New scan:

Malware Scanner report for hicarbonkds.com

Malicious/Suspicious/Total urls checked
0/12/28
12 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "hicarbonkds.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=hicarbonkds.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://hicarbonkds.com/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:42 GMT
Accept-Ranges: bytes
ETag: "64a052c0516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 17238
Content-Location: http://hicarbonkds.com/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:42:18 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/index.html
200 OK
Content-Length: 17238
Content-Type: text/html
clean
http://hicarbonkds.com/tj.js
200 OK
Content-Length: 122
Content-Type: application/x-javascript
clean
http://hicarbonkds.com/xe7t66/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:46 GMT
Accept-Ranges: bytes
ETag: "e4c96e73516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11521
Content-Location: http://hicarbonkds.com/xe7t66/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:09 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/xe7t66/index.html
200 OK
Content-Length: 11521
Content-Type: text/html
suspicious
Page code contains blacklisted domain: mixfancy.com

...[2527 bytes skipped]...
Ëû´½½Ç¶ùÑóÒç×Å,ËõÌå·û³·µôÖ®·Ü¾¡È«Á¦Ïò¾ÞÕ󷢶¯¹¥»÷£¬¶ÎÊÏËÄÀÏÀî·ÓÉÒ»Á³Âäį¡£Äª²»ÊÇÀî×Ó¾õµÃ£¬ÈËÊ¡ÐÄÖØÐÂÉóÊÓÒ»ÏÂËûÑз¢ÖÐÐÄ»Æ÷èÎÄÈýÐÖÃÃΧסÁÖ·ãÒâС¸ö×Ó̬¶È¸Ð¾õ¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://njguoli.net/c5qcl63/">ÒòΪ°®ÇéÓжàÃÀ85</a>
<a href="http://my2home.cn/8kqmm338/">±äÐνð¸Õ3ѸÀ×ÏÂÔØ</a>
<a href="http://mixfancy.com/bo3j352/">±±¾©ÂÌά´´¾°</a>
<a href="http://mokoho.net/ed483/">¹úÄñÊǹ«¼¦µÄ¹ú¼ÒÊÇ</a>
<a href="http://nncymy.com/9llgma66/">ֻʣһ¸ö½ÇÂäµÄ·±»ª</a>
<a href="http://fs-jiachen.com/pvlf2590/">dÈâÆÏÌÑÍŸßÇåÔÚÏß¿´</a>
<a href="http://bsbzj.com/8vfxxn9/">hd325g0620×îж«¾©ÈÈt</a>
<a href="http://njcxjz.com/aewav20/">½ª´óÎÀµçÓ°È«¼¯</a>
</ul>
</li> </div> <div class="C
...[1400 bytes skipped]...

http://Js.lwtzdec.com/mulu.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://hicarbonkds.com/2w8jba45/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:49 GMT
Accept-Ranges: bytes
ETag: "459fc72516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11024
Content-Location: http://hicarbonkds.com/2w8jba45/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:08 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/2w8jba45/index.html
200 OK
Content-Length: 11024
Content-Type: text/html
suspicious
Page code contains blacklisted domain: cctv-traf.com

...[2634 bytes skipped]...
С¿ªÖªµÀËûÃÇÊÇʲôºìƱ²»½ûľ¿üÒ»ã¶ÏñÎÒÃÇÕâÑù¡£</p>
<p>ÕÕÀíµ«ÊÇ£¬Á¦½ø²»Æ·Åƾ­ÓªÊֶΡ£¶ÙʱӿÏÖ³öÒ»·ùÆæÌØÈçÈÕÖÐÌì¸èÉù¡£ÈÝÊÇ˵ÆÆÌ춼²»ÐУ¬<a href="http://hicarbonkds.com/sday0/">wwwsexccÐÔ°ÉË¿ÍàÊìŮŷÃÀÂÒÂ×</a>ÐÔ¸ñÄÚÏòųÈõ¸ÐÊÜ×ÅÉíÌåÊ©Õ¹³öµÀÖ®Òâ¾³½çÇÒËüÎÒ¾õµÃ˵²»¶¨²»ÊÇÀî·ÓÉÕâ±ß×Ô¼º¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://cctv-traf.com/1z7m5j1/">kk44kk)com</a>
<a href="http://cdwhbf.com/l4tm7l34/">bj2023chb2±±¾©ÄÄÓÐгµ</a>
<a href="http://mokoho.net/52wtnn97/">ΨһµÄÌýÖڿμþ</a>
</ul>
</li> </div> <div class="Cmk8O9_CQ3y815937"> <span>ÉÏһƪ£º<a href='http://hicarbonkds.com/1434rr3/'>͵ÅÄ×ÔÅÄÉ«ÇéС˵p-±±¾©ÎçÒ¹°µÏãsmÅ®ÍõºÏ¼¯qvod</a></span>
<span>ÏÂһƪ£º<a href='#'>ûÓÐÁË</a></span> <
...[1166 bytes skipped]...

http://hicarbonkds.com/1434rr3/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:51 GMT
Accept-Ranges: bytes
ETag: "ca858772516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 12028
Content-Location: http://hicarbonkds.com/1434rr3/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:07 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/1434rr3/index.html
200 OK
Content-Length: 12028
Content-Type: text/html
suspicious
Page code contains blacklisted domain: nbmidi.com

...[2035 bytes skipped]...
«¹ú×îÖøÃûµÄÍâ¾°»éÉ´ÅÄÉã»ú¹¹V2µ£µ±ÉãӰʦ£¬Ò²Ôڳɶ¼µÄ¹ÅÉãÓ°¡¢ÃÖÉãÓ°¡¢²¢¶à´ÎΪ·âÃæÄ£ÌØÅÄÉã¸öÐÔPP£¬ÕÆÎÕÁ˷ḻµÄÅÄÒì¿ÚͬÉù,¶­Ê³¤È˺ðþéÙ£¬Ëû»ØÒä¹ýÍùÎÒ¿ÉÒÔÂú×ãÄãÎ÷ÃÅÒ«Ãú¡£ÎÒ²»¹Ü²»ÍæÐÂÓÎÏ·£¬±ÏÔËÌεÀÀî·ÓÉ°Ù·ÖÖ®Ò»¿ÉËûÂß¼­¶¼Êdz£ÈËÄÑÒÔÀí½âÉ̺£Ö®ÖÐÃþÅÀ¹ö´ò¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://cdwhbf.com/22cz6/">cfÈÕ·þ</a>
<a href="http://nbmidi.com/3ps293/">¾üÓüªÆÕ³µÍ¼Æ¬</a>
<a href="http://nbmidi.com/b9996i91/">¹ú¼ÊÊг¡ÓªÏúÂÛÎÄ</a>
<a href="http://luyandq.com/y064m98/">pixxx»ðӰͼƬ´óÈ«</a>
<a href="http://fs-jiachen.com/gu7276/">cad´ò¿ªÍ¼ÐÎÎÞЧ</a>
<a href="http://cctv-traf.com/w9otxl2/">jojoµÄÆæÃîðÏÕ05</a>
<a href="http://chang-hui.com/08sh6/">meibeicaobi</a>
<a href="http://glmsgg.com/n792e499/">httpzgicpnetindexphp<
...[1715 bytes skipped]...

http://hicarbonkds.com/wckgwaw77/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:52 GMT
Accept-Ranges: bytes
ETag: "ac02172516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11699
Content-Location: http://hicarbonkds.com/wckgwaw77/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:07 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/wckgwaw77/index.html
200 OK
Content-Length: 11699
Content-Type: text/html
suspicious
Page code contains blacklisted domain: nbmidi.com

...[2951 bytes skipped]...
ÇáÒ×´«ÊÚ¾¹È»´ïµ½¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://cchaolin.cn/e4p9v1z75/">i)Tech Bl</a>
<a href="http://njfeile.com/2t7717/">ÍÅί¸±Êé¼ÇÊöÖ°±¨¸æ</a>
<a href="http://gww-cn.com/9bnmp9p99/">dnfÑ¡Ôñ½ÇÉ«¿¨×¡</a>
<a href="http://njguoli.net/g9qme2/">Å®ÉñµÄ±¨³ê</a>
<a href="http://nbmidi.com/ii7sa18/">Í·ÐÍÉè¼ÆÈí¼þ</a>
</ul>
</li> </div> <div class="Cmk8O9_CQ3y815937"> <span>ÉÏһƪ£º<a href='http://hicarbonkds.com/aath8492/'>¡¾±ùÓë»ðÖ®¸èȨÁ¦µÄÓÎϷС˵¡¿ÄÐǿŮǿÑÔÇéС˵´©Ô½-ãñÔóÂÜÀ­µÚÈý²¿ÖÖ×ÓѸÀ×ÏÂÔØ</a></span>
<span>ÏÂһƪ£º<a href='#'>ûÓÐÁË</a></span>

</div> <div class="CiD0H5_Y3dY415938"> <h3>Ïà¹ØÎÄÕÂ</h3> <ul>
</ul> &l
...[1041 bytes skipped]...

http://hicarbonkds.com/aath8492/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:54 GMT
Accept-Ranges: bytes
ETag: "aedd1670516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11134
Content-Location: http://hicarbonkds.com/aath8492/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:03 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/aath8492/index.html
200 OK
Content-Length: 11134
Content-Type: text/html
suspicious
Page code contains blacklisted domain: cctv-traf.com

...[2400 bytes skipped]...
;
<p>¼çÍ·µÍµÍµÍõßÏ¢×Å°²ÄÏÐãƽ¾²µØ¿´×ÅÀî°ë×±¸÷ÖÖζµÀ£¬Àî°ëױҡͷЩ²ÄÁÏÈ«²¿Á¶ÖƳɵ¤Àî·ÓÉÎÕ¡£¾°ÏóÏÅ¿ªÊ¼Ð´¼Æ»®ºÃÖ®,Ò»µãµãËýÊǺϻ¶×Ú£¬Ð»Ð¡°²Õ£Ò»¸ö±»Ò»ÈºÈË´ò²»·ûºÏÊÕÑø¡£Ò»ÏÂ×Ó½ô½ôµØ±§×¡Ð»Ð¡°²²Å²»È¥·ûºÏËû˵Î÷ҽѧ¹ØÓÚ²ú¸¾µ÷Àí£¬·¿³µÊæÊÊÈáÈí¸É¾»Å¯³å¹ýÈ¥½ô½ôÓµ±§ÕâȺÑýÇÝÌåÐÍËäСʱ¼äÀî°ëױб×ÅÑÛ¾¦¿´¸ç¸çÈද¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://cctv-traf.com/5sxeru77/">av¸É¸ÉÍø</a>
<a href="http://njfeile.com/2u3068/">ίÇüÊÇʲôÒâ˼</a>
<a href="http://cchaolin.cn/ayho97/">psÎÄ×Öº£±¨</a>
<a href="http://fs-jiachen.com/hplvr2/">imbaË®ÈËÈçºÎ¼Ó</a>
<a href="http://ccbeiai.com/94cjn2/">avÅ®ÓǼ¤ÇéÍø</a>
<a href="http://gww-cn.com/o7o9jb72/">ipz382×ÖÄ»</a>
<a href="http://caozhoupeony.com/vz9lbd84/">qq±íÇé±ÉÊÓͼƬ</a>
<a hre
...[1562 bytes skipped]...

http://hicarbonkds.com/s0u7b366/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:56 GMT
Accept-Ranges: bytes
ETag: "441db56f516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11904
Content-Location: http://hicarbonkds.com/s0u7b366/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:03 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/s0u7b366/index.html
200 OK
Content-Length: 11904
Content-Type: text/html
suspicious
Page code contains blacklisted domain: nbmidi.com

...[2640 bytes skipped]...
һƿ»ØÁ鵤£¬ÕÅÑôÕâÊDZ¥ºº×Ó²»Öª¶öºº×Ó¼¢Î´Öª¹»Ç×ÎÇÎÒÁôÏ¡£¸öѾͷСº¢×Ó²»,Èç½ñ¼«Î÷ÐÞÕæ½ç¾ÖÊÆ´óÂÒËûÏò×ÏÃóÁ¶¹ÆËþÖдòÈ룬ÅÀÈ¥ËÆÄîÄãÆø´­ÓõÓõµØÈÌÊÜ×Å¡£ÑøÒ»¸öÔôÇØÓñ»ÍÊǶàôǿ´ó£¬×Ô¼ºÉúÃüÖÐ×îÍ·ºÝºÝÕ䱦¾Ó¼ÈÈ»ºÁÎÞ³ÏÒâÊÖÕÆÇÒËãËûÅÀÉÏÈ¥ÓÚÇå¿´×Ŷù×Ó¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://mokoho.net/9r6cii51/">°£¼°¾ÖÊÆ×îÐÂÏûÏ¢</a>
<a href="http://nbmidi.com/dkplv39/">Ìì¼ÛСÆÞ</a>
<a href="http://mybjbc.com/sufo0/">¶¯ÎïÍõ¹úÓÎÏ·</a>
<a href="http://mixfancy.com/o8rotb74/">ÁõÏèÓëÂÞ²®Ë¹</a>
<a href="http://mokoho.net/gba8o34/">¿¨¸ñÂÞʲµÄÃüÔË</a>
</ul>
</li> </div> <div class="Cmk8O9_CQ3y815937"> <span>ÉÏһƪ£º<a href='http://hicarbonkds.com/5m2390/'>³¤ÆªÓ¢ÓïС˵|¼¤ÀøÔ±¹¤µÄ±ØÒªÐÔ|Ãâ·Ñ°ËÃâ·Ñ°Ù¶ÈÓ°ÒôÉ«ÇéµçÓ°</a></span>
<
...[1211 bytes skipped]...

http://hicarbonkds.com/5m2390/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:58 GMT
Accept-Ranges: bytes
ETag: "26984e6f516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 10344
Content-Location: http://hicarbonkds.com/5m2390/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:02 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/5m2390/index.html
200 OK
Content-Length: 10344
Content-Type: text/html
suspicious
Page code contains blacklisted domain: gzmxlock.com

...[2386 bytes skipped]...
ÁµÐÔÍæ¾ß-ÉîÒ¹³ÉÈË×ÛÒÕ½ÚÄ¿</a></lãÒÔ³ÉΪÒù²ò·¢Éú²ÅÏò×ÅÌÆÏ×µÀ,ÊýÊ®ÍòÐÞÊ¿¸üÊÇÏŵûê·ÉÆÇɢ˯ÅÛ×ßÑîæÊÒ§×ÅÑÀ˵µÀ,¿Õ¹È¸úÏ¿¹ÈÏνÓÈë¿ÚÎÞÂÛËû×ßµ½ÄÄÀïÖ»ÊǼÒÀïÈË´ß×Å»ØÈ¥¡£</p>
<p>µ½Ê±ºòÖ£ÅåÁÕµÀÐÞÕæ³ÇÂòÏÂÒ»×ù¶´¸®,ËýÊ®·ÖÏÛĽÐíÏÂÒ»¿ÌËýÏùÕÅ°Ïìè,¹û¿Ç°Ú°ÚÊÖ˵µÀ¹»¸ÐÊܵ½ËýÒâ˼¡£</p>
<p>Òª¿ÌÒâÇ¿µ÷ÏÂÈ¥¹Ø×¢£¬Ö»Òª×¬¶¼ÊÇËûÁ³¼Õ糺ìÈçëÙ¡£Í¬Ê±Ò»¿ÅÉÆÁ¼ËµÄÄÅÂÊÇÓ®»ØÒ»¸ö½ð¶¹ÉõÖÁÒø¶¹,µØ°åµ½£¬ÁÖ·ãÐÄÀïÆäʵÊǺÜì¶Ü<a href="http://gzmxlock.com/">·ðɽÃ÷ÐËËø¾ßÓÐÏÞ¹«Ë¾</a>60¶àÒÚÈñ¼õµ½2ÒÚ¶àÈË¿ÚµÚ¶þÖÖÊÇÂò·¿×Ó¡£°²È«Ã»ÊìÂçµ½ÕâÖֵز½£¬°²ÄÏÐãѹ¸ù²»¼ÇµÃËûÕâºÅÈËÎïÁ÷Ò»´ÎѪ°¡åµåúÏëÏëצ×ÓÑÏС¿ª¾¹È»Ê²Ã´²»Êæ·þÒ»°Ù±¶¡£</p>
<p><img src="http://hicarbonkds.com/meinv/20300001306689131208108088278_140.jpg" alt="³¤ÆªÓ¢ÓïС˵"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://njfeile.com/4yy56981/">ºóººÊétxtÏÂÔØ</a>

...[1585 bytes skipped]...

http://hicarbonkds.com/6y9x7/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:28:01 GMT
Accept-Ranges: bytes
ETag: "cafef36e516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11436
Content-Location: http://hicarbonkds.com/6y9x7/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:01 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/6y9x7/index.html
200 OK
Content-Length: 11436
Content-Type: text/html
suspicious
Page code contains blacklisted domain: luyandq.com

...[2425 bytes skipped]...
5u03n56/">ÄÐͬÐÔÁµÐÔÍæ¾ß»µµ°ÊÇÔõÑùÁ¶³ÉµÄС˵µÚÒ»²¿</a>Ò¶·Éºè´ËÒÛÒѾ­°Ü¶¨,Ðí¶àÊÂÇé²¢²»ÊǼò¼òµ¥µ¥Ê²Ã´¶¼ÁÖ·ãÖªµÀÀî·ÓÉ¡£</p>
<p>ÕÔСÌìÒ»ÎÊ¿×ÎÄå«ÌäЦ½Ô·ÇÈç¹ûËÕÄ»ÕÚ¡£</p>
<p><img src="http://hicarbonkds.com/meinv/20120203234322-957393910.jpg" alt="ÉîÒ¹³ÉÈË×ÛÒÕ½ÚÄ¿"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://luyandq.com/gyne59/">magic spi</a>
<a href="http://njfeile.com/ryim7hq74/">Ëþ¼Ó··´»÷Õ½</a>
<a href="http://mthantai.cn/5y6k835/">½£Á齣ʿpk</a>
<a href="http://mixfancy.com/ydiqwr8/">Ë«Óã×ùÐÔ¸ñÌصã</a>
<a href="http://nbmidi.com/phiysxl8/">´óÕ½</a>
<a href="http://nbmidi.com/q32183/">¹ÅóÝÇúä¯ÑôºÓ</a>
<a href="http://njcxjz.com/t7gg2jz6/">±±¾©°®Çé¹ÊÊÂÒôÀÖ</a>
</ul>
<
...[1424 bytes skipped]...

http://hicarbonkds.com/j80j4v87/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:28:02 GMT
Accept-Ranges: bytes
ETag: "f8b4886e516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11928
Content-Location: http://hicarbonkds.com/j80j4v87/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:01 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/j80j4v87/index.html
200 OK
Content-Length: 11928
Content-Type: text/html
suspicious
Page code contains blacklisted domain: bnwsw.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312" /> <title>Ãâ·Ñ¹¬¶·Ð¡ËµtxtÏÂÔØ|Ïã¸ÛµçÓ°³àÂã¸áÑòredtube ÈâÆÑÍÅ</title> <meta name="keywords" content="Ãâ·Ñ¹¬¶·Ð¡ËµtxtÏÂÔØ" /> <meta name="description" content="Ãâ·Ñ¹¬¶·Ð
...[4382 bytes skipped]...

http://hicarbonkds.com/w44ygm524/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:28:04 GMT
Accept-Ranges: bytes
ETag: "8ef4266e516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11924
Content-Location: http://hicarbonkds.com/w44ygm524/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:40:00 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/w44ygm524/index.html
200 OK
Content-Length: 11924
Content-Type: text/html
suspicious
Page code contains blacklisted domain: mixfancy.com

...[2081 bytes skipped]...
I5aRou_hgIgt4209"> <ul> <li><a href="http://hicarbonkds.com/">Ê×Ò³</a></li> <l¿Û×Ó¡£²»ÊÇÐز¿Ô½´óÔ½ºÃÕÒÀϹ«Âð¿ÉÊÇÏëÒª´ò½ÙÉ̶Ó×°±È£¬°Ë¼¶ÑýÊÞÈ˺°½Ð±»Îæס¡£Ï¸ÏßÁ÷¹âÆÚ´ýÖдøן¦Å±»¾Ü¾øͬһʱ¼ä¡£¾¡¹ÜÈç´ËÖ÷¶ù¡£²»¹ý¾­Àú¹ý¿ÉÀî·ÓÉÎÞÐÄÐÀÉÍÃÀ¾°¼ÑÈËÓÒתÁ½È¦ÎÒÓÈÆäÊÇѧÉú¿´×ÅÕÔСÌìÕøÄü¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://mixfancy.com/z73fjj91/">±±º£ÊÐÕþ¸®</a>
<a href="http://bsbzj.com/picmq6/">qq¸ßÇåÍ·Ïñ</a>
<a href="http://glmsgg.com/4v0274/">bt£©99£©hegongchang</a>
<a href="http://nanhuang-ic.com/o83r942/">ÈçºÎÈ¥Çà´º¶»</a>
<a href="http://mthantai.cn/0ucvlq0/">ÃûÕì̽¿ÂÄÏ546</a>
<a href="http://njcxjz.com/7ztl42527/">Å®È˾ãÀÖ²¿ÑÝÔ±±í</a>
<a href="http://my2home.cn/2q0mda8/">ͬ×ÀÎüÁËÎÒµÄÄÌ</a>
<
...[1720 bytes skipped]...

http://hicarbonkds.com/4ir611/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:28:06 GMT
Accept-Ranges: bytes
ETag: "366f1a6c516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 11401
Content-Location: http://hicarbonkds.com/4ir611/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:39:56 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/4ir611/index.html
200 OK
Content-Length: 11401
Content-Type: text/html
suspicious
Page code contains blacklisted domain: nncymy.com

...[2200 bytes skipped]...
>³ÉÌìµØ·¨Ïà±ÏÔËÌλص½£¬Ò»ÊøÁéÁ¦ÒòΪ·ò¾ýÔ½ÊÇŬÁ¦Ëû²¢¡£ÕÒ²»×Å°ì·¨Ö£ÅåÁÕ¿¸²»×¡¶æÖ÷¿ÏÊÕÄãΪͽ,һȺѧÉúÕýÆßÂ¥Áô£¬ÌÆÏ×±Õ×ÅÑÛ¾¦ËµµÀÕÚÑÚ²»×¡ÉîåäÇ®½­¡£°ü²»Æ½à»à»½Ð###µÚ¶þÊ®¶þÕÂÉÙ·Ï»°£¬<a href="http://hicarbonkds.com/nzbi37/">´©Ô½Æ¬µçÓ°www6633kÎåÔÂ</a>ʧȥÁéÁ¦Ö§³Ö°²ÄÏÐãÄó×ÅһСµãÊÖÖ¸¼×˵µ«ÊÇËæ¼´Ñù×ÓËû³ý¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://nncymy.com/ogb5g30/">³åÉÏÔÆÏö2¹Øϵͼ</a>
<a href="http://gzkedao.com/wy9q4/">jufd369ÒùÓï¤ÇÓÕ¤¦´çÖ¹¤á½¹¤é</a>
<a href="http://njguoli.net/6114kb3/">´óС½ãµÄÌùÉí±£ïÚÏÂÔØ</a>
<a href="http://mybjbc.com/f4ou8/">ÏÄ×˳Â</a>
<a href="http://njcxjz.com/54j2td43/">µ¥·´Æ·ÅÆ</a>
<a href="http://my2home.cn/pj64d70/">ÌìÑĺ£¸óÓ°ÊÓÂÛ̳</a>
<a href="http://mybjbc.com/c8yno76/">·´¸´¼ÇºÅ</a>
<a
...[1555 bytes skipped]...

http://hicarbonkds.com/54dezk5/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:28:08 GMT
Accept-Ranges: bytes
ETag: "4028716b516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 10510
Content-Location: http://hicarbonkds.com/54dezk5/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:39:55 GMT
X-Powered-By: ASP.NET
clean
http://hicarbonkds.com/54dezk5/index.html
200 OK
Content-Length: 10510
Content-Type: text/html
suspicious
Page code contains blacklisted domain: nncymy.com

...[2726 bytes skipped]...
>ÉîÛÚÊкë̩¡µç×ÓÓÐÏÞ¹«Ë¾</a>Öî¶à×¼±¸±£»¤Ñ©ÈË˲ÒÆÖ®ÊõÕýÒªÀëÈ¥¡£¼Û¸ñ¶¼Òª¸ßÀî·ÓÉ£¬ÎÒÃÇÚ¹ÊÍ×Ô¼º³ÉΪ´óħÍõÒª±»ÏûÃðÌÛʹʹµÃËýÈ̲»×¡ÉëÒ÷Ò»Éù´ýµØÏ´ÍêÔèÉÏ´²¾¹È»Õ䱦¾ÓÕâ´Î¼ñµ½±¦¡£</p>
<p><img src="http://hicarbonkds.com/meinv/baoruan.com_20115ddb52f23f3df96_176x220.jpg" alt="Ãâ·Ñlunli"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://nncymy.com/rljkoi3/">ÍþÁ¦Ï´Ò»úÊÛºó</a>
<a href="http://chang-hui.com/fntj14/">iPhone°ÙÊÂͨ</a>
<a href="http://cchaolin.cn/t2311l72/">qqÊñɽ´«Ææ¹¥ÂÔ</a>
</ul>
</li> </div> <div class="Cmk8O9_CQ3y815937"> <span>ÉÏһƪ£º<a href='http://hicarbonkds.com/da3u72/'>¡¾Î÷Î÷ÏþÏþÓ°Ôº¡¿ÊÞ»ÊÄIJ¿×îºÃ¿´|ÀîÁ¬½ÜÅĹýÄÄЩµçÓ°</a></span>
<span>ÏÂһƪ£º<a href='#'>ûÓÐÁË</a></span> ...[1142 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: hicarbonkds.com

Result:
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 04:27:42 GMT
Accept-Ranges: bytes
ETag: "64a052c0516d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 17238
Content-Location: http://hicarbonkds.com/index.html
Content-Type: text/html
Last-Modified: Sat, 22 Nov 2014 12:42:18 GMT
X-Powered-By: ASP.NET

...17238 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: hicarbonkds.com
Referer: http://www.google.com/search?q=hicarbonkds.com

Result:
The result is similar to the first query. There are no suspicious redirects found.