Is gumblar.cn Safe?

Gumblar.cn ruins all of your programs inside your computer and messes up all of you settings and puts TONS of pop ups and ads on your screen, and changes your default browser and opens a backdoor for other malware to get to your computer. It makes your computer get out of control in a weird way and you may experience random system crashes. It also disables a bunch of the computer's functions.

http://www.urlvoid.com/scan/gumblar.cn/ The website is identified by 8 scanning engines MyWOT Alert View more details... ThreatLog Alert View more details... GoogleSafeBrowsing Alert View more details... Sucuri Alert View more details... Fortinet Alert View more details... CRDF Alert View more details... DNS-BH Alert View more details... DShield Alert View more details... https://www.virustotal.com/en/url/91230a638695ade161ba9d1dbfd7352bc5d09c6fc5209a3ef19891f657a2c901/analysis/ Detection ratio: 11 / 65 Analysis date: 2015-09-23

A notorious website which was known for running a bot-net via scripting exploitation. A bit of history reveals that the scripting would communicate with other servers which had been infected with the Gumblar script and would've compromised by brute-force attacking servers or getting clients to run the script whilst accessing other non-infected domains, this in turn was also used to lure users into connecting to it which would've rendered the client into a zombie computer, a client machine that is being controlled by a trojan - primarily to be used in retaliation of other servers, essentially allowing it to grow itself in size, which would've been used to siphon sensitive information such as personal identifiable information, bank funds or wire transfer funds or miscellaneous data that is useful for the hackers.

Gumblar-style attack example: User goes to www.gumblar.cn (Web forgery) and signs in. Attacker gets information and puts the phishing code in www.gumblar.cn into www.abc.com. When other people browse www.abc.com, their idendity will be stolen. www.gumblar.cn also contains malware. www.martuz.cn and www.38zu.cn also uses the Gumblar-style attack.

DSHIELD. High Risk Domain SANS Internet Storm Center re: http://www.dshield.org/tools/suspicious_domains.html alt: http://isc.sans.edu/suspicious_domains.html DNS: http://www.robtex.com/dns/gumblar.cn.html DNS: http://bgp.he.net/dns/gumblar.cn BEFORE requesting me to remove my ratings and comment ensure the domain has been removed from the source: re: http://www.dshield.org/feeds/suspiciousdomains_High.txt alt: http://isc.sans.edu/feeds/suspiciousdomains_High.txt