Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=666604.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://666604.com/ | 200 OK Content-Length: 132295 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.78111.com .xl-app a{background:url(images/pwicon/app-icon.png) no-repeat;} /*¹¤¾ßÀ¸*/ .startbar-ui{position:relative;height:24px;border:1px solid #87bcd8;border-bottom:0;background:#e1f2fa url(images/wind/h.png) repeat-x;} /*span color ÊýÖµ×Ô¶¨Òå*/ .black,.black a{color:#333} .s1{color:#008000;} /*ÂÌ*/ .s2{color:#984B98;} /*×Ï*/ .s3{color:#ff6600;} /*³È*/ .s4{color:#0033FF;} /*À¶*/ .s5{color:#659B28} /*dzÂÌ*/ ...[4501 bytes skipped]... Malicious iFrame found. The same iFrame was found in 7 websites. size: 100x730 src: http://www.78111.com/78lutou.htm This URL is marked by Google as suspicious <iframe allowtransparency='true' border=0 name=i1 align=center marginwidth=0 src='http://www.78111.com/78lutou.htm' frameborder=0 width=100% scrolling=no height=730' target="_blank"> Malicious iFrame found. size: 101x443 src: http://www.78111.com/bbs/db6666.htm This URL is marked by Google as suspicious <iframe allowtransparency='true' border=0 name=i1 align=center marginwidth=0 src='http://www.78111.com/bbs/db6666.htm' frameborder=0 width="101%" scrolling=no height=443 target="_blank"> | ||
http://666604.com/js/pw_ajax.js | 200 OK Content-Length: 6990 Content-Type: application/x-javascript | clean |
http://666604.com/js/Deploy.js | 200 OK Content-Length: 1912 Content-Type: application/x-javascript | clean |
http://count50.51yes.com/click.aspx?id=504592447&logo=1 | 200 OK Content-Length: 1777 Content-Type: text/html | clean |
http://count50.51yes.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://666604.com/js/global.js | 200 OK Content-Length: 10169 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 666604.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 29 Jan 2015 04:33:29 GMT
Server: Microsoft-IIS/7.5
Content-Length: 132295
Content-Type: text/html
Set-Cookie: fcf05_lastvisit=0%091422505830%09%2Findex.php%3F; expires=Fri, 29-Jan-2016 04:30:30 GMT; path=/
Set-Cookie: fcf05_lastpos=F; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_lastvisit=0%091422505650%09%2Findex.php%3F; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_threadlog=%2C2%2C; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_ol_offset=123578; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_ipstate=1422505650; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
X-Powered-By: PHP/5.2.17
X-Powered-By: ASP.NET
...132295 bytes of data.
GET / HTTP/1.1
Host: 666604.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 29 Jan 2015 04:33:29 GMT
Server: Microsoft-IIS/7.5
Content-Length: 132295
Content-Type: text/html
Set-Cookie: fcf05_lastvisit=0%091422505830%09%2Findex.php%3F; expires=Fri, 29-Jan-2016 04:30:30 GMT; path=/
Set-Cookie: fcf05_lastpos=F; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_lastvisit=0%091422505650%09%2Findex.php%3F; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_threadlog=%2C2%2C; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_ol_offset=123578; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
Set-Cookie: fcf05_ipstate=1422505650; expires=Fri, 29-Jan-2016 04:27:30 GMT; path=/
X-Powered-By: PHP/5.2.17
X-Powered-By: ASP.NET
...132295 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 666604.com
Referer: http://www.google.com/search?q=666604.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 666604.com
Referer: http://www.google.com/search?q=666604.com
Result:
The result is similar to the first query. There are no suspicious redirects found.