Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=900jpg.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: casa-purgatorio.de
Result:
GET / HTTP/1.1
Host: casa-purgatorio.de
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: casa-purgatorio.de
Referer: http://www.google.com/search?q=casa-purgatorio.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: casa-purgatorio.de
Referer: http://www.google.com/search?q=casa-purgatorio.de
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.900jpg.com/ | HTTP/1.1 301 Moved Permanently Connection: close Location: http://www.90900.com Server: kangle/3.2.8 | malicious |
http://www.90900.com/ | 200 OK Content-Length: 70175 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.90tif.com <html>
<head> <title>¾ÅýÀÏÅÆͼ¿â¡ªÓÀÔ¶ÁìÏÈ ÁùºÏ²Êͼ¿â Ì콫ͼ¿â 118ͼ¿â Ãâ·Ñͼ¿â Ì콫ͼ¿â Ì콫ͼԴ Ì콫ͼ°æ °ÙºÏͼ¿â ¹Ô¹Ôͼ¿â 168ͼ¿â ²Êɫͼ¿â ¾ÅÁúͼ¿â һƷÌÃͼ¿â www.90tif.com</title> <script src="http://libs.baidu.com/jquery/1.9.1/jquery.min.js" type="text/javascript"></script> <link rel="shortcut icon" href="favicon.ico" /> <meta http-equiv="Content-Type" content="text/html; charset=gb2312"> <meta content="¾ÅýÀÏÅÆͼ¿â|ÁùºÏ²Êͼ¿â|Ì콫Ãâ·Ñͼ¿â|ӡˢͼ¿â|´óÐÍÃâ·Ñӡˢͼ¿â|ºì½ãͼ¿â|²Êɫͼ¿â|°×½ãͼ¿â|ºì½ãͼ¿â,ºì½ã²Êɫͼ¿â,ºì½ã ͼ°æÉÌ»ã-ºì½ãͼ°æÉÌ-Í³Ò»Í ...[4133 bytes skipped]... Malicious iFrame found. size: 100x277 src: http://ls.99tif.com:16899/kjtest.htm This URL is marked by Google as suspicious <iframe id="i12" border="0" name="i12" align="center" marginwidth="0" frameborder="0" width="100%" scrolling="no" height="277" target="_blank" src="http://ls.99tif.com:16899/kjtest.htm"> | ||
http://libs.baidu.com/jquery/1.9.1/jquery.min.js | 200 OK Content-Length: 92629 Content-Type: application/x-javascript | clean |
http://js.114fw.com/dagg/da001_jny.js?232588&1178066&id_90900 | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://js.114fw.com/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://js.114fw.com/dagg/da000.js?232588&1178066&id_¾ÅÁúͼ¿â | 200 OK Content-Length: 7567 Content-Type: application/x-javascript | clean |
http://www.90900.com/js/gg8.js | 200 OK Content-Length: 207 Content-Type: application/x-javascript | clean |
http://count8.51yes.com/click.aspx?id=88013596&logo=1 | 200 OK Content-Length: 1773 Content-Type: text/html | clean |
http://s0.qhimg.com/lib/jquery/183.js | 200 OK Content-Length: 93565 Content-Type: application/x-javascript | clean |
http://js.114fw.com/dagg/dzb_gg.js?232588&1178066&id_90900 | 200 OK Content-Length: 41978 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: www.90900.com ...[1753 bytes skipped]... ±µØׯ¼ÒÅÜ·¡¢È¡¿îÂý¡¢±¶ÂʵÍ...<font color="#FF0000">¡¶°ÄÃÅ´ó×ʱ¾¡·È¡¿î1000Íò30Ãëµ½ÕÊ£¬¶ÄÍõºÎºèö100ÒÚÔ죬ÌØÂë47.2±¶+0.4%·µË®¡£</font></a>')+ ('<a href="'+sUrl+'" target="_blank" title="µã»÷¼ÓÈë" class="g-ib g_icon btn download" style="background:url(http://js.114fw.com/dagg/images/jiaru_btn.png) no-repeat"></a>')+ ('</div></div>'); $("body").prepend(sCss+sHtml)p://www.90900.com/" target="_blank">¾ÅÁúÀÏÅÆͼ¿â</a></li>' + '<li><a title="µã»÷½øÈë" href="http://www.390ff.com/" target="_blank">¾ÅÁú¹ÒÅÆͼ¿â</a></li>' + '<li><a title="µã»÷½øÈë" href="http://www.114ls.com/" target="_blank">114ͼ¿â</a></li></ul>' + '<div class="daohang"><a>¾«Æ·×ÊÁÏ£º</a></div>' + '<ul><li><a title="µã»÷½øÈë" href= ...[2100 bytes skipped]... |