Scanned pages/files
Request | Server response | Status |
http://sgtelecom.com.vn/ | 200 OK Content-Length: 40307 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by groupxvn ...[16209 bytes skipped]... t;TD class="maincatboxtop"><div class="maincatboxtitle"><span class="title_big">Chủng loại sản phẩm</span></div></TD> </TR> <TR> <TD class="maincatboxcontent" style="border: solid 0px #ffffff; padding-top:1px;"> <div id="ddsidemenubar" class="markermenu"> <ul> <li><a rel="ddsubmenuside10" href="#">Hacked by groupxvn</a></li><li><a rel="ddsubmenuside9" href="#">Tá»NG ÄÃI ÄIá»N THOẠI</a></li><li><a rel="ddsubmenuside11" href="#">ÄIá»N THOẠI</a></li><li><a rel="ddsubmenuside12" href="#">MÃY FAX</a></li><li><a rel="ddsubmenuside23" href="#">MÃY IN</a></li><li><a rel="ddsubmenuside24" href="#">MÃY SCANNER</a></li><li><a rel="ddsubmen ...[32158 bytes skipped]... | ||
http://sgtelecom.com.vn/menu/chromejs/chrome.js | 200 OK Content-Length: 8752 Content-Type: application/javascript | clean |
http://sgtelecom.com.vn/scripts/common.js | 200 OK Content-Length: 1083 Content-Type: application/javascript | clean |
http://sgtelecom.com.vn/ddlevelsfiles/ddlevelsmenu.js | 200 OK Content-Length: 16274 Content-Type: application/javascript | clean |
http://sgtelecom.com.vn/scripts/crawler.js | 200 OK Content-Length: 9839 Content-Type: application/javascript | clean |
http://sgtelecom.com.vn/index.php?lang=en | 200 OK Content-Length: 39301 Content-Type: text/html | clean |
http://sgtelecom.com.vn/index.php?lang=vn | 200 OK Content-Length: 40307 Content-Type: text/html | clean |
http://sgtelecom.com.vn/about.php?lang=vn | 200 OK Content-Length: 30194 Content-Type: text/html | clean |
http://sgtelecom.com.vn/product.php?lang=vn | 200 OK Content-Length: 34536 Content-Type: text/html | clean |
http://sgtelecom.com.vn/news.php?lang=vn | 200 OK Content-Length: 29678 Content-Type: text/html | clean |
http://sgtelecom.com.vn/solution.php?lang=vn | 200 OK Content-Length: 29865 Content-Type: text/html | clean |
http://sgtelecom.com.vn/contact.php?lang=vn | 200 OK Content-Length: 33343 Content-Type: text/html | clean |
http://sgtelecom.com.vn/policy.php?lang=vn | 200 OK Content-Length: 29475 Content-Type: text/html | clean |
http://sgtelecom.com.vn/product.php?lang=vn&c1=26 | 200 OK Content-Length: 29686 Content-Type: text/html | clean |
http://sgtelecom.com.vn/product.php?lang=vn&c2=15 | 200 OK Content-Length: 37600 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sgtelecom.com.vn
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 21 Jul 2015 17:37:14 GMT
Pragma: no-cache
Server: Mod_Security 2.5.9 enabled
Vary: Accept-Encoding,User-Agent
Content-Length: 40307
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=lnnrh3cst8h03lkn3c369o6ub1; path=/
X-Powered-By: PHP/5.2.17
...40307 bytes of data.
GET / HTTP/1.1
Host: sgtelecom.com.vn
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Tue, 21 Jul 2015 17:37:14 GMT
Pragma: no-cache
Server: Mod_Security 2.5.9 enabled
Vary: Accept-Encoding,User-Agent
Content-Length: 40307
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=lnnrh3cst8h03lkn3c369o6ub1; path=/
X-Powered-By: PHP/5.2.17
...40307 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: sgtelecom.com.vn
Referer: http://www.google.com/search?q=sgtelecom.com.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sgtelecom.com.vn
Referer: http://www.google.com/search?q=sgtelecom.com.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sgtelecom.com.vn
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://sgtelecom.com.vn/
Result: sgtelecom.com.vn is not infected or malware details are not published yet.
Result: sgtelecom.com.vn is not infected or malware details are not published yet.