Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=90900.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://90900.com/ | 200 OK Content-Length: 70175 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.90tif.com <html>
<head> <title>¾ÅýÀÏÅÆͼ¿â¡ªÓÀÔ¶ÁìÏÈ ÁùºÏ²Êͼ¿â Ì콫ͼ¿â 118ͼ¿â Ãâ·Ñͼ¿â Ì콫ͼ¿â Ì콫ͼԴ Ì콫ͼ°æ °ÙºÏͼ¿â ¹Ô¹Ôͼ¿â 168ͼ¿â ²Êɫͼ¿â ¾ÅÁúͼ¿â һƷÌÃͼ¿â www.90tif.com</title> <script src="http://libs.baidu.com/jquery/1.9.1/jquery.min.js" type="text/javascript"></script> <link rel="shortcut icon" href="favicon.ico" /> <meta http-equiv="Content-Type" content="text/html; charset=gb2312"> <meta content="¾ÅýÀÏÅÆͼ¿â|ÁùºÏ²Êͼ¿â|Ì콫Ãâ·Ñͼ¿â|ӡˢͼ¿â|´óÐÍÃâ·Ñӡˢͼ¿â|ºì½ãͼ¿â|²Êɫͼ¿â|°×½ãͼ¿â|ºì½ãͼ¿â,ºì½ã²Êɫͼ¿â,ºì½ã ͼ°æÉÌ»ã-ºì½ãͼ°æÉÌ-Í³Ò»Í ...[4133 bytes skipped]... Malicious iFrame found. size: 100x693 src: http://www.90900.com/ggt.htm This URL is marked by Google as suspicious <iframe src="http://www.90900.com/ggt.htm" width="100%" marginwidth="0" height="693" marginheight="-
10" scrolling="no" frameborder="0" border="0" target="_blank" name="i8"> Malicious iFrame found. size: 100x170 src: http://www.90900.com/gg.htm This URL is marked by Google as suspicious <iframe src="http://www.90900.com/gg.htm" width="100%" marginwidth="0" height="170" marginheight="-
10" scrolling="no" frameborder="0" border="0" target="_blank" name="i13"> Malicious iFrame found. size: 100x279 src: http://www.90900.com/ggj.htm This URL is marked by Google as suspicious <iframe src="http://www.90900.com/ggj.htm" width="100%" marginwidth="0" height="279" marginheight="0" scrolling="no" frameborder="0" border="0" target="_blank" name="i10"> Malicious iFrame found. size: 100x277 src: http://ls.99tif.com:16899/kjtest.htm This URL is marked by Google as suspicious <iframe id="i12" border="0" name="i12" align="center" marginwidth="0" frameborder="0" width="100%" scrolling="no" height="277" target="_blank" src="http://ls.99tif.com:16899/kjtest.htm"> Malicious iFrame found. size: 100x120 src: http://www.90900.com/gg2.htm This URL is marked by Google as suspicious <iframe name="i1" src="http://www.90900.com/gg2.htm" target="_blank" width="100%" scrolling="no" border="0" frameborder="0" height="120"> Malicious iFrame found. size: 100x282 src: http://www.90900.com/ggjj.htm This URL is marked by Google as suspicious <iframe src="http://www.90900.com/ggjj.htm" width="100%" marginwidth="0" height="282" marginheight="0" scrolling="no" frameborder="0" border="0" target="_blank" name="i10"> | ||
http://libs.baidu.com/jquery/1.9.1/jquery.min.js | 200 OK Content-Length: 92629 Content-Type: application/x-javascript | clean |
http://js.114fw.com/dagg/da001_jny.js?232588&1178066&id_90900 | 200 OK Content-Length: 5666 Content-Type: application/x-javascript | clean |
http://js.114fw.com/dagg/da000.js?232588&1178066&id_¾ÅÁúͼ¿â | 200 OK Content-Length: 7567 Content-Type: application/x-javascript | clean |
http://www.90900.com/js/gg8.js | 200 OK Content-Length: 207 Content-Type: application/x-javascript | clean |
http://count8.51yes.com/click.aspx?id=88013596&logo=1 | 200 OK Content-Length: 1773 Content-Type: text/html | clean |
http://count8.51yes.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://s0.qhimg.com/lib/jquery/183.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://js.114fw.com/dagg/dzb_gg.js?232588&1178066&id_90900 | 200 OK Content-Length: 44561 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: www.90900.com var da000JsIdObj = document.getElementById("da000JsId");
var da000JsIdObjSrc = da000JsIdObj.src; var da000JsIdObjSrcs = da000JsIdObjSrc.split("?"); var da000JsIdObjSrcParameters = da000JsIdObjSrcs[1].split("&"); var da000JsIdObjSrcIntr = da000JsIdObjSrcParameters[0]; var da000JsIdObjSrcQq = da000JsIdObjSrcParameters[1]; var da000JsIdObjSrcHostId = da000JsIdObjSrcParameters[2]; var da000JsIdObjSrcQqText = "°æÖ÷¼à¶ ...[4050 bytes skipped]... |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 90900.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=30
Connection: close
Date: Fri, 09 Jan 2015 09:04:41 GMT
Server: kangle/3.2.8
Content-Length: 70175
Content-Type: text/html
Last-Modified: Thu, 08 Jan 2015 13:59:08 GMT
...70175 bytes of data.
GET / HTTP/1.1
Host: 90900.com
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=30
Connection: close
Date: Fri, 09 Jan 2015 09:04:41 GMT
Server: kangle/3.2.8
Content-Length: 70175
Content-Type: text/html
Last-Modified: Thu, 08 Jan 2015 13:59:08 GMT
...70175 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 90900.com
Referer: http://www.google.com/search?q=90900.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 90900.com
Referer: http://www.google.com/search?q=90900.com
Result:
The result is similar to the first query. There are no suspicious redirects found.