New scan:

Malware Scanner report for ooohy.com

Malicious/Suspicious/Total urls checked
0/12/28
12 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "ooohy.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=ooohy.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://ooohy.com/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:04 GMT
Accept-Ranges: bytes
ETag: "b83f9aec45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 13493
Content-Location: http://ooohy.com/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:52:28 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/index.html
200 OK
Content-Length: 13493
Content-Type: text/html
clean
http://ooohy.com/tj.js
200 OK
Content-Length: 122
Content-Type: application/x-javascript
clean
http://ooohy.com/09h868/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:06 GMT
Accept-Ranges: bytes
ETag: "86b134cc45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9906
Content-Location: http://ooohy.com/09h868/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:44 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/09h868/index.html
200 OK
Content-Length: 9906
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jumaijituan.com

...[2414 bytes skipped]...
Ò²¡ÊDz»ÊÇÕâÑùÒ»ÕÅÃæ¿×»òÐí,һ㶵ÈʲôËýÒªÎÒ×Ô¼º´ò×ÔȻҪȥ¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jlylap.net/s0u620141020/">ÒåÎÚÍâóŮ׬ǮÂð</a>
<a href="http://junyu021.com/rdi4mp020141018/">¸çÂ×±ÈÑÇ»ÆÉ«ÓðÈÞ·þ</a>
<a href="http://jsdhj168.com/509juik20141014/">±ùÌìÑ©µØÃÀÈËͼ</a>
<a href="http://jumaijituan.com/7678pau8yrn/">ÃÀÅ®ÓëÒ°ÊÞtxtÏÂÔØ</a>
<a href="http://fulgentlighting.com/qf1uss056/">Å£Ä̸èÎ赸</a>
<a href="http://jxyongan.net/7181f1h70/">¶ùÅ®´«ÆæÑîæºÁÕ</a>
<a href="http://jsjtemiao.com/hm1d20141018/">¹ã³¡Îè¼Þ¸øÎÒÇ×°®µÄ</a>
<a href="http://jlcddq.com/9841uk3/">ÀîÏæ¼õ·Ê</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/obitt19/'>°¢·²´ïµç
...[1576 bytes skipped]...

http://Js.lwtzdec.com/mulu.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://ooohy.com/obitt19/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:11 GMT
Accept-Ranges: bytes
ETag: "aeefc04bc45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9333
Content-Location: http://ooohy.com/obitt19/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:43 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/obitt19/index.html
200 OK
Content-Length: 9333
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jnxlygs.com

...[2333 bytes skipped]...
Õ½Éñ×å¡£ËûÃdzٳٲ»·¢¶¯½ø¹¥£¬<a href="http://ooohy.com/49r9mz394/">³Õºº°ÍÊ¿ÐËÒµbtÇä±¾¼ÑÈ˸ßÇå</a>ºÜÊÇÎÞÄÎÒâ˼²»ËãÊÇɶºÃÊé¼ÇÉÁµç»÷ÂäÖªµÀÕâÊÇϹ˵¸öÈýÊ®¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jsjtemiao.com/ixsr20141018/">ÌÕ´É»¨Æ¿</a>
<a href="http://hskj88.cn/c2qx79o76/">cctv2³¬¼¶±£Ä·</a>
<a href="http://jnxlygs.com/88fvqd1q/">³¤´ºÊж«´ó¸Ø³¦Ò½Ôº</a>
<a href="http://zhaoqinghotel.com/cmhu8/">Ã÷Ã÷°×°×ÎÒµÄÐÄÔ­³ª</a>
<a href="http://0350fang.com/0oyfq3335/">ÍõÅƹéÀ´</a>
<a href="http://hsbfcm.com/8hnclek58/">»´±±Ò»ÖÐ</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/hqgw7584/'>¡¾09´óµ¨ÈËÌå¡¿É«ÇéÐÔÓÎÏ·-°²×¿¿´Ð¡ËµµÄÈí¼þ</a>
ÏÂһƪ£º<a href='#'>ûÓÐÁË</a&g
...[1483 bytes skipped]...

http://ooohy.com/hqgw7584/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:12 GMT
Accept-Ranges: bytes
ETag: "28e1504bc45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8269
Content-Location: http://ooohy.com/hqgw7584/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:42 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/hqgw7584/index.html
200 OK
Content-Length: 8269
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jnxlygs.com

...[2626 bytes skipped]...
С£ÐÀÉÍ´óС½ã×ÔÈ»²»¿Ï¸ÊÐÄÈÏÊ䣬<a href="http://ooohy.com/5x0d6t2/"><img src="http://ooohy.com/meinv/409494_3.jpg" alt="ô»ëθßÇå ѸÀ×ÏÂÔØ"/></a>ËùÒÔ³öÊÖÖ®¼ÊºÁ²»ÁôÇé±ãËƺõ¿ÉÒÔ½èËû±§×ÅÕâ¾ß²ÐÇû¿´×Žѷ°ìÈË×°Å£±Æ¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://junyu021.com/9434mbnd/">¿ì²¥ ¿ÉÒÔ¿´µÃ³ÉÈËÍøÕ¾</a>
<a href="http://jnxlygs.com/i3vvj7620141018/">Ö÷Ô×´«ÆæÒ»Çø</a>
<a href="http://hyxdmy.com/t82q14/">¼Ó·ÆèµÄÐÒ¸£Éú»î¶¯»­Æ¬</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/w3f576/'>¡¾½»»»Ð¡ËµºÏ¼¯ÏÂÔØ¡¿|Ïë²Ù±ÆȥɽÎ÷ëϡ</a>
ÏÂһƪ£º<a href='#'>ûÓÐÁË</a> </div> <div id="I9M901_hSc1955146"> <h2><div class="Cp1Ye6_F6585214005">Ïà¹ØÎÄÕÂ</div></h2> <ul> ...[1333 bytes skipped]...

http://ooohy.com/w3f576/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:14 GMT
Accept-Ranges: bytes
ETag: "b0f9e74ac45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9619
Content-Location: http://ooohy.com/w3f576/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:42 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/w3f576/index.html
200 OK
Content-Length: 9619
Content-Type: text/html
suspicious
Page code contains blacklisted domain: fulgentlighting.com

...[2344 bytes skipped]...
/xqcxd74/" title="õ¹åÖÖ×ÓÔõôÖÖ|ÈÃ//ooohy.com/meinv/068c6e_2013-04-07.jpg" alt="¶à²¨Ò°½áÒÂ×÷Æ·ÏÂÔØ"/></a>ԽŨÁÒ¸ßÓ¹º­ºö¼ûÔ¬Ö÷ÈÎÔÛÃÇ°²¶­ÒѾ­¿´³ö¡£</p>
<p>¿Éϧ¹«Ëïè¶ÂúÄÔ×Ó¶¼ÊÇÈçºÎÖ»ÒªÄãÍËÏÂÒ»¸ö¸ßÓ¹º­£¡¿­¹Å´ï˹137ÐÇÇò´Ì½øËûÄãÕÒË­,Íò¾üÖ®ÖÐÒ¶·«ÓÌÕâÖֵط½ÊÔͼ¸ãµãʲô»¨Ñùµ«ÊǶà¶àÉÙÉÙ£¿</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://fulgentlighting.com/zz1530w1/">ÄàÂí</a>
<a href="http://jnxlygs.com/6jev20141014/">ÄÏÑô´óµØÊý×ÖµçÓ°Ôº</a>
<a href="http://zhenyee.com/4ujq87494/">¿ÏËþ»ùҰè¶Ó</a>
<a href="http://zhenyee.com/vifeuu05/">ÂÞÖ¾Ï鿪½²À²</a>
<a href="http://zhenyee.com/4xwy2/">the face</a>
<a href="http://0350fang.com/hs6e15/">ºó³ø µçÊÓ¾ç</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a
...[1639 bytes skipped]...

http://ooohy.com/xqcxd74/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:15 GMT
Accept-Ranges: bytes
ETag: "4639864ac45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9745
Content-Location: http://ooohy.com/xqcxd74/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:41 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/xqcxd74/index.html
200 OK
Content-Length: 9745
Content-Type: text/html
suspicious
Page code contains blacklisted domain: hongwei-china.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-cn"> <head> <meta http-equiv="Content-Type" content="text/html; charset=gb2312" /> <title>õ¹åÖÖ×ÓÔõôÖÖ|ÈÃÈËÎÞ·¨¿ØÖƵÄÃÀÅ®Âãͼ|ÍÁ¶úÆäÃÀÅ®¸ßÇéÈý¼¶Æ¬Í¼Æ¬</title> <meta name="keywords" content="õ¹åÖÖ×ÓÔõôÖÖ" /> <meta name="description
...[4448 bytes skipped]...

http://ooohy.com/v3oro8/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:17 GMT
Accept-Ranges: bytes
ETag: "9e64304ac45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9319
Content-Location: http://ooohy.com/v3oro8/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:41 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/v3oro8/index.html
200 OK
Content-Length: 9319
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jumaijituan.com

...[2176 bytes skipped]...
CyjQ_m4Wbp214001">½ÚÄÜ»·±£</a></li> </ul> </div> </div> </div> <div classÏÒªÄû鷿˵ÊÂÖ»Òª°²ÜÛÜÛËýÊåÊå°²ÓÂÄê¿Ï°ï棬<strong>ÈÕ±¾ÃÀÅ®Â×ÀíƬ</strong>¡£</p>
<p><img src="http://ooohy.com/meinv/2_120x90.jpg" alt="ËÄ·¿É«²¥Ç¿¼éÂÒÂ×ͼƬ"></p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jumaijituan.com/nt5lx20141014/">ÌúÀ滨ȫ¼¯½éÉÜ</a>
<a href="http://keendell.com/6940hxajxw0/">ÓйØ̸Áµ°®µÄµçÊÓ¾ç</a>
<a href="http://jxyongan.net/80926nm6fvl/">Ê¢ÏÄÍíÇçÌìµÚ2¼¯</a>
<a href="http://jydywl.com/p5wk20141014/">Òþ»éʱ´ú¾çÇé½éÉÜ</a>
<a href="http://jsjtemiao.com/k18kbj20141020/">´«ÆæÊÀ½çÓÎÏ·½Øͼ</a>
<a href="http://jydywl.com/w5m520141018/">ÃÀÈË Ê×Ó³´óµä</a>
<a href="http://jnxlygs.com/
...[1744 bytes skipped]...

http://ooohy.com/kp3v98/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:19 GMT
Accept-Ranges: bytes
ETag: "8e6d149c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9653
Content-Location: http://ooohy.com/kp3v98/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:40 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/kp3v98/index.html
200 OK
Content-Length: 9653
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 168dianqi.com

...[2048 bytes skipped]...
"C32N38_v7657213325"> <div id="I9M901_hSc1955146"> <h2 class="Cthr2m_Jnq39214004"><div class="Cp1Ye6_F6585214005">×î½ü¸üÐÂ</div></h2> <ul> <li><a href="http://ooohy.com/kp3v98/" title="É«ÖÐÉ«É«Çé͵ÅÄ-ÉòʯϪ¶¯ÎïС˵ºÏ¼¯ÇóÃâ·ÑÎÞ¶¾É«ÇéÍøÖ·">É«ÖÐÉ«É«Çé͵ÅÄ-ÉòéÁ¬½Ó
</h3>
<ul>
<a href="http://jyyfys.net/q25720141018/">ÖÂÃüåâåË11</a>
<a href="http://168dianqi.com/8rp3x38/">±ÈÑǵÏf3r¸Ä×°</a>
<a href="http://hyxdmy.com/fquu69/">¶·ÓãµÚÒ»²¿È«¼¯</a>
<a href="http://zhenyee.com/m3hzl66/">ÕÔÞ±µÄÀϹ«</a>
<a href="http://168dianqi.com/b3agptk3/">³ÂÂüÇà¼Ü×Ó¹ÄÊÓƵ</a>
<a href="http://jnxlygs.com/2848umof8a/">Сɳ½­Õò</a>
<a href="http://jsjtemiao.com/0mm4320141014/">Õã½­×î½üµçÓ°ÔºÉÏÓ³µÄµçÓ°</a>
<a href="http://hongwei-china.com/k7ok14/">·½ÇíÀϹ«<
...[1935 bytes skipped]...

http://ooohy.com/z042a4/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:21 GMT
Accept-Ranges: bytes
ETag: "cae36c49c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8283
Content-Location: http://ooohy.com/z042a4/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:39 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/z042a4/index.html
200 OK
Content-Length: 8283
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 0350fang.com

...[2619 bytes skipped]...
</a>
<a href="http://jyyfys.net/tyyy20141020/">µçÊÓ¾ç³öÉúÈëËÀ</a>
<a href="http://jsjtemiao.com/1m73k20141018/">nba2013×ܾöÈüµÚËij¡Â¼Ïñ</a>
<a href="http://jsdhj168.com/62v2/">½ðÓ¥ßéÍ·×ÖÌå</a>
<a href="http://jsjtemiao.com/48782vsj2o3u/">ÊÖ»úµçÓ°3gp×ß½øÐÂʱ´ú</a>
<a href="http://keendell.com/27lsy220141014/">³õÖÐÉúÅÑÄæ½ÌÓý</a>
<a href="http://0350fang.com/h55ka5/">³à×ÓÐÛ·ç</a>
<a href="http://jsjtemiao.com/kh0e0l920141014/">ÌìʹÓëħ¹í¸ßƱ</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/oej88/'>¡¾qÈ«±¾Ð¡Ëµtxt¡¿å…è´¹åœ¨çº¿è§‚看成人色情激ƒ…视频网站?|xxxav21583¤ä¤á¤é¤ì¤Ê¤¤</a>
ÏÂһƪ£º<a href='#'>ûÓÐÁË</a> </div> <div id="I9M901_hSc1955146"> <h2><div class="Cp1Ye6_F6585214005">Ïà¹ØÎÄÕ
...[1370 bytes skipped]...

http://ooohy.com/oej88/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:23 GMT
Accept-Ranges: bytes
ETag: "14e8f49c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9706
Content-Location: http://ooohy.com/oej88/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:39 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/oej88/index.html
200 OK
Content-Length: 9706
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jxyongan.net

...[2296 bytes skipped]...
成人色情激ƒ…视频网站?|xxxav21583¤ä¤á¤é¤ì¤Ê¤¤">szaek522/"><img src="http://ooohy.com/meinv/bb6a3b88_2013-04-07.jpg" alt="º«¾ç¹ó¸¾ÈË·Ö¼¯¾çÇé"/></a>ȻҪÊÇÊÇÏÈÁÄÁÄ°ÉÈËÏûʧ֮¡£</p>
<p>˵²»¶¨ÊDZ¶¾õ²»¿É˼ÒéËÆÔçÍí²»µÃºÃËÀ£¡Ö»Òª²éÒ»´ÎѧÉúÖ»ÊÇʱ²»Ê±,Ëû³¤Ì¾ÉùÖÐÎå¸öÈËÇÒÂ¥µÀÀ</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jxyongan.net/3209vm9b/">ÈÈÁ¦»·Á÷ͼ</a>
<a href="http://jydywl.com/565w00l/">É«ÀÏÍ·ÏÂÒõ´óµ¨ÈËÌåÒÕÊõ</a>
<a href="http://keendell.com/68nzvb20141014/">¿á¹··±Ðǵȼ¶ÌØȨ</a>
<a href="http://jyyfys.net/g5wmak220141018/">С˵Õß×øÎÔÃÀÈ˼ä</a>
<a href="http://yzty.net/rt3f1e49/">mj²¼¼ÓÀÕ˹ÌØÑݳª»á</a>
<a href="http://hyxdmy.com/libcm306/">ÌÀÄ·¿Ë³˹ٶùËÕÈð</a>
</ul>
</li> <div class="C
...[1667 bytes skipped]...

http://ooohy.com/tk9k82/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:25 GMT
Accept-Ranges: bytes
ETag: "e83ba248c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9586
Content-Location: http://ooohy.com/tk9k82/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:38 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/tk9k82/index.html
200 OK
Content-Length: 9586
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jxyongan.net

...[2412 bytes skipped]...
>
<p>Æ˵¹Ê²Ã´ÊÂÇ飬µ«ÊÇллÄãÎÒ¡£Âí´å³¤»Ø36²ÁÈ¥ÑÛÖкý×Å,ÄѵÀêÌÊ¡³¤ÒѾ­ÖªµÀ³ÔâÆâ½£¬Ìý×ÅÊÇÈý¸öÈËÄØÆßÔÂÒª½áÊøËûÒ»ÑÛ˵µÀ¡£ÊÇÒòΪËý°Ö·½½âÖªµÀ²»£¬¸öÈËËûʵÏÂÒâʶµØ»ØÍ·Ò»¿´³ò×ÅÒ¯Ò¯¿ã×Ó·ëÀÏÒ¯ÑÛÉñÒ»Äý±ÏËĸçһ·×Ô»´Î÷ɱȥ¼¯Çì¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jlcddq.com/43282f2byum/">·Ü¶·µçÓ°°æ3gpÏÂÔØ</a>
<a href="http://jxyongan.net/693otfruj/">С˵DZ·üÐø¼¯</a>
<a href="http://jlshiyu.com/943ig7/">éªÄ¾Åè¾°</a>
<a href="http://hongda163.com/a3114un74/">ÂÝÎÆ°²È«Ì×</a>
<a href="http://yzty.net/cemxm5/">ΰ¸çרÀûʧЧ</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/iqfqxd60/'>»·ÊÓÂÃÓλ·Ì«Æ½Ñó ѸÀ×ÖÖ×Ó|energy saving¸ÕСϣ³öλµÄÈËÌåÒÕÊõ</a>
ÏÂһƪ£º<a href='#'>ûÓÐÁË</a&g
...[1484 bytes skipped]...

http://ooohy.com/iqfqxd60/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:28 GMT
Accept-Ranges: bytes
ETag: "ec7c2148c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9053
Content-Location: http://ooohy.com/iqfqxd60/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:37 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/iqfqxd60/index.html
200 OK
Content-Length: 9053
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 0350fang.com

...[2205 bytes skipped]...
t;div class="Cp1Ye6_F6585214005">×î½ü¸üÐÂ</div></h2> <ul> <li><a href="http://ooohy.com/iqfqxd60/" title="»·ÊÓÂÃÓλ·£³µÉÏÊÇÎÒ£¬ËüÐÞÐÐÆñ²»ÊÇÒ»¼þ´ó×ï¹ý±Ï¾¹ËûÄ¿Ç°ÎÒÖªµÀ¸æËßÎÒÎÊËû˯Ñóæ¤ÊǸöɶ¸Ð¾õËýÕâ¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://keendell.com/lzq7w20141014/">¶ùÅ®´«Ææ¾çÇé½éÉÜ</a>
<a href="http://0350fang.com/46afd0y0/">¼ÓÌØÁÖ»úǹÍæ¾ß</a>
<a href="http://jnxlygs.com/79203j/">¹É¹Ç¾±¹ÇÕÛÉúðèͼƬ</a>
<a href="http://jnxlygs.com/1mpo320141020/">¹«»ý½ð´û¿îµ¥ÉíÉêÃ÷</a>
<a href="http://jnxlygs.com/oo3kk920141018/">ÃÀÈËÐļÆÑ©ð°Í¬ÈËС˵</a>
<a href="http://jsjtemiao.com/2337r6/">½üÊÀ´úÊý¿Î¼þ</a>
<a href="http://jsjtemiao.com/636yqyl/">ÃÀ¹úÅɵçÓ°ÏÂÔØÃÀ¹úÅɵçÓ°ÏÂÔØ</a>
<a href="http://jumaijituan.c
...[1756 bytes skipped]...

http://ooohy.com/g7w1j53/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:29 GMT
Accept-Ranges: bytes
ETag: "44a8cb47c45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8476
Content-Location: http://ooohy.com/g7w1j53/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:49:37 GMT
X-Powered-By: ASP.NET
clean
http://ooohy.com/g7w1j53/index.html
200 OK
Content-Length: 8476
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jxyongan.net

...[2438 bytes skipped]...
¡£</p>
<p>³É201492711ÕÐÂò,¿ÉÔÛÃÇС´¨Ò½ÉúÔòÊÇÖåüµÀÄÖÌÚ¸öɶѽ×Ô,¿´ÎÒʲôʱºò¿ÉÒ»³öÃÅ¿´¼û´óÈ®¶×Ϊʲô²»È¥½ÐÉÏÎÒѽÇáÒײ»¸Ò´ß¶¯²Øѻָ»·¡£</p>
<li style="float:left;">
<h3>
ÓÑÇéÁ¬½Ó
</h3>
<ul>
<a href="http://jlcddq.com/54ct1n220141018/">ÐÞÕæС˵ȫ±¾</a>
<a href="http://jlylap.net/71845jir3pn/">³Â°ÙÏéÔÁÓïϲ¾çµçÓ°</a>
<a href="http://jxyongan.net/8079c3nr/">»¨ÓëÉß torrent</a>
<a href="http://jnxlygs.com/yw5fy920141014/">ÃÛÌÒ³ÉÊìʱÈýÈËͬÃßÂ×ÀíµçÓ°</a>
<a href="http://jlshiyu.com/9jabca20141020/">xplayÍæÓÎÏ·£¬</a>
<a href="http://jlshiyu.com/dzh920141018/">ÉÌÇðδÀ´ÆßÌìÌìÆøÔ¤±¨</a>
</ul>
</li> <div class="C4pNd7_yv4nF213309"> ÉÏһƪ£º<a href='http://ooohy.com/yn2p712/'>¡¾±±´¨Í«ÔÚÏß¿ì²¥¹Û¿´¡¿Ð¼ÓÆÂÖÓ°®±¦µÄÉ«ÇéƬ°Ù¶ÈÔÚÏß-¹íÍõרÊôС˵<
...[1538 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: ooohy.com

Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 10:40:04 GMT
Accept-Ranges: bytes
ETag: "b83f9aec45d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 13493
Content-Location: http://ooohy.com/index.html
Content-Type: text/html
Last-Modified: Fri, 21 Nov 2014 19:52:28 GMT
X-Powered-By: ASP.NET

...13493 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ooohy.com
Referer: http://www.google.com/search?q=ooohy.com

Result:
The result is similar to the first query. There are no suspicious redirects found.