Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=cs-baidu.cn
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://cs-baidu.cn/ | 200 OK Content-Length: 22892 Content-Type: text/html | clean |
http://cs-baidu.cn/js/jquery.min.js | 200 OK Content-Length: 91556 Content-Type: application/x-javascript | clean |
http://js.users.51.la/14970148.js | 200 OK Content-Length: 1980 Content-Type: application/x-javascript | clean |
http://code.54kefu.net/kefu/js/52/376452.js | 200 OK Content-Length: 499 Content-Type: application/x-javascript | clean |
http://cs-baidu.cn/admin/jqqonline.js | 200 OK Content-Length: 296 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<script language="javascript" src="/baidu2/admin/top.js"></script>');
document.write('<script language="javascript" src="http://webpresence.qq.com/getonline?Type=1&52343797:"></script>'); document.write('<script language="javascript" src="/baidu2/admin/bottom.js"></script>'); Antivirus reports:
| ||
http://cs-baidu.cn/index.asp | 200 OK Content-Length: 22892 Content-Type: text/html | clean |
http://cs-baidu.cn/news.asp | 200 OK Content-Length: 19005 Content-Type: text/html | clean |
http://cs-baidu.cn/news_list.asp?id=7 | 200 OK Content-Length: 17069 Content-Type: text/html | clean |
http://cs-baidu.cn/news_list.asp?id=8 | 200 OK Content-Length: 17521 Content-Type: text/html | clean |
http://cs-baidu.cn/news_list.asp?id=9 | 200 OK Content-Length: 18028 Content-Type: text/html | clean |
http://cs-baidu.cn/news_list.asp?id=10 | 200 OK Content-Length: 16674 Content-Type: text/html | clean |
http://cs-baidu.cn/baidu.asp | 200 OK Content-Length: 16252 Content-Type: text/html | clean |
http://cs-baidu.cn/service.asp | 200 OK Content-Length: 33412 Content-Type: text/html | clean |
http://cs-baidu.cn/huobao.asp | 200 OK Content-Length: 16801 Content-Type: text/html | clean |
http://cs-baidu.cn/weibo.asp | 200 OK Content-Length: 15017 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: cs-baidu.cn
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Mon, 22 Dec 2014 07:32:45 GMT
Server: Microsoft-IIS/6.0
Content-Length: 22892
Content-Type: text/html
Set-Cookie: ASPSESSIONIDQQASDATT=DKCBDAODBMNHOMLJAFDGMCBP; path=/
X-Powered-By: ASP.NET
...22892 bytes of data.
GET / HTTP/1.1
Host: cs-baidu.cn
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Mon, 22 Dec 2014 07:32:45 GMT
Server: Microsoft-IIS/6.0
Content-Length: 22892
Content-Type: text/html
Set-Cookie: ASPSESSIONIDQQASDATT=DKCBDAODBMNHOMLJAFDGMCBP; path=/
X-Powered-By: ASP.NET
...22892 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: cs-baidu.cn
Referer: http://www.google.com/search?q=cs-baidu.cn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: cs-baidu.cn
Referer: http://www.google.com/search?q=cs-baidu.cn
Result:
The result is similar to the first query. There are no suspicious redirects found.