Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://www.ljlys.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: www.ljlys.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Object moved Cache-Control: private Date: Sun, 07 Sep 2014 16:25:26 GMT Location: http://www.100jian.com Server: Microsoft-IIS/7.5 Content-Length: 120 Content-Type: text/html Set-Cookie: ASPSESSIONIDAARDDQQS=ADDNLGCCKEDNMEFOJNOKLMGK; path=/ X-Powered-By: ASP.NET | malicious |
Scanned pages/files
Request | Server response | Status |
http://www.ljlys.com/ | 200 OK Content-Length: 30180 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var speed=30; var marquee_product2qik8Ki = document.getElementById("marquee_product2qik8Ki"); var marquee_product1qik8Ki = document.getElementById("marquee_product1qik8Ki"); var marquee_demoqik8Ki = document.getElementById("marquee_demoqik8Ki"); marquee_product2qik8Ki.innerHTML=marquee_product1qik8Ki.innerHTML; function Marqueeqik8Ki(){ if(marquee_demoqik8Ki.scrollLeft>=marquee_product1qik8Ki.scrollWidth){ marquee_demoqik8Ki.scrollLeft=0; } else{ marquee_demoqik8Ki.scrollLeft++; } } var MyMarqik8Ki=setInterval(Marqueeqik8Ki,speed); marquee_demoqik8Ki.onmouseover=function(){clearInterval(MyMarqik8Ki);} marquee_demoqik8Ki.onmouseout=function(){MyMarqik8Ki=setInterval(Marqueeqik8Ki,speed);} Antivirus reports:
| ||
http://www.ljlys.com/Templates/ÉÌҵģ°æ10-ÂÌÉ«×ÔÈ»/html/style/main_menu.js | 200 OK Content-Length: 928 Content-Type: application/x-javascript | clean |
http://www.ljlys.com/js/comm.js | 200 OK Content-Length: 4377 Content-Type: application/x-javascript | clean |
http://www.ljlys.com/inc/AspCms_Statistics.asp | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://www.ljlys.com/test404page.js | 404 Not Found Content-Length: 5098 Content-Type: text/html | clean |
http://www.ljlys.com/Images/qq/qqkf2/kefu.js | 200 OK Content-Length: 1179 Content-Type: application/x-javascript | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ljlys.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ljlys.com/
Result: ljlys.com is not infected or malware details are not published yet.
Result: ljlys.com is not infected or malware details are not published yet.