Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lh-cnc.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lh-cnc.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Tue, 03 Mar 2015 18:21:28 GMT
Server: Microsoft-IIS/6.0
Content-Length: 33949
Content-Type: text/html; Charset=GBK
Set-Cookie: ASPSESSIONIDCCBSBQAC=EOGAECPCINFPEEIDNGAEHBOO; path=/
Set-Cookie: safedog-flow-item=F799C62278EC22BB0FD942E3322028A2; expires=Fri, 9-Arp-2151 19:54:44 GMT; domain=lh-cnc.com; path=/
X-Powered-By: ASP.NET
...33949 bytes of data.
GET / HTTP/1.1
Host: lh-cnc.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Tue, 03 Mar 2015 18:21:28 GMT
Server: Microsoft-IIS/6.0
Content-Length: 33949
Content-Type: text/html; Charset=GBK
Set-Cookie: ASPSESSIONIDCCBSBQAC=EOGAECPCINFPEEIDNGAEHBOO; path=/
Set-Cookie: safedog-flow-item=F799C62278EC22BB0FD942E3322028A2; expires=Fri, 9-Arp-2151 19:54:44 GMT; domain=lh-cnc.com; path=/
X-Powered-By: ASP.NET
...33949 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: lh-cnc.com
Referer: http://www.google.com/search?q=lh-cnc.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lh-cnc.com
Referer: http://www.google.com/search?q=lh-cnc.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://lh-cnc.com/ | 200 OK Content-Length: 33949 Content-Type: text/html | clean |
http://lh-cnc.com/js/ServiceQQ.asp | 200 OK Content-Length: 4439 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=1429674112&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=1637855565&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=1109580882&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=806780977&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=1252260893&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/ http://wpa.qq.com/msgrd?V=1&Uin=825452078&Site=Î人Á캽Êý¿Ø&Menu=yes | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://lh-cnc.com/js/index.js | HTTP/1.1 200 OK Date: Tue, 03 Mar 2015 18:21:41 GMT Accept-Ranges: bytes ETag: "07227a6dd8eca1:112e08f" Server: Microsoft-IIS/6.0 Content-Length: 1631 Content-Location: http://lh-cnc.com/js/index.js Content-Type: application/x-javascript Last-Modified: Wed, 06 Jan 2010 14:36:36 GMT X-Powered-By: ASP.NET | clean |
http://s76.cnzz.com/stat.php?id=1601207&web_id=1601207&show=pic | 200 OK Content-Length: 10074 Content-Type: application/javascript | clean |