eu/media/system/js/caption.js | 200 OK Content-Length: 501 Content-Type: application/javascript | clean |
http://queviet.eu/queviet | 200 OK Content-Length: 17318 Content-Type: text/html | clean |
http://queviet.eu/lien-he | 200 OK Content-Length: 22259 Content-Type: text/html | clean |
http://queviet.eu/media/system/js/mootools-more.js | 200 OK Content-Length: 236825 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: queviet.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 24 Dec 2015 02:27:22 GMT
Pragma: no-cache
Server: Apache/2.4.7 (Ubuntu)
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: 758a554f39822d3d51f9374bbcab9103=k7dvrrvbd9su22o7agbiu4nff2; path=/; HttpOnly
X-Powered-By: PHP/5.5.9-1ubuntu4.9
GET / HTTP/1.1
Host: queviet.eu
Result:
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: close
Date: Thu, 24 Dec 2015 02:27:22 GMT
Pragma: no-cache
Server: Apache/2.4.7 (Ubuntu)
Vary: Accept-Encoding
Content-Type: text/html
Set-Cookie: 758a554f39822d3d51f9374bbcab9103=k7dvrrvbd9su22o7agbiu4nff2; path=/; HttpOnly
X-Powered-By: PHP/5.5.9-1ubuntu4.9
Second query (visit from search engine):
GET / HTTP/1.1
Host: queviet.eu
Referer: http://www.google.com/search?q=queviet.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: queviet.eu
Referer: http://www.google.com/search?q=queviet.eu
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=queviet.eu
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://queviet.eu/
Result: queviet.eu is not infected or malware details are not published yet.
Result: queviet.eu is not infected or malware details are not published yet.