immigration bureau thailand

onzestan · Post by **onzestan** » Fri Dec 18, 2009 4:56 am

Google gives a warning for this side that it may harm my computer.
Wot gives the all clear green sign.
Which one am I to believe.
This is important to me because my website siam-info.com has a link to this site for obvious reasons.
Plse clarify
best regards
onzestan

Anonymized · Post by **Anonymized** » Fri Dec 18, 2009 6:20 am

Nothing terrible is listed for this domain by [url=http://www.robtex.com/dns/immigration.go.th.html t=_self]robtex[/url]; however, [url=http://www.google.com/safebrowsing/diagnostic?site=http://immigration.go.th/ t=_self]google[/url] states:

Of the 1528 pages we tested on the site over the past 90 days, 191 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-12-17, and the last time suspicious content was found on this site was on 2009-12-17. Malicious software includes 110 exploit(s), 40 scripting exploit(s), 32 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

So, some degree of caution is probably warranted.

Ringman · Post by **Ringman** » Fri Dec 18, 2009 9:47 am

It's looks like to be a false positive.

cconniejean · Post by **cconniejean** » Fri Dec 18, 2009 10:24 am

It's not a false positive. Various page have been comprised. If you look at the source code on some of the pages you can see the code and redirects.

Code: Select all

bangkok.immigration.go.th/

Detected virus name is Trojan-Downloader.JS.Gumblar.x

Code: Select all

nai.immigration.go.th/

Detected virus name is Trojan-Downloader.JS.Agent.etr

Some pages are clean, some are not.

onzestan · Post by **onzestan** » Fri Dec 18, 2009 11:30 am

Thank you all very much.
Have noticed that the Wot sign is now yellow.
Can now adapt my website to this situation.
Thanks again

onzestan

c۞g · Post by **c۞g** » Sat Dec 19, 2009 3:19 pm

I use FireFox browser.
When I load the page, I get this:

[img]http://i562.photobucket.com/albums/ss66/gate7wizard/bs/reported_attack_site.jpg[/img]

Which earns my rating and [url=http://www.mywot.com/scorecard/immigration.go.th/comment-4565778#comment-4565778 t=_self]comment[/url] linking back to Google Diagnostics.

-------
WOT Services Ltd. - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W

onzestan · Post by **onzestan** » Tue Dec 29, 2009 3:29 am

Well now Google has lifted its warning regarding this site, and WOT still gives a red sign.
Situation reversed from before.
Kindly advise what am I to tell our readers>
Thanks beforehand

onzestan

cconniejean · Post by **cconniejean** » Tue Dec 29, 2009 4:23 am

For me, scanning with Finjan I no longer get the original warnings, but Avira blocks for the following:
Requested URL: 'hxxp://nai.immigration.go.th/'
Category/categories: Malware

Requested URL: 'hxxp://bangkok.immigration.go.th/'
Category/categories: Malware

Requested URL: 'hxxp://www.immigration.go.th/'
Category/categories: Malware

c۞g · Post by **c۞g** » Wed Dec 30, 2009 2:08 am

Well now Google has lifted its warning regarding this site, and WOT still gives a red sign.

Correct, but be honest...
http://google.com/safebrowsing/diagnostic?site=immigration.go.th/
What is the current listing status for immigration.go.th?

This site is not currently listed as suspicious.

Part of this site was listed for suspicious activity 11 time(s) over the past 90 days.

What happened when Google visited this site?

Of the 2541 pages we tested on the site over the past 90 days, 197 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2009-12-29, and the last time suspicious content was found on this site was on 2009-12-26.

Malicious software includes 115 exploit(s), 39 scripting exploit(s), 32 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

Malicious software is hosted on 50 domain(s), including electro-tex.in/, usg-medbazar.pl/, asitsoft-jo.com/.

22 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including usg-medbazar.pl/, furniture-style.info/, little-bitty.cn/.

This site was hosted on 1 network(s) including AS4750 (CSLOXINFO).

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, immigration.go.th appeared to function as an intermediary for the infection of 3 site(s) including samui-immigration.com/, tkc.go.th/, police.go.th/.

When you get to a point that Google Diagnostics states 0 listings for 90 days...
PM me and link to the Google Diagnostics page and this reply, then I shall remove my comment and delete my low ratings. If the site can not stay clean for 90 days... ratings remain as they are.

-------
WOT Services Ltd. - gives us safety through Web of Trust.
WOT Community - gives us security through unity.
Thank you all
- G7W

onzestan · Post by **onzestan** » Wed Dec 30, 2009 4:14 am

Good heavens are you accusing me of not being honnest?
Excuse me for not being very computer knowledgeable, and one site giving warnings and another not makes me confused, therefore my request for clarification.

Anyway thanks for the update and have a happy new-year.

onzestan

immigration bureau thailand

immigration bureau thailand

Info on immigration.go.th domain

It's looks like to be a

It's not a false positive.

thank you all.

re: immigration.go.th

immigration bureau thailand.

For me, scanning with Finjan

re: immigration bureau thailand

immigration bureau thailand.

Who is online