Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=90885.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.90885.com/ | 200 OK Content-Length: 281640 Content-Type: text/html | malicious |
Page code contains blacklisted domain: 90444.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Language" content="zh-cn"> <meta http-equiv=X-UA-Compatible content=IE=EmulateIE7> <meta http-equiv="Content-Type" content="text/html; charset=gb2312"> <title>90444.comÁùºÏÉñËã¸ßÊÖÂÛ̳|Ïã¸ÛÁùºÏ²Ê:ÌṩÁùºÏ²Ê¿ª½±½á¹û|ÏÖ³¡Ö±²¥¿ª½±¼Ç¼|ÁùºÏ²Êͼ¿âÍøÕ¾|</title> <meta name="keywords" content="Ïã¸ÛÁùºÏ,ÁùºÏ¿ª½±,ÁùºÏ×ÊÁÏ,Ïã¸ÛÁùºÏ¿ª½±½á¹û,ÁùºÏͼ¿â,ÁùºÏÍøÕ¾,ÁùºÏ¿ª½±¼Ç¼,Ïã¸ÛÁùºÏ¹«Ë¾,ÁùºÏÍøÖ·,ÁùºÏͼ,Ïã¸ÛÁùºÏ¿ª½±,ÁùºÏÌØÂë,Ïã¸ÛÁùºÏ¿ª½±¼Ç¼,ÁùºÏÏÖ³¡Ö±²¥,ÁùºÏ¿ª½±ºÅÂë,ÁùºÏÖ±²¥,Ïã¸ÛÁùºÏÍøÕ¾,Ïã¸ÛÁùºÏÂÛ̳,ÁùºÏ¹Ù·½Íø,ÁùºÏÏÖ³¡,ÁùºÏ¹«Ë¾,ÁùºÏ¹Ü¼ÒÆÅ,ÁùºÏ°×С½ã,Ïã¸ÛÁùºÏÍøÖ·¡£"> <META NAME="description" CONT ...[3460 bytes skipped]... Malicious iFrame found. size: 100x2181 src: http://www.90444.com/888.htm This URL is marked by Google as suspicious <iframe name="i1" marginwidth="3" marginheight="0" frameborder="0" width="100%" scrolling="no" height="2181" src="http://www.90444.com/888.htm" target="_blank" align="left"> | ||
http://www.90885.com/zl.js | 200 OK Content-Length: 14158 Content-Type: application/x-javascript | malicious |
Malicious code found. Script contains blacklisted domain: 90444.com document.writeln("<head>");
document.writeln("<meta http-equiv=\"Content-Type\" content=\"text\/html; charset=gb2312\">"); document.writeln("<meta http-equiv=X-UA-Compatible content=IE=EmulateIE7> "); document.writeln("<\/head>"); document.writeln(""); document.writeln(" <div align=\"center\">"); document.writeln(" <a target=\"_blank\" title=\"[»Æº×Â¥¶Ä³¡]´ó¶îÎÞÓÇ.¼ò½é:1.Ïã¸ÛÈü ...[4020 bytes skipped]... Decoded script: ...[5582 bytes skipped]... Ìå" size="3" style="margin: 0; padding: 0; word-wrap:break-word; font-size:14pt" color="#FF0000"><img border="0" src="http://www.46672.com/images/ert.gif" width="8" height="8"></font></span><font face="ËÎÌå" size="3" style="margin: 0; padding: 0"><span style="margin:0; padding:0; FONT-WEIGHT: 700; TEXT-DECORATION: none"><font color="#0000FF" style="margin:0; padding:0; word-wrap: break-word; " size="3">90444.com</font></span></font></b></p> </td> </tr> </table> </td> <td style="margin:0; padding:0; FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY: ËÎÌå; font-style:normal" width="23%" height="84"> <table id="table400901128" height="80" cellspacing="1" width="99%" bgcolor="#ffffff" border="0" style="margin:0; padding:0; font-size: 10pt; color: #000000; cursor:default"> <tr s ...[5798 bytes skipped]... | ||
http://count10.51yes.com/click.aspx?id=103822619&logo=11 | 200 OK Content-Length: 1778 Content-Type: text/html | clean |
http://count10.51yes.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://count33.51yes.com/click.aspx?id=338480475&logo=12 | 200 OK Content-Length: 1694 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 90885.com
Result:
GET / HTTP/1.1
Host: 90885.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: 90885.com
Referer: http://www.google.com/search?q=90885.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 90885.com
Referer: http://www.google.com/search?q=90885.com
Result:
The result is similar to the first query. There are no suspicious redirects found.