Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=fffb.info
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: fffb.info
Result:
HTTP/1.1 200 OK
Date: Tue, 13 Jan 2015 20:53:52 GMT
Accept-Ranges: bytes
ETag: "901fd258e7adcf1:6bd9e"
Server: Microsoft-IIS/6.0
Content-Length: 17602
Content-Location: http://fffb.info/index.htm
Content-Type: text/html
Last-Modified: Sat, 02 Aug 2014 00:18:55 GMT
X-Powered-By: ASP.NET
...17602 bytes of data.
GET / HTTP/1.1
Host: fffb.info
Result:
HTTP/1.1 200 OK
Date: Tue, 13 Jan 2015 20:53:52 GMT
Accept-Ranges: bytes
ETag: "901fd258e7adcf1:6bd9e"
Server: Microsoft-IIS/6.0
Content-Length: 17602
Content-Location: http://fffb.info/index.htm
Content-Type: text/html
Last-Modified: Sat, 02 Aug 2014 00:18:55 GMT
X-Powered-By: ASP.NET
...17602 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: fffb.info
Referer: http://www.google.com/search?q=fffb.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: fffb.info
Referer: http://www.google.com/search?q=fffb.info
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://fffb.info/ | HTTP/1.1 200 OK Date: Tue, 13 Jan 2015 20:53:52 GMT Accept-Ranges: bytes ETag: "901fd258e7adcf1:6bd9e" Server: Microsoft-IIS/6.0 Content-Length: 17602 Content-Location: http://fffb.info/index.htm Content-Type: text/html Last-Modified: Sat, 02 Aug 2014 00:18:55 GMT X-Powered-By: ASP.NET | clean |
http://fffb.info/index.htm | 200 OK Content-Length: 17602 Content-Type: text/html | clean |
http://www.tnmbx01.com/iclk/?zoneid=88485&uid=30691 | HTTP/1.1 302 Found Cache-Control: no-cache, must-revalidate Connection: close Date: Tue, 13 Jan 2015 20:49:50 GMT Location: http://xiu.jianting.net/jht/Happy88_B040_530691.exe Server: nginx/1.0.15 Content-Length: 0 Content-Type: text/html Expires: Mon, 26 Jul 1997 05:00:00 GMT Last-Modified: Tue, 13 Jan 2015 20:49:50 GMT P3P: CP="Powered by Www.Zyiis.Com 2005-2010" Pramga: no-cache Set-Cookie: cpa_key=NzguMTU4LjExLjIyNnwzMDY5MXwxNzE4fDE3OTE4fDg4NDg1fDE2fHww%3B40c59e10bd8339e99b8a8284146cec2d; expires=Thu, 12-Feb-2015 20:49:50 GMT; path=/ Set-Cookie: 30691_622=www.zyiis.com; expires=Wed, 14-Jan-2015 20:49:50 GMT; path=/ X-Powered-By: PHP/5.2.17p1 | clean |
http://xiu.jianting.net/jht/happy88_b040_530691.exe | HTTP/1.1 302 Found Cache-Control: private Date: Tue, 13 Jan 2015 20:53:56 GMT Location: http://jh.01lm.com/ktv/9158chat_ktv099_6.exe Server: Microsoft-IIS/6.0 Content-Length: 853 Content-Type: text/html; charset=utf-8 Set-Cookie: ASP.NET_SessionId=30uyown32hyduk55tkf3vcjo; path=/; HttpOnly X-AspNet-Version: 2.0.50727 X-Powered-By: ASP.NET | clean |
http://jh.01lm.com/ktv/9158chat_ktv099_6.exe | 200 OK Content-Length: 301265 Content-Type: application/octet-stream | clean |
http://jh.01lm.com/test404page.js | 404 Not Found Content-Length: 345 Content-Type: text/html | clean |