Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=onlykx.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: onlykx.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Fri, 27 Jun 2014 23:56:48 GMT
Server: IIS
Content-Length: 18966
Content-Type: text/html; Charset=UTF-8
Set-Cookie: ASPSESSIONIDQSCATBQC=DKIPANFCBBBEFMLDEEIDNFOI; path=/
X-Powered-By: WAF/2.0
...18966 bytes of data.
GET / HTTP/1.1
Host: onlykx.com
Result:
HTTP/1.1 200 OK
Cache-Control: private
Connection: close
Date: Fri, 27 Jun 2014 23:56:48 GMT
Server: IIS
Content-Length: 18966
Content-Type: text/html; Charset=UTF-8
Set-Cookie: ASPSESSIONIDQSCATBQC=DKIPANFCBBBEFMLDEEIDNFOI; path=/
X-Powered-By: WAF/2.0
...18966 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: onlykx.com
Referer: http://www.google.com/search?q=onlykx.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: onlykx.com
Referer: http://www.google.com/search?q=onlykx.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
| Request | Server response | Status |
http://onlykx.com/ | 200 OK Content-Length: 18966 Content-Type: text/html | clean |
http://onlykx.com/script/common.js | HTTP/1.1 200 OK Connection: close Date: Thu, 26 Jun 2014 14:54:35 GMT Accept-Ranges: bytes ETag: "d22a22cfbdbace1:16019" Server: IIS Content-Length: 43233 Content-Location: http://onlykx.com/script/common.js Content-Type: application/x-javascript Last-Modified: Thu, 26 Sep 2013 13:39:22 GMT X-Died: timeout at scan.pm line 1538. X-Powered-By: WAF/2.0 | clean |
http://onlykx.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://onlykx.com/function/c_html_js_add.asp | 200 OK Content-Length: 1090 Content-Type: application/x-javascript | clean |
http://js.zhizunlm.com/page/s.php?s=17293&w=200&h=200 | 400 Bad Request Content-Length: 39 Content-Type: text/html | clean |
http://js.kk7kk.com/pagecpc/i?z=35876 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Fri, 27 Jun 2014 23:57:30 GMT Location: /adscpc/i.php?z=35876 Server: nginx/1.2.4 Content-Type: text/html; charset=utf-8 P3P: CP=CAO PSA OUR X-Powered-By: PHP/5.2.14p1 | clean |
http://js.kk7kk.com/adscpc/i.php?z=35876 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Fri, 27 Jun 2014 23:57:31 GMT Location: /adscpc/i7click.php?z=35876 Server: nginx/1.2.4 Content-Type: text/html X-Powered-By: PHP/5.2.14p1 | clean |
http://js.kk7kk.com/adscpc/i7click.php?z=35876 | 200 OK Content-Length: 33 Content-Type: text/html | clean |
http://code.ynlssc.com/i.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://www.txkjad.com/txkjad.js?l=wuxin&uid=43390 | 200 OK Content-Length: 1075 Content-Type: application/x-javascript | clean |
http://jscode.v5ad.com/page/i.php?s=12711&w=898&h=60 | 500 Can't connect to jscode.v5ad.com:80 (Bad hostname) Content-Length: 162 Content-Type: text/plain | clean |