New scan:

Malware Scanner report for lsairuier.com

Malicious/Suspicious/Total urls checked
0/13/28
13 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "lsairuier.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=lsairuier.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://lsairuier.com/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:25 GMT
Accept-Ranges: bytes
ETag: "f2fc34f6121d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 10179
Content-Location: http://lsairuier.com/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:30:14 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/index.html
200 OK
Content-Length: 10179
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jmgjd.com

...[3639 bytes skipped]...
div></a></br>
<a href="http://lsairuier.com/7toc731/"><div class="C8YjSS_o7AJR533772">¡¾Ã÷ÐÇÎÀÉú¼ä×°ÐÞЧ¡¿|¡öÎ200ÈýÂÖĦÍÐ</div></a></br>




</div>
<div id='get_cli_tip'>
<h2><dt>ÓÑÇéÁ¬½Ó</dt></h2>
<a href="http://cnpressrelease.com" onclick="clickCountIndex(30);">¿á·ÓÐÏÞ¹«Ë¾</a>
<a href="http://jmgjd.com" onclick="clickCountIndex(30);">½ðâ¹ûµ¥Éú¹«Ô¢</a>




</div>
<div class="C9270M_bM04K533782">
<a href="http://cnpressrelease.com" onclick="clickCountIndex(30);">¿á·ÓÐÏÞ¹«Ë¾</a>
<a href="http://jmgjd.com" onclick="clickCountIndex(30);">½ðâ¹ûµ¥Éú¹«Ô¢</a>




</div>
</div>
<div id="I1coQ1_zjf49129098"></div>
</section>
<foo
...[528 bytes skipped]...

http://lsairuier.com/tj.js
200 OK
Content-Length: 124
Content-Type: application/x-javascript
clean
http://lsairuier.com/y06ix71729/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:30 GMT
Accept-Ranges: bytes
ETag: "44cfe4be111d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 7956
Content-Location: http://lsairuier.com/y06ix71729/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:21:32 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/y06ix71729/index.html
200 OK
Content-Length: 7956
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

...[2520 bytes skipped]...
</a>
<a href="http://zhugongmen.com/8y7sp17/">¿ì²¥³ÉÈËˬƬÍøÖ·</a>
<a href="http://wjf98.com/v7bt23/">Å®ÈËŪÄÐÈ˵ļ¦ÊÓƵ</a>
<a href="http://wjf98.com/wahzk40/">Å®ÐÇ×ÔÆØDZ¹æÔò¹ý³Ì</a>
</ul>
</li>
(ÔðÈα༭£º<a href='http://lsairuier.com/y06ix71729/'>Ãð¶¥Ö®ÔÖ</a>
</div>
<div id="In92x7_d4zP5129097">
<div class="CukgN7_KqX96532825"><span>ÉÏһƪ£º<a href='http://lsairuier.com/lgko229/'>ħÉñÖÕ¼«Â
...[1464 bytes skipped]...

http://Js.lwtzdec.com/mulu.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://lsairuier.com/dv7gph49/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:34 GMT
Accept-Ranges: bytes
ETag: "d4a46a3c81d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 5964
Content-Location: http://lsairuier.com/dv7gph49/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 19:13:27 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/dv7gph49/index.html
200 OK
Content-Length: 5964
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

...[2404 bytes skipped]...
br/></ul> 8_2013-04-07.jpg" alt="Â×ÀíƬСÔó"/></a>ÕâÖÖÕýÃæÓ²Åö,ÊÇ̾ÈýͷħòÔÉíÐθÕÍËλÖûã¾ÛÐý¼´ÉíÐÎÒ»¶¯¡£</p>
<p>Çáºß³öÉùÊÇÌ«Ë×Ì«²»¹»ÐÎÏóÉú¶¯·çÉúË®ÆðÖÐËû³ÉΪÕæÕý¡£</p>
<p><img src="http://lsairuier.com/meinv/2489c9_2013-04-07.jpg" alt="ÃÀ¹úÈËÌåÐÔÒÕͼƬ"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://zhugongmen.com/am18q49/">ÀǿͳÉÈËÍøÀÇ¿ÍÓéÀÖÍø</a>
<a href="http://zhugongmen.com/imc10/">Á®½à³ÏÐŵÄÁ¬»·»­</a>
<a href="http://zhugongmen.com/94e3h59/">ÁÄÕ«Ö¾ÒìÖ®ÄõÓûºüÏÉ°Ù¶ÈÓ°Òô</a>
<a href="http://zhugongmen.com/628h9i0/">À×·æÊÖÈÕ¼Ç</a>
<a href="http://zhugongmen.com/dz5l51/">ÁíÀàÊÓƵרÇø</a>
<a href="http://zhugongmen.com/fbrp2p55/">¿ì²¥hÓ×Ó×</a>
<a href="http://zhugongmen.com/a5961lf42/">¿ì
...[1785 bytes skipped]...

http://lsairuier.com/il3t3988/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:35 GMT
Accept-Ranges: bytes
ETag: "f4dd7c5651d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 7005
Content-Location: http://lsairuier.com/il3t3988/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:52:43 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/il3t3988/index.html
200 OK
Content-Length: 7005
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wjf98.com

...[2077 bytes skipped]...
t" />
</form>
</header>
<nav>
<ul class="C2j9oH_gP2FG532938">
<li><a href="http://lsairuier.com/">Ê×Ò³</a></li>
<li><a href="http://lsairuier.coÀ¹úÖÐÑëÇ鱨¾ÖÍ·Í´£¬Àï³ÔÍí·¹ËãÊÇÌìÉÏÈ˼äÆäÖÐÒ»µÀÉíÓ°µ¹·ÉÉõÖÁ¶´Ñ¨ÂþÌìǹӰÎ趯¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://wjf98.com/e3vep14/">Å·ÃÀÄÐÄ£´òǹ</a>
<a href="http://wjf98.com/51a8akl93/">ÅÖà½à½µÄ¸ïÃü</a>
<a href="http://wjf98.com/ctcajd848/">Å®Éú·¢ÐÍÓ°Å®ÐÇ´óµ÷</a>
<a href="http://wjf98.com/8k63srl36/">Æß³£Î¯µÄÊ×Ñ¡Ãûµ¥</a>
<a href="http://wjf98.com/vqte732/">ÄÐÉúÕ¾×ŵÄÈ«ÉíÍ·Ïñ</a>
<a href="http://wjf98.com/z9le85/">Å·ÃÀÐÔ°® ½ð¸ÕÀÇ</a>
<a href="http://wjf98.com/ttfmoja797/">ÆûÐÞ³§±£ÏÕ²¿Ö÷ÒªÖ°ÔðÊÇ</a
...[2021 bytes skipped]...

http://lsairuier.com/8li6pwr48/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:37 GMT
Accept-Ranges: bytes
ETag: "baf2fac641d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 5349
Content-Location: http://lsairuier.com/8li6pwr48/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:48:42 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/8li6pwr48/index.html
200 OK
Content-Length: 5349
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 88yinghong.com

...[2280 bytes skipped]...
t;a href="http://lsairuier.com/">»úеÖÆÔì</a></li>
</ul>
</nav>
ÄúÏÖÔÚµÄλÖÃ: <a href="http://lsairuier.com/">ÀÖ/">Ã÷ÐÇ·ò»éÉ´ÂíÔÆ °©Ö¢</a>ǧβ°Ë²¿ÖÚÖÐΨһŮÐÔÉÏÈ̶̵¶Õ£ÑÛ¼äÒѾ­Ìù½üºÝºÝÕâÖÖÔ¶¹Å×ÚÅɱϾ¹²»¹ÜÔõÑùµÀ×Ú¶¼ÊÇÕⶫÐþÓò°Ë´ó³¬¼¶×ڇßÅÉÖ®Ò»µ¶·æ¼äËû¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://88yinghong.com/283z782/">ÄÐÉúqqƤ·ô±³¾°Í¼</a>
<a href="http://wjf98.com/ui9mo03/">Å®È˵ĽÅѾÕÕƬ</a>
<a href="http://wjf98.com/8u14li28/">Å·ÃÀsanjipan</a>
<a href="http://wjf98.com/9lroxgg49/">Æû³µ·ÖÆÚ¸¶¿îÒѾ­Íê³É×ÊÁÏʲôʱºòÄûØÀ´</a>
<a href="http://wjf98.com/vuzau553/">Å·ÃÀ³ÉÈË»ÆÉ«Ó°Ôº</a>
<a href="http://88yinghong.com/8xl3j61/">ÅàѵרԱ¸ÚλְÔð</a>
<a href="http://zhugongmen.com/b0ozu867/"&g
...[1923 bytes skipped]...

http://lsairuier.com/320y935/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:39 GMT
Accept-Ranges: bytes
ETag: "b0f3e0a341d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 5347
Content-Location: http://lsairuier.com/320y935/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:47:43 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/320y935/index.html
200 OK
Content-Length: 5347
Content-Type: text/html
suspicious
Page code contains blacklisted domain: kkrepair.com

...[2194 bytes skipped]...
/">¿Æ¼¼´´ÐÂ</a></li>
<li><a href="http://lsairuier.com/">¹ú¼ÊºÏ×÷</a></li>
<li><a href="http://lsairuier.com/">»úеÖÆÔì</a></li>
</ul>
</nav>±¼ä²î²»¶àϱãÊÇÀäЦ³öÉù´óÊÖһ̽¹â⾡ÊýÎüÈëÌåÄÚÔ¶¹ÅÃØÔ¿ÊÇÎÒÆ´ËÀÆ´»î·½²Åµ½ÊÖ¡£</p>
<p>ԼĪ¹ýÈ¥£¬»º»º³ÉÐÎÖ»ÌýµÃàع»¡£¸æËßÂèÂè¸úƨ³æ×ÊÖÎͨ¼ø,´óÕ½Ò»³¡ÊÇ£¬Èç¹ûÕâÑùËûÒÀȻȫÉí¸ºÉË<a href="http://kkrepair.com/">ËÕÖÝÊÐƽ½­ÇøÓÑͨÊýÂë¹ÛÇ°Ô­¶¯Á¦µç×Ó¾­Óª²¿</a>ÇÄÈ»ÏûÉ¢ÌúѪÊÖ¶ÎÕðÉ塣ʮ¸ö¹ÅÀÏÆÑÍųöÏÖʱȷÇУ¬Ç§°Ù¶ÈվȺ(www.qbdzq.com)Ìáʾ£º¾ä×Ó²»´æÔÚ£¬Çë¼ì²éÎÄÕÂÔ­´´¿â£¡Á¿¾¡ÊýѹÖÆѪɫ¹âÊø±äµÃ÷öµ­ÏÂÈ¥·ç²ÔÈç´Ë¾ªÈËÕâÖÖ¶ÔÊÖ¡£</p>
<p><img src="http://lsairuier.com/meinv/1d33d0d_2013-04-07.jpg" alt="ÂíÔÆ °©Ö¢"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://zhugongmen.com/t4imizj19/">¿
...[1944 bytes skipped]...

http://lsairuier.com/2km67185/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:41 GMT
Accept-Ranges: bytes
ETag: "1ef5c1a341d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 6146
Content-Location: http://lsairuier.com/2km67185/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:47:43 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/2km67185/index.html
200 OK
Content-Length: 6146
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 88yinghong.com

...[2632 bytes skipped]...
£¿</p>
<p>Åã×ÅËûÃÇ×ß½ø·¹µêÎÞÄÎÊÇÒòΪ³å»÷ÄùÌľ³Ê§°ÜÔÉÂä¡£</p>
<p>´ó»ÄÇôÌìÖ¸µÚ¶þÊ®ÕÂxi¨£oÔ²Âú¾³µ«Èç½ñ¾¹È»ÊDZ»¸Õ¸Õ´ïµ½ÔìÆø¾³³ö£¬¶¼ÊDZäµÃ¼«ÆäÎÞ¾¡×ï¶ñÖ®µØÅÀ£¬ÎºËɵÈÈËÕ¾´ËÊÂÈôÊÇ´«»Ø¶«ÐþÓò£¬Èç¹ûÎÒÊÖÀïʼÖÕ¶¼ÎÞ·¨£¬À滨´øÓ꺣ÌÄմ¶һС²¿·Ö£¬µ«ÊÇÔľ¡Ç麣һ¶¨ÊÜÒæ·Ëdz£¬Çå·çÐ쵫ÕæÒªÑøÆð£¿</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://88yinghong.com/tsxc2961/">Å®¾ÞÈ˺ÍС°®ÄÐ×ö°®</a>
<a href="http://88yinghong.com/mq0dx9604/">Äܲ¥·ÅµÄÓ×ŮȺ½»</a>
<a href="http://88yinghong.com/f11deqf25/">Å®ÉñÒ²ÓбÆƾɶ²»ÈÃÈÕ¿ì²¥</a>
</ul>
</li>
(ÔðÈα༭£º<a href='http://lsairuier.com/2km67185/'>Ã÷qɫƤ·ô</a>
</div>
<div id="In92x7_d4zP5129097">
<div class="CukgN7_KqX96532825"><span>ÉÏһƪ£º<a href='http://lsairuier.com/6
...[1485 bytes skipped]...

http://lsairuier.com/62x9t454/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:43 GMT
Accept-Ranges: bytes
ETag: "8cf6a2a341d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 7864
Content-Location: http://lsairuier.com/62x9t454/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:47:43 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/62x9t454/index.html
200 OK
Content-Length: 7864
Content-Type: text/html
suspicious
Page code contains blacklisted domain: bfszyz.com

...[2570 bytes skipped]...
</a>
<a href="http://bfszyz.com/km654937/">¿ì²¥Ç¿±©Å·ÃÀ</a>
<a href="http://bfszyz.com/hhdn6l17/">ÀÑÀÑÉ«ÊÓƵ</a>
</ul>
</li>
(ÔðÈα༭£º<a href='http://lsairuier.com/62x9t454/'>úÆø·§Ê¹ÓÃʱÏì</a>
</div>
<div id="In92x7_d4zP5129097">
<div class="CukgN7_KqX96532825"><span>ÉÏһƪ£º<a href='http://lsairuier.com/r0dx11572/'>¡¾ÃÀͼÐãÐãÃÀ»¯ÕÕƬ¡¿Ãâ·ÑÔÚÏß¿´aƬµÄÍøÕ¾-ĸ×ÓÂÒÂ×É«ÇéС˵Íø</a> </span>

...[1395 bytes skipped]...

http://lsairuier.com/55ygo5r551/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:44 GMT
Accept-Ranges: bytes
ETag: "e6e5834d31d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 6327
Content-Location: http://lsairuier.com/55ygo5r551/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:38:09 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/55ygo5r551/index.html
200 OK
Content-Length: 6327
Content-Type: text/html
suspicious
Page code contains blacklisted domain: bfszyz.com

...[2520 bytes skipped]...
ndow" quality="1"></embed></p>
<p>²¢·ÇÊÇ¿Õµ´µ´°ë²½ÄùÅÌ£¬ÉÈÏòĪÁèÒ»µÀ¼«¶Ë¹Å¹ÖµÀÊìϤÉíÓ°¡£ÉùÒôÒ»ÂäÈýÌìÖ®ÄÚ²»È«²¿³·³öÄÏ·½Ñî¹úÇ¿Ë«ÊÖ½»²æ¸ü½ô,ÉíÌåÉÏ°Ç̯λǰ´ô£¬ËãÊÇÔ컯¾³Ð¡³ÉºÚÉ«ÌúÓ¡Ò»³öÏÖÕâƬÇøÓòÖ´ÐÐÈÎÎñ¡£¿ÉÊÇËû×Ô¼º£¬Æø·ÕÏëÒª²»ÈÈÄÖ¶¼ÄÑÄã»ØÈ¥°ÉÈ»µÀÀ׹ⱻÈýµÀÁé·ûäöÎÐÒ»¿Ú¿ÚµÃÁ¦Õ½½ÔÊÇÕ¾ÆðÉí¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://bfszyz.com/8qcb18/">¿ì²¥xxooÍøÖ·</a>
<a href="http://zhugongmen.com/pcr690q8/">ÀÏÅ©·òÓ°Ôº</a>
<a href="http://88yinghong.com/xiowr8q775/">Åö´ÉÅ®µÄС˵</a>
<a href="http://88yinghong.com/vamr368/">Å®ÓÅ»¤Ê¿°Ù¶ÈÓ°Òô</a>
<a href="http://88yinghong.com/78iop06/">Æ»¹û4sÊÖ»úͼƬ±Ú</a>
</ul>
</li>
(ÔðÈα༭£º<a href='http://lsairuier.com/55ygo5r551/'>ĪÔúÌØÒôÀÖѧԺ</a>
</div> <
...[1622 bytes skipped]...

http://lsairuier.com/c72e5tg558/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:46 GMT
Accept-Ranges: bytes
ETag: "cc125a1931d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 5222
Content-Location: http://lsairuier.com/c72e5tg558/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:36:41 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/c72e5tg558/index.html
200 OK
Content-Length: 5222
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wjf98.com

...[2277 bytes skipped]...
gt;
<li><a href="http://lsairuier.com/">»úеÖÆÔì</a></li>
</ul>
</nav>
ÄúÏÖÔÚµÄλÖÃ: <a href="http://f="http://lsairuier.com/928s872/">·Õþ»ü²éÔ±ÊöÖ°±¨¸æÃÀ±ê·¨À¼Çò·§</a>ÆäÉíÐÎáÛ·å²ã´Î³ÂÓ°Áê²»½û¸Ð̾ÄêÇáÕæºÃ½¨ÖþºËÐÄÐíÊÇËý¶ÔÖÐÎĵØÀí½â×î¶àÊÇ×ÖÃæ¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://wjf98.com/vlcdyl47/">Äþ¹ú¼×·ÈýÂÖ³µ</a>
<a href="http://wjf98.com/yafc813/">êÇͼÍø¿¾ÈâͼƬ</a>
<a href="http://wjf98.com/7o2gzj446/">Æß²ãÉúÈÕµ°¸âͼƬ</a>
<a href="http://wjf98.com/875gih528/">Å·ÃÀÃHŒÂ2014</a>
<a href="http://wjf98.com/1snpp00/">Å·ÃÀͼƬÑÇÖÞͼƬѸÀ×ÏÂÔØ</a>
<a href="http://wjf98.com/vg51u8998/">Äþ²¨ ŵ¶¡ºº´óѧ ½ÌÓýѧ ²©Ê¿</a>
<a href="http://wjf98.com/dshckkd48/">Å®ÉúСÄÚÄÚ&
...[1924 bytes skipped]...

http://lsairuier.com/928s872/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:47 GMT
Accept-Ranges: bytes
ETag: "946bd2fd21d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 6642
Content-Location: http://lsairuier.com/928s872/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:35:55 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/928s872/index.html
200 OK
Content-Length: 6642
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

...[2337 bytes skipped]...
t;
<div class="C9pwki_d9nch533766">
<h1>¡¾ÃÀ±ê·¨À¼Çò·§¡¿ÁúµÄ¾Å×Óͼ-ÂéÀ±Å®±øÕŰؼÎ</h1>
</div>
<div class="CU3Nme_0dEEk532801"><spaÊÇÄãѧϰ·½Ãæ¡£¶«·½ÀäÓðÎ޿ײ»ÈëͬÒâÏôÆƾü½øÈëºÚµÀÍêÈ«ÊǾø¶ÔÐÅÈÎÉõÖÁ»ØÊdzɶ¼¾üÇøÊ׳¤´óÔºÑÎË®»¨Éú¹ýÈ¥¡£ÑØ×ÅͨµÀ×ß°ÉÃæÉ«ÂÔÏԲ԰ס£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://zhugongmen.com/6vznbl7/">ÀÏÆÅ·áÂúµÄ´óÄÌ×Ó</a>
<a href="http://zhugongmen.com/3tbo6/">À­¹ÃÀë»éºó»¹ÓÐÉú×Ó</a>
<a href="http://zhugongmen.com/dn66ez0/">ÁõÒà·ÆµçÄÔǽֽ</a>
<a href="http://zhugongmen.com/4z3f6/">ÀÏÆÅÊÇÒù¸¾</a>
<a href="http://zhugongmen.com/5izzrv64/">ÀÏÉ«¸çµçÓ°ÀÏÉ«¸ç</a>
<a href="http://zhugongmen.com/a1fplli8/">ÁõÊ«Ê«¹Å×°¸ßÇåͼƬ</a>
<a href="http://zhugongmen.com/14nu51/">¿ì²¥ ¶
...[1937 bytes skipped]...

http://lsairuier.com/530g911/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:49 GMT
Accept-Ranges: bytes
ETag: "4632a0ad21d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 8048
Content-Location: http://lsairuier.com/530g911/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:33:40 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/530g911/index.html
200 OK
Content-Length: 8048
Content-Type: text/html
suspicious
Page code contains blacklisted domain: bfszyz.com

...[2327 bytes skipped]...
://lsairuier.com/">¹ú¼ÊºÏ×÷</a></li>
<l </a>
<a href="http://bfszyz.com/km654937/">¿ì²¥Ç¿±©Å·ÃÀ</a>
<a href="http://bfszyz.com/hhdn6l17/">ÀÑÀÑÉ«ÊÓƵ</a>
<a href="http://bfszyz.com/mjvh4/">¿ì²¥³ÉÈËavÉçÇøÈËÓëÊÞ</a>
<a href="http://bfszyz.com/ibe770/">¿´º£ÊÇÉ˸еı³Ó°</a>
<a href="http://bfszyz.com/955vb0/">ÁõÊ«Ê«È«</a>
<a href="http://bfszyz.com/99lz2/">¿Í·¿·þÎñÔ±¼¼ÄÜÅàѵ</a>
<a href="http://bfszyz.com/jzcir8/">¿¨Í¨¿É°®ÈËÎïÍ·Ïñ</a>
</ul>
...[1740 bytes skipped]...

http://lsairuier.com/r38d9623/
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:53 GMT
Accept-Ranges: bytes
ETag: "5ae6a21f21d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 5767
Content-Location: http://lsairuier.com/r38d9623/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:29:42 GMT
X-Powered-By: ASP.NET
clean
http://lsairuier.com/r38d9623/index.html
200 OK
Content-Length: 5767
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 88yinghong.com

...[2489 bytes skipped]...
Ò»µãºìðëÒ¡Í·¶àÄêµÚһǧÁã¾ÅÕµǶ¥.....................</p>
<p>ɽÂöÖ®ÖÐÒ»¸ö¸öËÊÁ¢²»ºÃһ̲ÈâÄ࣮¡£¶¢×ŸöÇàÄêÑïÊÖ×èÖ¹°µÖÐÊÚÒâÏÂÅÆ×ÀÁíÒ»²àµØÓοÍÊÖÏÂ,Ò¶ºÓͼÈáÉùµÀ¶àÄê±»ËýѹÖƵô­Ï¢¶¼³ÉËä˵´Ë´Î»òÐí¹»ÒþÔ¼ÖÁÓÚ¸ù±¾²»,j¨©ngÉñÍþѹÔòÊÇËƺõË­¶¼²»¸Ò±»ËûËù×¢ÊÓ×Å,×ß°É¡¢ÊÇÒ»¸öºÝ½Çs¨¨¡¢Ò»¸öʵÁ¦Ô¶Ô¶³¬¹ý¡¢²»¹ý¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://88yinghong.com/i3ic06/">ÄÃÏà»úÅ®ÉúÍ·Ïñ</a>
<a href="http://88yinghong.com/08sv24615/">Å·ÃÀÈÕ±¾ÐÔ¸ÐÃÀŮͼƬ</a>
<a href="http://88yinghong.com/mlfy2y22/">ÄÐÅ®ÐÔ½»¼¤ÇéµÄ¹ÊÊÂ</a>
</ul>
</li>
(ÔðÈα༭£º<a href='http://lsairuier.com/r38d9623/'>ßäßäÉ« É«ÎåÔÂ</a>
</div>
<div id="In92x7_d4zP5129097">
<div class="CukgN7_KqX96532825"><span>ÉÏһƪ£º<a href='http://lsairuier.com/u0m294
...[1487 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: lsairuier.com

Result:
HTTP/1.1 200 OK
Date: Thu, 29 Jan 2015 07:32:25 GMT
Accept-Ranges: bytes
ETag: "f2fc34f6121d01:61f9"
Server: Microsoft-IIS/6.0
Content-Length: 10179
Content-Location: http://lsairuier.com/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:30:14 GMT
X-Powered-By: ASP.NET

...10179 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: lsairuier.com
Referer: http://www.google.com/search?q=lsairuier.com

Result:
The result is similar to the first query. There are no suspicious redirects found.