New scan:

Malware Scanner report for 90900.com

Malicious/Suspicious/Total urls checked
1/1/9
2 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "90900.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
6/0/9
6 malicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=90900.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://90900.com/
200 OK
Content-Length: 70175
Content-Type: text/html
malicious
Page code contains blacklisted domain: www.90tif.com

<html>

<head>
<title>¾ÅýˆÀÏÅÆͼ¿â¡ªÓÀÔ¶ÁìÏÈ ÁùºÏ²Êͼ¿â Ì콫ͼ¿â 118ͼ¿â Ãâ·Ñͼ¿â Ì콫ͼ¿â Ì콫ͼԴ Ì콫ͼ°æ °ÙºÏͼ¿â ¹Ô¹Ôͼ¿â
168ͼ¿â ²Êɫͼ¿â ¾ÅÁúͼ¿â һƷÌÃͼ¿â www.90tif.com</title>
<script src="http://libs.baidu.com/jquery/1.9.1/jquery.min.js" type="text/javascript"></script>
<link rel="shortcut icon" href="favicon.ico" />
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta content="¾ÅýˆÀÏÅÆͼ¿â|ÁùºÏ²Êͼ¿â|Ì콫Ãâ·Ñͼ¿â|ӡˢͼ¿â|´óÐÍÃâ·Ñӡˢͼ¿â|ºì½ãͼ¿â|²Êɫͼ¿â|°×½ãͼ¿â|ºì½ãͼ¿â,ºì½ã²Êɫͼ¿â,ºì½ã

ͼ°æÉÌ»ã-ºì½ãͼ°æÉÌ-ͳһÍ
...[4133 bytes skipped]...

Malicious iFrame found.
size: 100x693     
src: http://www.90900.com/ggt.htm
This URL is marked by Google as suspicious

<iframe src="http://www.90900.com/ggt.htm" width="100%" marginwidth="0" height="693" marginheight="- 10" scrolling="no" frameborder="0" border="0" target="_blank" name="i8">

Malicious iFrame found.
size: 100x170     
src: http://www.90900.com/gg.htm
This URL is marked by Google as suspicious

<iframe src="http://www.90900.com/gg.htm" width="100%" marginwidth="0" height="170" marginheight="- 10" scrolling="no" frameborder="0" border="0" target="_blank" name="i13">

Malicious iFrame found.
size: 100x279     
src: http://www.90900.com/ggj.htm
This URL is marked by Google as suspicious

<iframe src="http://www.90900.com/ggj.htm" width="100%" marginwidth="0" height="279" marginheight="0" scrolling="no" frameborder="0" border="0" target="_blank" name="i10">

Malicious iFrame found.
size: 100x277     
src: http://ls.99tif.com:16899/kjtest.htm
This URL is marked by Google as suspicious

<iframe id="i12" border="0" name="i12" align="center" marginwidth="0" frameborder="0" width="100%" scrolling="no" height="277" target="_blank" src="http://ls.99tif.com:16899/kjtest.htm">

Malicious iFrame found.
size: 100x120     
src: http://www.90900.com/gg2.htm
This URL is marked by Google as suspicious

<iframe name="i1" src="http://www.90900.com/gg2.htm" target="_blank" width="100%" scrolling="no" border="0" frameborder="0" height="120">

Malicious iFrame found.
size: 100x282     
src: http://www.90900.com/ggjj.htm
This URL is marked by Google as suspicious

<iframe src="http://www.90900.com/ggjj.htm" width="100%" marginwidth="0" height="282" marginheight="0" scrolling="no" frameborder="0" border="0" target="_blank" name="i10">

http://libs.baidu.com/jquery/1.9.1/jquery.min.js
200 OK
Content-Length: 92629
Content-Type: application/x-javascript
clean
http://js.114fw.com/dagg/da001_jny.js?232588&1178066&id_90900
200 OK
Content-Length: 5666
Content-Type: application/x-javascript
clean
http://js.114fw.com/dagg/da000.js?232588&1178066&id_¾ÅÁúͼ¿â
200 OK
Content-Length: 7567
Content-Type: application/x-javascript
clean
http://www.90900.com/js/gg8.js
200 OK
Content-Length: 207
Content-Type: application/x-javascript
clean
http://count8.51yes.com/click.aspx?id=88013596&logo=1
200 OK
Content-Length: 1773
Content-Type: text/html
clean
http://count8.51yes.com/test404page.js
404 Not Found
Content-Length: 1308
Content-Type: text/html
clean
http://s0.qhimg.com/lib/jquery/183.js
500 timeout
Content-Length: 30
Content-Type: text/plain
clean
http://js.114fw.com/dagg/dzb_gg.js?232588&1178066&id_90900
200 OK
Content-Length: 44561
Content-Type: application/x-javascript
suspicious
Page code contains blacklisted domain: www.90900.com

var da000JsIdObj = document.getElementById("da000JsId");
var da000JsIdObjSrc = da000JsIdObj.src;
var da000JsIdObjSrcs = da000JsIdObjSrc.split("?");
var da000JsIdObjSrcParameters = da000JsIdObjSrcs[1].split("&");
var da000JsIdObjSrcIntr = da000JsIdObjSrcParameters[0];
var da000JsIdObjSrcQq = da000JsIdObjSrcParameters[1];
var da000JsIdObjSrcHostId = da000JsIdObjSrcParameters[2];
var da000JsIdObjSrcQqText = "°æÖ÷¼à¶
...[4050 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: 90900.com

Result:
HTTP/1.1 200 OK
Cache-Control: max-age=30
Connection: close
Date: Fri, 09 Jan 2015 09:04:41 GMT
Server: kangle/3.2.8
Content-Length: 70175
Content-Type: text/html
Last-Modified: Thu, 08 Jan 2015 13:59:08 GMT

...70175 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 90900.com
Referer: http://www.google.com/search?q=90900.com

Result:
The result is similar to the first query. There are no suspicious redirects found.