New scan:

Malware Scanner report for fhdohc.com.cn

Malicious/Suspicious/Total urls checked
0/11/33
11 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "fhdohc.com.cn" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=fhdohc.com.cn

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://fhdohc.com.cn/newslist/10nq4bm6000
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 00:08:08 GMT
Location: http://fhdohc.com.cn/newslist/10nq4bm6000/
Server: Microsoft-IIS/6.0
Content-Length: 165
Content-Type: text/html
clean
http://fhdohc.com.cn/newslist/10nq4bm6000/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:08 GMT
Accept-Ranges: bytes
ETag: "a822fcf9b421d01:234"
Server: Microsoft-IIS/6.0
Content-Length: 26581
Content-Location: http://fhdohc.com.cn/newslist/10nq4bm6000/index.html
Content-Type: text/html
Last-Modified: Sat, 27 Dec 2014 09:10:36 GMT
clean
http://fhdohc.com.cn/newslist/10nq4bm6000/index.html
200 OK
Content-Length: 26581
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[264 bytes skipped]...
¿¼ÈÕ±¾¸Å¿ö</title> <meta id="html_keywords" name="keywords" content="ÓðÌ濫¤¤Ÿo´aÁ÷³ö" /> <meta id="html_description" name="description" content="¡ïÅ®ÓÅÖÖ×Ó¡ïÓðÌ濫¤¤Ÿo´aÁ÷³ö|»»ÆÞÂÒÂ×ÁíÀàС˵|×Ô¿¼ÈÕ±¾¸Å¿ö" /> <meta http-equiv="Content-Type" content="text/html; charset=GB2312" /> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <link href="http://zhukong.0995114.net/quanjing/css/common_2626.css" rel="stylesheet" type="text/css" /> <link href="http://zhukong.0995114.net/quanjing/css/frameSetAD.css" rel="stylesheet" type="text/css" /> <link href="http://zhukong.0995114.net/quanjing/css/feature.css" rel="stylesheet" type="text/css" /> <style type="text/css"> html { overflow: scroll; overflow-x: hidden; overflow-x: auto !important; } .categor
...[3633 bytes skipped]...

http://js.users.51.la/17575514.js
200 OK
Content-Length: 1963
Content-Type: application/x-javascript
clean
http://js.17meiliba.com/bisha.js
200 OK
Content-Length: 240
Content-Type: application/x-javascript
clean
http://fhdohc.com.cn/Newslist
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 00:08:11 GMT
Location: http://fhdohc.com.cn/Newslist/
Server: Microsoft-IIS/6.0
Content-Length: 153
Content-Type: text/html
clean
http://fhdohc.com.cn/newslist/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:12 GMT
Accept-Ranges: bytes
ETag: "679c3de3a92ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 28644
Content-Location: http://fhdohc.com.cn/newslist/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 20:53:59 GMT
clean
http://fhdohc.com.cn/newslist/index.html
200 OK
Content-Length: 28644
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[913 bytes skipped]...
˾¡¢½ðÌÀ¹«Ë¾¡¢¹ÌÁú¹«Ë¾¡¢Ê¥Â¡´ï¹«Ë¾¡¢½ð³Ø±¦¹«Ë¾¡¢°²¹ãÃÀÉú¹«Ë¾×öÁË×°Ë®²»Â©²ÄÁÏϵÁл¯µÄËÜÁÏ°ü×°´ü£»Îª¸ßÐÂÔ°ÇøÖеÄÁªÏ빫˾¡¢ÁúÐ˹«Ë¾¡¢Ì©Ð˹«Ë¾£¬²¿¶ÓԺУ³Ð×öÁËÀñÆ·´ü¡¢Ê³Æ·´ü£»Óë×ܺó»ú¹Ø·þÎñ²¿£¬Àϸɲ¿¹ÜÀí¾Ö¡¢¹ú·À´óѧ¾üÐè·þÎñ²¿¡¢¼Óɽ¤Ê¤Ä¤³ ³õÀï qvodÈý0¾ÅÒ½ÔºµÈ¶à¼Òµ¥Î»½¨Á¢Á˳¤ÆÚºÏ×÷µÄÒµÎñ¹Øϵ¡£
" /> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <link href="http://zhukong.0995114.net/quanjing/css/base.css" rel="stylesheet" type="text/css" /> <style type="text/css"> html { overflow: scroll; overflow-x: hidden; overflow-x: auto !important; } .category{ width:470px; float:left; height:auto; overflow:hidden; border:1px solid #e2e2e2; margin-bottom:10px;}.category h4{ font-size:14px; font-family:"΢ÈíÑźÚ"; border-bottom:1px dotted #b9b9b9; padding-bottom:5px; margin:10px 10px 0px 10px; c
...[2870 bytes skipped]...

http://fhdohc.com.cn/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:14 GMT
Accept-Ranges: bytes
ETag: "0e312bce1dd01:234"
Server: Microsoft-IIS/6.0
Content-Length: 26700
Content-Location: http://fhdohc.com.cn/index.html
Content-Type: text/html
Last-Modified: Mon, 22 Dec 2014 09:59:58 GMT
clean
http://fhdohc.com.cn/index.html
200 OK
Content-Length: 26700
Content-Type: text/html
clean
http://fhdohc.com.cn/About/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:17 GMT
Accept-Ranges: bytes
ETag: "19e88e9622ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 50673
Content-Location: http://fhdohc.com.cn/About/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 12:25:54 GMT
clean
http://fhdohc.com.cn/about/index.html
200 OK
Content-Length: 50673
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[710 bytes skipped]...
.ĦÍгµÆøÃŵ¯»É.¿¨À­Å¤»É;ÀëºÏÆ÷µ¯»É.·§Ãŵ¯»ÉºÍ»úеÃÜ·â¼þÓõ¯»É¡£¹¤³§¾­¹ý½ü10Äê·¢Õ¹£¬ÒÑÓнϴóºÍ½ÏÇ¿µÄʵÁ¦£¬²¢È¡µÃÁ˽ϺõÄÒµ¼¨£¬2001Ä깤ҵ×ܲúÖµ3700ÍòÔª£¬¸ã×°ÃÀŮͼƬÏúÊÛÊÕÈë3000ÍòÔª£¬ÏÖÓй̶¨×ʽð2000ÍòÔª.¹¤³§ÒÑͨ¹ýGB/T19002-94ISO9002;94ÖÊÁ¿ÌåϵÈÏÖ¤¡£ÔÚͬÐÐÒµºÍÓû§ÖÐÓнϺõÄÐÅÓþºÍÖªÃû¶È. Èȳϻ¶Ó­º£ÄÚÍâÿһλ¿ÍÉÌ.ÐÂÀÏÅóÓÑÇ×ÁÙÃú½õ¹«Ë¾¿¼²ìÖ¸µ¼.Ãú½õÈËÒÔ·þÎñ£¬¹²Ä±·¢Õ¹¡£
" />
<link rel="stylesheet" type="text/css" href="http://zhukong.0995114.net/meili/css/index.css" />
<base target="_blank" />
</head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script>
<body>

<div class="pbb">
<div class="top1">
<div class="logo fl"><a href="http://fhdohc.com.cn/About/" tit
...[3440 bytes skipped]...

http://fhdohc.com.cn/Culture/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:19 GMT
Accept-Ranges: bytes
ETag: "b12ead2e452ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 49797
Content-Location: http://fhdohc.com.cn/Culture/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 08:53:06 GMT
clean
http://fhdohc.com.cn/culture/index.html
200 OK
Content-Length: 49797
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[476 bytes skipped]...
â·¿"/> <meta name="description" content="¶«±±ÎåÔÂÁíÀàС˵£¨fhdohc.com.cn/Culture£©±¾¹«Ë¾Ö÷ÒªÒÔÀñÆ·¡¢¹¤ÒÕÆ·µÄÏúÊÛΪÖ÷£¬¼æ×öÀñÒÇ·þÎñ¡£¹«Ñî˼Ãô°æÅ˽ðÁ«Ãâ·Ñ¹Û¿´Ë¾µÄ¾­ÓªÔ­ÔòÊÇÒÔ³ÏÐÅΪ±¾£¬ÔÚÔÚÎȶ¨ÖÐÇó·¢Õ¹¡£Ï£Íû¸úÕâ·½ÃæµÄ³§³£ÖÝÊÐÇå̶³ö×â·¿¼Ò¶à¶àºÏ×÷£¡
" /> <meta name="robots" content="noarchive"> <meta http-equiv="Cache-Control" content="no-transform" />
<link type="text/css" rel="stylesheet" href="http://zhukong.0995114.net/data/css/style.css" />
</head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script>
<body>
<div id="topbar">
<div id="container">×ð¾´µÄÍøÓÑ£¬»¶Ó­Äú·ÃÎʶ«±±ÎåÔÂÁíÀàС˵.</div>
</div>
<div id="container">

<d
...[3604 bytes skipped]...

http://fhdohc.com.cn/Culture
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 00:08:23 GMT
Location: http://fhdohc.com.cn/Culture/
Server: Microsoft-IIS/6.0
Content-Length: 152
Content-Type: text/html
clean
http://fhdohc.com.cn/culture/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:23 GMT
Accept-Ranges: bytes
ETag: "b12ead2e452ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 49797
Content-Location: http://fhdohc.com.cn/culture/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 08:53:06 GMT
clean
http://fhdohc.com.cn/test404page.js
404 Not Found
Content-Length: 1308
Content-Type: text/html
clean
http://fhdohc.com.cn/Career/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:25 GMT
Accept-Ranges: bytes
ETag: "92a0314aea30d01:234"
Server: Microsoft-IIS/6.0
Content-Length: 51317
Content-Location: http://fhdohc.com.cn/Career/index.html
Content-Type: text/html
Last-Modified: Thu, 15 Jan 2015 17:40:01 GMT
clean
http://fhdohc.com.cn/career/index.html
200 OK
Content-Length: 51317
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[205 bytes skipped]...
t;¡¾Ð£Ô°´ºÉ«¡¿vodÅ®º£µÁ,´ó×·²¶¿ì²¥ÔÚÏß,»ÆÉ«ÊÓÆÁ³ÉÈ˾çÇéƬ</title> <meta name="keywords" content="vodÅ®º£µÁ,´ó×·²¶¿ì²¥ÔÚÏß,»ÆÉ«ÊÓÆÁ³ÉÈ˾çÇéƬ" /> <MEtA http-equiv=Content-type content="text/html; charset=gb2312"> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> <link href="http://zhukong.0995114.net/ccg/css/style.css" rel="stylesheet" type="text/css" /> </head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script> <body> <div class="wrap"> <div class="clear blank10"></div> <div class="navi"><a href="/">Ê×Ò³</a>¡¡ÄúÏÖÔÚµÄλÖÃ: <a href="/Abou
...[3723 bytes skipped]...

http://fhdohc.com.cn/Info/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:28 GMT
Accept-Ranges: bytes
ETag: "152167da832ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 18862
Content-Location: http://fhdohc.com.cn/Info/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 16:21:43 GMT
clean
http://fhdohc.com.cn/info/index.html
200 OK
Content-Length: 18862
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[298 bytes skipped]...
gt;ÎåÔÂÌìÒùµ´½ã½ã|3dµçÓ°ÍøÕ¾´óÈ«|¿ì²¥³ÉÈËÍøվͼƬ¡ïͬÐÔÐÔ°®¡ï</title>
<meta name="keywords" content="ÎåÔÂÌìÒùµ´½ã½ã|3dµçÓ°ÍøÕ¾´óÈ«|¿ì²¥³ÉÈËÍøվͼƬ¡ïͬÐÔÐÔ°®¡ï" />
<meta name="description" content="ÎåÔÂÌìÒùµ´½ã½ã|3dµçÓ°ÍøÕ¾´óÈ«|¿ì²¥³ÉÈËÍøվͼƬ¡ïͬÐÔÐÔ°®¡ï" />
<meta name="robots" content="noarchive" />
<meta http-equiv="Cache-Control" content="no-transform" />
<link href="http://zhukong.0995114.net/qidian/css/style.css" rel="stylesheet" type="text/css" />
</head>

<script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script>
<script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script>


<body>
<div id="die_header">
<div class="head">
<div class="logo"><img src="http://zhukong.0
...[3780 bytes skipped]...

http://fhdohc.com.cn/contact/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:30 GMT
Accept-Ranges: bytes
ETag: "5f816e54532ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 50384
Content-Location: http://fhdohc.com.cn/contact/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 10:34:22 GMT
clean
http://fhdohc.com.cn/contact/index.html
200 OK
Content-Length: 50384
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[328 bytes skipped]...
vod,×îÐÂheyzo0608,btÖÖ×ÓËÑ»ÆÉñÆ÷</title> <meta name="keywords" content="ËÉÆéÖ¾½ò×Óqvod,×îÐÂheyzo0608,btÖÖ×ÓËÑ»ÆÉñÆ÷"/> <meta name="description" content="ËÉÆéÖ¾½ò×ÓqvodÓÐÏÞ¹«Ë¾Î»ÓÚÖйú ɽ¶« ¼ÃÄÏÊÐ »ú³¡Â·8ºÅ£¬×îÐÂheyzo0608Ö÷Òª¾­Óª»úƱ£¬
" /> <meta name="robots" content="noarchive"> <meta http-equiv="Cache-Control" content="no-transform" />
<link type="text/css" rel="stylesheet" href="http://zhukong.0995114.net/data/css/style.css" />
</head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script>
<body>
<div id="topbar">
<div id="container">×ð¾´µÄÍøÓÑ£¬»¶Ó­Äú·ÃÎÊËÉÆéÖ¾½ò×Óqvod.</div>
</div>
<div id="container">

<div
...[3784 bytes skipped]...

http://fhdohc.com.cn/contact
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 00:08:32 GMT
Location: http://fhdohc.com.cn/contact/
Server: Microsoft-IIS/6.0
Content-Length: 152
Content-Type: text/html
clean
http://fhdohc.com.cn/products/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:33 GMT
Accept-Ranges: bytes
ETag: "f9e18590af2ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 28653
Content-Location: http://fhdohc.com.cn/products/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 21:34:37 GMT
clean
http://fhdohc.com.cn/products/index.html
200 OK
Content-Length: 28653
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[901 bytes skipped]...
¾©Ð¹ú¼Ê»áÕ¹ÖÐÐÄ5¹«À¾àÊÐÇøÈý»·½ö30·ÖÖÓ³µ³Ì¡£¾ãÀÖ²¿ÄÚÁø´¹ºÉÂÌÓãÓΣ¬ÅäÓжȼپƵꡢ²ÍÒû¡¢´¹µöºÍ¹ÛÉͺÉÌÁ¡£450ĶÌÒ¡¢Àî¡¢ÐÓ¡¢ÆÏÌѲÉժ԰ΧÈÆÖܱߣ¬¿ÕÆøÇåУ¬¾°É«ÐãÀöÃÔÈË£¬ÊÇÃÀʳ¡¢¶È¼Ù¡¢ÐÝÏС¢ÓéÀÖµÄ×î¼ÑÑ¡Ôñ¡£¾ãÀÖ²¿Õ¼µØÆßÍòÓàƽ·½Ã×£¨100ÓàĶ£©£¬×ܽ¨ÖþÃæ»ý10,000Óàƽ·½Ã×£¬×ÜͶ×ÊÔ¼1500ÍòÔªÈËÃñ±Ò¡£
" /> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <link href="http://zhukong.0995114.net/quanjing/css/base.css" rel="stylesheet" type="text/css" /> <style type="text/css"> html { overflow: scroll; overflow-x: hidden; overflow-x: auto !important; } .category{ width:470px; float:left; height:auto; overflow:hidden; border:1px solid #e2e2e2; margin-bottom:10px;}.category h4{ font-size:14px; font-family:"΢ÈíÑźÚ"; border-bottom:1px dotted #b9b9b9; padding-bottom:5px; margin:10px 10px 0px 10px; c
...[2842 bytes skipped]...

http://fhdohc.com.cn/service/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:35 GMT
Accept-Ranges: bytes
ETag: "caa4cfa4ba30d01:234"
Server: Microsoft-IIS/6.0
Content-Length: 51297
Content-Location: http://fhdohc.com.cn/service/index.html
Content-Type: text/html
Last-Modified: Thu, 15 Jan 2015 11:58:58 GMT
clean
http://fhdohc.com.cn/service/index.html
200 OK
Content-Length: 51297
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[215 bytes skipped]...
ðþÑ÷Ôõô°ì|ÈËÌå½âÆÊѧÌîͼ|À°Ã·ÖÖ×ÓÔõôÖÖ¡ïÅ·ÃÀɫͼ¡ï</title> <meta name="keywords" content="ÉÙÅ®ÍâÒõðþÑ÷Ôõô°ì,ÈËÌå½âÆÊѧÌîͼ,À°Ã·ÖÖ×ÓÔõôÖÖ" /> <MEtA http-equiv=Content-type content="text/html; charset=gb2312"> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> <link href="http://zhukong.0995114.net/ccg/css/style.css" rel="stylesheet" type="text/css" /> </head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script> <body> <div class="wrap"> <div class="clear blank10"></div> <div class="navi"><a href="/">Ê×Ò³</a>¡¡ÄúÏÖÔÚµÄλÖÃ: <a href="/Abou
...[3703 bytes skipped]...

http://fhdohc.com.cn/business/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:39 GMT
Accept-Ranges: bytes
ETag: "4e30c53bdd30d01:234"
Server: Microsoft-IIS/6.0
Content-Length: 51424
Content-Location: http://fhdohc.com.cn/business/index.html
Content-Type: text/html
Last-Modified: Thu, 15 Jan 2015 16:06:34 GMT
clean
http://fhdohc.com.cn/business/index.html
200 OK
Content-Length: 51424
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[195 bytes skipped]...
lt;title>avÅ®ÓŲٱÆ|ºÝºÝÉ«Å®¶þÔÂ|ֶٵÄË¿ÍàСѨ¡¾Å®ÓÅÖÖ×Ó¡¿</title> <meta name="keywords" content="avÅ®ÓŲٱÆ,ºÝºÝÉ«Å®¶þÔÂ,ֶٵÄË¿ÍàСѨ" /> <MEtA http-equiv=Content-type content="text/html; charset=gb2312"> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> <link href="http://zhukong.0995114.net/ccg/css/style.css" rel="stylesheet" type="text/css" /> </head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script> <body> <div class="wrap"> <div class="clear blank10"></div> <div class="navi"><a href="/">Ê×Ò³</a>¡¡ÄúÏÖÔÚµÄλÖÃ: <a href="/Abou
...[3692 bytes skipped]...

http://fhdohc.com.cn/Newslist/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:41 GMT
Accept-Ranges: bytes
ETag: "679c3de3a92ed01:234"
Server: Microsoft-IIS/6.0
Content-Length: 28644
Content-Location: http://fhdohc.com.cn/Newslist/index.html
Content-Type: text/html
Last-Modified: Mon, 12 Jan 2015 20:53:59 GMT
clean
http://fhdohc.com.cn/show/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:42 GMT
Accept-Ranges: bytes
ETag: "58f6bdaedd30d01:234"
Server: Microsoft-IIS/6.0
Content-Length: 49908
Content-Location: http://fhdohc.com.cn/show/index.html
Content-Type: text/html
Last-Modified: Thu, 15 Jan 2015 16:09:47 GMT
clean
http://fhdohc.com.cn/show/index.html
200 OK
Content-Length: 49908
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhukong.0995114.net

...[219 bytes skipped]...
µçÓ°_qvodç±²¨ÓÅ_¿ì²¥³ÉÈËÎÞ²¡¶¾µçÓ°µ¼º½¡ï¿¨Í¨¶¯Âþ¡ï</title> <meta name="keywords" content="¿ì²¥ÔÚÏßÂÛÀíµçÓ°,qvodç±²¨ÓÅ,¿ì²¥³ÉÈËÎÞ²¡¶¾µçÓ°µ¼º½" /> <MEtA http-equiv=Content-type content="text/html; charset=gb2312"> <meta name="robots" content="noarchive" /> <meta http-equiv="Cache-Control" content="no-transform" /> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> <link href="http://zhukong.0995114.net/ccg/css/style.css" rel="stylesheet" type="text/css" /> </head> <script language="javascript" type="text/javascript" src="http://js.users.51.la/17575514.js"></script> <script language="javascript" type="text/javascript" src="http://js.17meiliba.com/bisha.js"></script> <body> <div class="wrap"> <div class="clear blank10"></div> <div class="navi"><a href="/">Ê×Ò³</a>¡¡ÄúÏÖÔÚµÄλÖÃ: <a href="/Abou
...[3712 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: fhdohc.com.cn

Result:
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 00:08:14 GMT
Accept-Ranges: bytes
ETag: "0e312bce1dd01:234"
Server: Microsoft-IIS/6.0
Content-Length: 26700
Content-Location: http://fhdohc.com.cn/index.html
Content-Type: text/html
Last-Modified: Mon, 22 Dec 2014 09:59:58 GMT

...26700 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: fhdohc.com.cn
Referer: http://www.google.com/search?q=fhdohc.com.cn

Result:
The result is similar to the first query. There are no suspicious redirects found.