New scan:

Malware Scanner report for andyq.net

Malicious/Suspicious/Total urls checked
0/0/28
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/7/18
7 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://andyq.net/
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:09 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:09 GMT
Location: http://andyq.lofter.com/?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=3B8601481066BEC32FD72432D2E80A83.lofter0-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2F|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:09 GMT; Path=/
Set-Cookie: usertrack=ZUcIhFOPwkUQ01nzPiwlAg==; expires=Fri, 05-Jun-15 01:05:09 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/?mydomainr=true
200 OK
Content-Length: 26188
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://l.bst.126.net/rsc/js/jquery-1.6.2.min.js
200 OK
Content-Length: 91572
Content-Type: application/x-javascript
clean
http://l.bst.126.net/rsc/js/themecommon.js?0005
200 OK
Content-Length: 2224
Content-Type: application/x-javascript
clean
http://analytics.163.com/ntes.js
200 OK
Content-Length: 19465
Content-Type: application/x-javascript
clean
http://andyq.net/Page1
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:16 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/Page1
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/page1
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:17 GMT
Location: http://andyq.lofter.com/page1?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=68E757E1ED3183DA65FBC2C593379378.lofter1-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2Fpage1|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:17 GMT; Path=/
Set-Cookie: usertrack=ZUcIg1OPwk2XExDPRX7nAg==; expires=Fri, 05-Jun-15 01:05:17 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/page1?mydomainr=true
200 OK
Content-Length: 6007
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://l.bst.126.net/rsc/js/theme/r/pagephotoshow.min.js?0002
200 OK
Content-Length: 54020
Content-Type: application/x-javascript
clean
http://andyq.net/view
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:20 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/view
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/view
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:21 GMT
Location: http://andyq.lofter.com/view?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=0DAA362F15D260717529D9691D7A5F86.lofter0-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2Fview|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:21 GMT; Path=/
Set-Cookie: usertrack=ZUcIg1OPwlGYfxDWRQqfAg==; expires=Fri, 05-Jun-15 01:05:21 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/view?mydomainr=true
200 OK
Content-Length: 36383
Content-Type: text/html
clean
http://l.bst.126.net/s/core.js?3c0ba1a2c69e517f0b513ef1b8a8e42d
200 OK
Content-Length: 85348
Content-Type: application/x-javascript
clean
http://l.bst.126.net/s/pt_page_archive.js?9a2680513c3814f1bd4a9d5ea300f4b4
200 OK
Content-Length: 72906
Content-Type: application/x-javascript
clean
http://andyq.net/test404page.js
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:26 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/test404page.js
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/test404page.js
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:27 GMT
Location: http://andyq.lofter.com/test404page.js?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=D21910DBD57E58103A97F7EBA3FBA16B.lofter1-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2Ftest404page.js|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:27 GMT; Path=/
Set-Cookie: usertrack=ZUcIg1OPwleVIBDJQ+7DAg==; expires=Fri, 05-Jun-15 01:05:27 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/test404page.js?mydomainr=true
404 Not Found
Content-Length: 6036
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://andyq.lofter.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Thu, 05 Jun 2014 01:05:30 GMT
Location: http://andyq.net
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=B9E0DAE2256D56F3F81D34FDE76DFD9F.blog198-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fblogindex.do%3FloftBlogName%3Dandyq%26|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:30 GMT; Path=/
Set-Cookie: usertrack=ZUcIhFOPwloSS1n8PqyvAg==; expires=Fri, 05-Jun-15 01:05:30 GMT; domain=lofter.com; path=/
clean
http://andyq.net/rss
200 OK
Content-Length: 22736
Content-Type: text/xml
clean
http://andyq.net/post/112337_acd48a
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:33 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/post/112337_acd48a
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/post/112337_acd48a
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:34 GMT
Location: http://andyq.lofter.com/post/112337_acd48a?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=D3E8D333782512FBDFAFE0619D5AEE97.blog83-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2Fpost%2F112337_acd48a|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:34 GMT; Path=/
Set-Cookie: usertrack=ZUcIg1OPwl6WNxDNQ8lOAg==; expires=Fri, 05-Jun-15 01:05:34 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/post/112337_acd48a?mydomainr=true
200 OK
Content-Length: 8812
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://andyq.net/tag/Personal
200 OK
Content-Length: 13516
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://andyq.net/post/112337_abf8ac
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:38 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/post/112337_abf8ac
Server: nginx
Content-Length: 154
Content-Type: text/html
clean
http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/post/112337_abf8ac
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:38 GMT
Location: http://andyq.lofter.com/post/112337_abf8ac?mydomainr=true
Server: nginx
Content-Length: 0
Content-Type: text/html;charset=UTF-8
P3P: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID"
Set-Cookie: NTESLOFTSI=7FEAEA52339555E390828975BD3631FC.lofter1-8010; Domain=.www.lofter.com; Path=/
Set-Cookie: firstentry=%2Fmydomainr.do%3Fdomain%3Dandyq.net%26path%3D%2Fpost%2F112337_abf8ac|; Domain=.lofter.com; Expires=Fri, 06-Jun-2014 01:05:38 GMT; Path=/
Set-Cookie: usertrack=ZUcIg1OPwmKT1hDERLO3Ag==; expires=Fri, 05-Jun-15 01:05:38 GMT; domain=lofter.com; path=/
clean
http://andyq.lofter.com/post/112337_abf8ac?mydomainr=true
200 OK
Content-Length: 10566
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >

http://andyq.net/post/112337_aaf32c
200 OK
Content-Length: 11461
Content-Type: text/html
suspicious
Hidden iFrame found.
style: hidden
src: http://l.bst.126.net/rsc/htm/music.html

<iframe style="display:none" src="http://l.bst.126.net/rsc/htm/music.html" >


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: andyq.net

Result:
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Thu, 05 Jun 2014 01:05:09 GMT
Location: http://www.lofter.com/mydomainr.do?domain=andyq.net&path=/
Server: nginx
Content-Length: 154
Content-Type: text/html

...154 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: andyq.net
Referer: http://www.google.com/search?q=andyq.net

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=andyq.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://andyq.net/

Result: andyq.net is not infected or malware details are not published yet.