immigration bureau thailand

onzestan
Posts: 7
Joined: Fri Dec 18, 2009 4:56 am

immigration bureau thailand

Post by onzestan » Fri Dec 18, 2009 4:56 am

Google gives a warning for this side that it may harm my computer.
Wot gives the all clear green sign.
Which one am I to believe.
This is important to me because my website siam-info.com has a link to this site for obvious reasons.
Plse clarify
best regards
onzestan

Anonymized
Posts: 103
Joined: Mon Nov 16, 2009 12:35 pm

Info on immigration.go.th domain

Post by Anonymized » Fri Dec 18, 2009 6:20 am

Nothing terrible is listed for this domain by [url=http://www.robtex.com/dns/immigration.go.th.html t=_self]robtex[/url]; however, [url=http://www.google.com/safebrowsing/diagnostic?site=http://immigration.go.th/ t=_self]google[/url] states:

Of the 1528 pages we tested on the site over the past 90 days, 191 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-12-17, and the last time suspicious content was found on this site was on 2009-12-17. Malicious software includes 110 exploit(s), 40 scripting exploit(s), 32 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

So, some degree of caution is probably warranted.

Ringman
Posts: 6
Joined: Fri Dec 18, 2009 9:47 am

It's looks like to be a

Post by Ringman » Fri Dec 18, 2009 9:47 am

It's looks like to be a false positive.

cconniejean
Posts: 696
Joined: Sun Jul 13, 2008 12:16 pm

It's not a false positive.

Post by cconniejean » Fri Dec 18, 2009 10:24 am

It's not a false positive. Various page have been comprised. If you look at the source code on some of the pages you can see the code and redirects.

Code: Select all

bangkok.immigration.go.th/
Detected virus name is Trojan-Downloader.JS.Gumblar.x

Code: Select all

nai.immigration.go.th/
Detected virus name is Trojan-Downloader.JS.Agent.etr

Some pages are clean, some are not.

onzestan
Posts: 7
Joined: Fri Dec 18, 2009 4:56 am

thank you all.

Post by onzestan » Fri Dec 18, 2009 11:30 am

Thank you all very much.
Have noticed that the Wot sign is now yellow.
Can now adapt my website to this situation.
Thanks again

onzestan

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

re: immigration.go.th

Post by c۞g » Sat Dec 19, 2009 3:19 pm

I use FireFox browser.
When I load the page, I get this:

[img]http://i562.photobucket.com/albums/ss66/gate7wizard/bs/reported_attack_site.jpg[/img]

Which earns my rating and [url=http://www.mywot.com/scorecard/immigration.go.th/comment-4565778#comment-4565778 t=_self]comment[/url] linking back to Google Diagnostics.

-------
WOT Services Ltd. - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W

onzestan
Posts: 7
Joined: Fri Dec 18, 2009 4:56 am

immigration bureau thailand.

Post by onzestan » Tue Dec 29, 2009 3:29 am

Well now Google has lifted its warning regarding this site, and WOT still gives a red sign.
Situation reversed from before.
Kindly advise what am I to tell our readers>
Thanks beforehand

onzestan

cconniejean
Posts: 696
Joined: Sun Jul 13, 2008 12:16 pm

For me, scanning with Finjan

Post by cconniejean » Tue Dec 29, 2009 4:23 am

For me, scanning with Finjan I no longer get the original warnings, but Avira blocks for the following:
Requested URL: 'hxxp://nai.immigration.go.th/'
Category/categories: Malware

Requested URL: 'hxxp://bangkok.immigration.go.th/'
Category/categories: Malware

Requested URL: 'hxxp://www.immigration.go.th/'
Category/categories: Malware

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

re: immigration bureau thailand

Post by c۞g » Wed Dec 30, 2009 2:08 am

Well now Google has lifted its warning regarding this site, and WOT still gives a red sign.

Correct, but be honest...
http://google.com/safebrowsing/diagnostic?site=immigration.go.th/

What is the current listing status for immigration.go.th?

This site is not currently listed as suspicious.

Part of this site was listed for suspicious activity 11 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 2541 pages we tested on the site over the past 90 days, 197 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-12-29, and the last time suspicious content was found on this site was on 2009-12-26.

Malicious software includes 115 exploit(s), 39 scripting exploit(s), 32 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

Malicious software is hosted on 50 domain(s), including electro-tex.in/, usg-medbazar.pl/, asitsoft-jo.com/.

22 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including usg-medbazar.pl/, furniture-style.info/, little-bitty.cn/.

This site was hosted on 1 network(s) including AS4750 (CSLOXINFO).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, immigration.go.th appeared to function as an intermediary for the infection of 3 site(s) including samui-immigration.com/, tkc.go.th/, police.go.th/.


When you get to a point that Google Diagnostics states 0 listings for 90 days...
PM me and link to the Google Diagnostics page and this reply, then I shall remove my comment and delete my low ratings. If the site can not stay clean for 90 days... ratings remain as they are.

-------
WOT Services Ltd. - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W

onzestan
Posts: 7
Joined: Fri Dec 18, 2009 4:56 am

immigration bureau thailand.

Post by onzestan » Wed Dec 30, 2009 4:14 am

Good heavens are you accusing me of not being honnest?
Excuse me for not being very computer knowledgeable, and one site giving warnings and another not makes me confused, therefore my request for clarification.

Anyway thanks for the update and have a happy new-year.

onzestan

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests