Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mren5.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://mren5.com/ | 200 OK Content-Length: 33492 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.anrenti.com ...[39461 bytes skipped]... ody"><iframe id='newfrm' height='176' width='950' frameborder='no' scrolling='no' src= 'http://www.100cpc.com/code/view_banner1.php?r=1&c=9&w=950&h=176&s=004080&bg=FFFFFF&p=808080&pt=y&u=7570&cu=1&at=p0'></iframe></div> <div id="links"> <h3>ÓÑÇéÁ´½Ó</h3> <div class="links_tx"> <ul class="s_clear"> <li><a href="http://www.anrenti.com" title="" target="_blank">´óµ¨ÈËÌåÒÕÊõ</a></li> <li><a href="http://www.siwa4.com" title="" target="_blank">Ë¿Íà»á</a></li> <li><a href="http://www.13z8.com" title="" target="_blank">µÚÈýÕß°É</a></li> <li><a href="http://www.qdxs.net" title="" target="_blank">ÆðµãÐÔÊÂ</a></li> <li><a href="http://mm.07967.com" title="" target="_blank">¼ª°²ÃÀÅ®Íø</a></li> ...[2809 bytes skipped]... Malicious iFrame found. size: 690x90 src: http://www.mren5.com/batch.ad.php?id=15 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=15" name="_ad_15" width="690px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> Malicious iFrame found. size: 960x90 src: http://www.mren5.com/batch.ad.php?id=14 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=14" name="_ad_14" width="960px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> | ||
http://mren5.com/templates/tdsjys/js/common.js | 200 OK Content-Length: 4986 Content-Type: application/x-javascript | clean |
http://mren5.com/include/js/menu.js | 200 OK Content-Length: 7532 Content-Type: application/x-javascript | clean |
http://mren5.com/include/js/ajax.js | 200 OK Content-Length: 14033 Content-Type: application/x-javascript | clean |
http://mren5.com/include/js/common.js | 200 OK Content-Length: 28286 Content-Type: application/x-javascript | clean |
http://app.adanzhuo.com/appiso.js?l=tjq&uid=120 | 200 OK Content-Length: 2695 Content-Type: application/x-javascript | clean |
http://js.xmyla.com/page/s.php?s=16065&w=728&h=90 | 200 OK Content-Length: 662 Content-Type: text/html | clean |
http://js.xmyla.com/test404page.js | 404 Not Found Content-Length: 571 Content-Type: text/html | clean |
http://mren5.com/batch.panel.php?rand=667023 | 200 OK Content-Length: 1932 Content-Type: text/html | clean |
http://mren5.com/do.php?action=register | 200 OK Content-Length: 4575 Content-Type: text/html | clean |
http://s6.cnzz.com/stat.php?id=2586651&web_id=2586651 | 200 OK Content-Length: 9321 Content-Type: application/javascript | clean |
http://mren5.com/action-news.html | 200 OK Content-Length: 33492 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.anrenti.com ...[39461 bytes skipped]... ody"><iframe id='newfrm' height='176' width='950' frameborder='no' scrolling='no' src= 'http://www.100cpc.com/code/view_banner1.php?r=1&c=9&w=950&h=176&s=004080&bg=FFFFFF&p=808080&pt=y&u=7570&cu=1&at=p0'></iframe></div> <div id="links"> <h3>ÓÑÇéÁ´½Ó</h3> <div class="links_tx"> <ul class="s_clear"> <li><a href="http://www.anrenti.com" title="" target="_blank">´óµ¨ÈËÌåÒÕÊõ</a></li> <li><a href="http://www.siwa4.com" title="" target="_blank">Ë¿Íà»á</a></li> <li><a href="http://www.13z8.com" title="" target="_blank">µÚÈýÕß°É</a></li> <li><a href="http://www.qdxs.net" title="" target="_blank">ÆðµãÐÔÊÂ</a></li> <li><a href="http://mm.07967.com" title="" target="_blank">¼ª°²ÃÀÅ®Íø</a></li> ...[2809 bytes skipped]... Malicious iFrame found. size: 960x90 src: http://www.mren5.com/batch.ad.php?id=14 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=14" name="_ad_14" width="960px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> Malicious iFrame found. size: 690x90 src: http://www.mren5.com/batch.ad.php?id=15 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=15" name="_ad_15" width="690px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> | ||
http://mren5.com/batch.panel.php?rand=149720 | 200 OK Content-Length: 1932 Content-Type: text/html | clean |
http://mren5.com/do.php?action=lostpasswd | 200 OK Content-Length: 4960 Content-Type: text/html | clean |
http://mren5.com/?action-news | 200 OK Content-Length: 33492 Content-Type: text/html | malicious |
Page code contains blacklisted domain: www.anrenti.com ...[39461 bytes skipped]... ody"><iframe id='newfrm' height='176' width='950' frameborder='no' scrolling='no' src= 'http://www.100cpc.com/code/view_banner1.php?r=1&c=9&w=950&h=176&s=004080&bg=FFFFFF&p=808080&pt=y&u=7570&cu=1&at=p0'></iframe></div> <div id="links"> <h3>ÓÑÇéÁ´½Ó</h3> <div class="links_tx"> <ul class="s_clear"> <li><a href="http://www.anrenti.com" title="" target="_blank">´óµ¨ÈËÌåÒÕÊõ</a></li> <li><a href="http://www.siwa4.com" title="" target="_blank">Ë¿Íà»á</a></li> <li><a href="http://www.13z8.com" title="" target="_blank">µÚÈýÕß°É</a></li> <li><a href="http://www.qdxs.net" title="" target="_blank">ÆðµãÐÔÊÂ</a></li> <li><a href="http://mm.07967.com" title="" target="_blank">¼ª°²ÃÀÅ®Íø</a></li> ...[2809 bytes skipped]... Malicious iFrame found. size: 960x90 src: http://www.mren5.com/batch.ad.php?id=14 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=14" name="_ad_14" width="960px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> Malicious iFrame found. size: 690x90 src: http://www.mren5.com/batch.ad.php?id=15 This URL is marked by Google as suspicious <iframe src="http://www.mren5.com/batch.ad.php?id=15" name="_ad_15" width="690px" height="90px" marginwidth="0" frameborder="0" scrolling="no" allowtransparency="true"> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mren5.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 26 Jun 2014 10:12:15 GMT
Server: kangle/3.2.6
Content-Type: text/html; charset=gbk
Set-Cookie: supe_sid=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
Set-Cookie: supe_auth=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
Set-Cookie: supe_sauth=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: mren5.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 26 Jun 2014 10:12:15 GMT
Server: kangle/3.2.6
Content-Type: text/html; charset=gbk
Set-Cookie: supe_sid=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
Set-Cookie: supe_auth=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
Set-Cookie: supe_sauth=deleted; expires=Wed, 26-Jun-2013 10:12:14 GMT; path=/
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: mren5.com
Referer: http://www.google.com/search?q=mren5.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mren5.com
Referer: http://www.google.com/search?q=mren5.com
Result:
The result is similar to the first query. There are no suspicious redirects found.