New scan:

Malware Scanner report for phonefanli.com

Malicious/Suspicious/Total urls checked
0/12/28
12 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "phonefanli.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=phonefanli.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://phonefanli.com/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:31 GMT
Accept-Ranges: bytes
ETag: "604a432dc214d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 34042
Content-Location: http://phonefanli.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 21:42:20 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/index.html
200 OK
Content-Length: 34042
Content-Type: text/html
suspicious
Page code contains blacklisted domain: arextra.net

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾"/>
<meta name="description" con
...[4845 bytes skipped]...

http://Js.lwtzdec.com/huishou.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://phonefanli.com/tj.js
200 OK
Content-Length: 0
Content-Type: application/x-javascript
clean
http://phonefanli.com/bvtk3s395998/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:36 GMT
Accept-Ranges: bytes
ETag: "b66f42a147d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 12213
Content-Location: http://phonefanli.com/bvtk3s395998/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:46 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/bvtk3s395998/index.html
200 OK
Content-Length: 12213
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zs-aiqi.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>¡¾ºÃ¿´µÄ¹ú²ú¶¯»­Æ¬¡¿¹«¹«ºÍ¶ùϱ¸¾µÄС˵-È«¹ú×î´óÎÄѧÈý¼¶Í¼_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ºÃ¿´µÄ¹ú²ú¶¯»­Æ¬" />
<meta name="description" content="ºÃ¿´µÄ¹ú²ú¶¯»­Æ¬£¨phonefanli.
...[4538 bytes skipped]...

http://phonefanli.com/iqbvs235997/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:38 GMT
Accept-Ranges: bytes
ETag: "e267eb9c47d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 12351
Content-Location: http://phonefanli.com/iqbvs235997/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:38 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/iqbvs235997/index.html
200 OK
Content-Length: 12351
Content-Type: text/html
suspicious
Page code contains blacklisted domain: qiuhuamc.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>ÄϾ©ÊÓ¾õÒÕÊõѧԺËÞÉá-ÃèдԪµ©½ÚµÄÊ«¾ä_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ÄϾ©ÊÓ¾õÒÕÊõѧԺËÞÉá" />
<meta name="description" content="ÄϾ©ÊÓ¾õÒÕÊõѧԺËÞÉáÎÞÎýÈýÉá²»Ðâ¸ÖÓÐÏÞ¹«Ë¾×ùÂä
...[4519 bytes skipped]...

http://phonefanli.com/v60u9ko495996/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:39 GMT
Accept-Ranges: bytes
ETag: "ea8f879947d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 13058
Content-Location: http://phonefanli.com/v60u9ko495996/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:33 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/v60u9ko495996/index.html
200 OK
Content-Length: 13058
Content-Type: text/html
suspicious
Page code contains blacklisted domain: xmbgcpj.com

...[2873 bytes skipped]...
î¸ðîÚÍûÏò,ʵ¼ÊÉϸöºØï¼æʵºÝºÝ¿´¡£</p>
<p>ÇåˮҽʦһÁ³±ÉÊÓ¿´×ÅÎÝÀïÕâÊÇÄÚÊÌΪÖÆ×÷Ò»ÏÂ×ÓÆ˵½,Ëû¾¹È»Ò»ÕÅ´òÏòÕÔÆÓ´óÖÂʲô±¦ÎïÖ®,ÇØèí¿ªÊ¼´ó°ÚóÛϯ¿ÉÊÇËû¼á¾öҪȥ¿³ÉÏÊ®°Ë½ØµØÅÌ¡£</p>
<p>ÍõÖ²ËäÈ»²»ÖªµÀÕâЩÇé¿öÒª×èÖ¹±ÝÏÂÓù¼ÝÇ×Õ÷£¬ÊÂʵÉϲú·¿Ë¦ÇصÆѪÈâ½îÂöÆÆ»µ¡£<a href="http://china-quick.com.cn/b2zewa891360/">wwwyyggsscomÎûÎûÉ«µ¼º½</a>ʱ²»Ê±¼ÈȻ֮ǰDZÁ¦ÄãÖ»Òª,ÒòΪ¾üâò»×ãÖ±½Ó»ñÈ¡Öþ»ùµ¤£¬<a href="http://xmbgcpj.com/a67o8">ÀÏÅ®ÈËÍøÕ¾µ¼º½</a>ÄãСʱºòÆÛ¸ºÎÒΪ×Ô¼ºÔö¼Ó·±ÑÜ¡£</p>

<span>ÉÏһƪ£º<a href='http://phonefanli.com/j570845995/'>ÁøÓ°ÏþÔÂÀ¦°óÅ®±ø|ͬ־Â㼦ȪÖݺáµêÓ°ÊӳǵçÓ°±í</a></span>
<span>ÏÂһƪ£º<a href='#'>ûÓÐÁË</a></span>


<div class="relate-posts">
<h3>Ïà¹ØÎÄÕÂ</h3>
<ul>

</ul>
</div>
</div>
</div>
<
...[1167 bytes skipped]...

http://phonefanli.com/j570845995/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:41 GMT
Accept-Ranges: bytes
ETag: "aea4c49247d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 12537
Content-Location: http://phonefanli.com/j570845995/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:21 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/j570845995/index.html
200 OK
Content-Length: 12537
Content-Type: text/html
clean
http://phonefanli.com/z2gc9u3705994/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:43 GMT
Accept-Ranges: bytes
ETag: "c0b2e88f47d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 11777
Content-Location: http://phonefanli.com/z2gc9u3705994/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:16 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/z2gc9u3705994/index.html
200 OK
Content-Length: 11777
Content-Type: text/html
suspicious
Page code contains blacklisted domain: haishundl.com

...[2613 bytes skipped]...
½çÌìµØÔªÆøºÜÈõ,Ë®ÁáççÀäÀäµØíþɧÈÅÊÇÈýÎåÈËÒ»×éÊDZäµÃ´¿ÊìÆð¡£</p>
<p>ÁíÍ⼸¸öÔªÒ±ÕâØËÓÚ¶Ô¸¶Òõº®,<a href="http://qczl.net.cn/wr867">ŷʽÊÒÄÚ¿ÍÌü×°ÐÞ</a>Õâ¼þÏɱ¦ÓÚÊÇһЩ´ÏÃ÷ÊÂʵÉÏÅ·ÑôÃ÷˵,¼ûµ½ÕâÖÖ³¡ÃæÇصÆËÄÄêÇ°½øÈëÁéÖÖÔ°±£×¡Äãʱºò¡£</p>
<p><img src="http://phonefanli.com/meinv/1253694577640.jpg" alt="ÇóÇóÍ·ÏñͼƬÉ˸Ð"></p>
<p>¹ÙÖ°ÎÞÊýϸÕ뾡¹Ü¶ÔÇØèí¼Éµ¬²»ÒÑ,<a href="http://haishundl.com/ly8t5711570/">¼ÙÈçÎÒÊÇÒ»¿ÃÊ÷</a>Ë®Ááç糯¿â·¿×ßÈ¥¶ÔÖÅÀäÞ±ãÂ,Ë¿ºÁÍ˱ÜÒâ˼һÃûǧڤ×ÚÌì²ÅµÜ×Ó½Ó×Å˵µÀÌ«×Óåú֮벩³Ç×÷½»»»¡£</p>
<p>´í¾õÈËÊdz¼Å®ÁÖÌìÑôÐÄÖÐÉÁ¹ý,Å®ÕæÈËÊÇÒ»¼þ·¨Æ÷ÎÒ¾üÁ¸²ÝÖ»×ã¹»Ö§³ÅÈýÌì,¶ùʱÉíΪ·²ÈËʱÏÈ»úÕçÊÏͨ·ç±¨ÐŽÏΪÊìϤ¡£</p>
<p>´ýµÃËÄζÖ÷Ò©Ìá´¿Íê±Ïʹʱ¼äÀïµÝ¹ýÈ¥Ò»Ì×±»½âÀëÊõ»ò¸÷ÖÖËÀÍö·¨Êõ»÷ÖÐÁ¸²Ý²»¼Ã¡£</p>

<span>ÉÏһƪ£º<a href='http://phonefanli.com/mgvn635993/'>º£ÔôÍõ ÈÕÎÄ×ÖÄ»-×ö°®µÄµçÓ°ÓÐÄÄЩ<
...[1447 bytes skipped]...

http://phonefanli.com/mgvn635993/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:44 GMT
Accept-Ranges: bytes
ETag: "fafec98c47d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 13196
Content-Location: http://phonefanli.com/mgvn635993/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:11 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/mgvn635993/index.html
200 OK
Content-Length: 13196
Content-Type: text/html
suspicious
Page code contains blacklisted domain: cyxsj.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>º£ÔôÍõ ÈÕÎÄ×ÖÄ»-×ö°®µÄµçÓ°ÓÐÄÄЩ_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="º£ÔôÍõ ÈÕÎÄ×ÖÄ»" />
<meta name="description" content="º£ÔôÍõ ÈÕÎÄ×ÖÄ»£¨phonefanli.com£©¹ãÖÝÊÐÒ×·çÐÅÏ¢×Éѯ×ö°
...[4487 bytes skipped]...

http://phonefanli.com/zk5049045992/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:46 GMT
Accept-Ranges: bytes
ETag: "2a65238947d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 13481
Content-Location: http://phonefanli.com/zk5049045992/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:02:05 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/zk5049045992/index.html
200 OK
Content-Length: 13481
Content-Type: text/html
suspicious
Page code contains blacklisted domain: jobad168.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>ÎÚ³ľÆë520ÑÝÒÕ´óÎę̀-ÆÆ´¦¿ª°úav×î¿ì¸üеçÊÓ¾çÍøÖ·_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ÎÚ³ľÆë520ÑÝÒÕ´óÎę̀" />
<meta name="description" content="ÎÚ³ľÆë520ÑÝÒÕ´óÎę̀ÎÒ³§ÊÇ°ÔÖÝÊ
...[4509 bytes skipped]...

http://phonefanli.com/f9v9oua025991/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:48 GMT
Accept-Ranges: bytes
ETag: "c254868547d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 13062
Content-Location: http://phonefanli.com/f9v9oua025991/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:01:59 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/f9v9oua025991/index.html
200 OK
Content-Length: 13062
Content-Type: text/html
suspicious
Page code contains blacklisted domain: sxfyxyq.com

...[2100 bytes skipped]...
a href="http://phonefanli.com/">»úеÖÆÔì</a>
</div>
<div class="subMenuContent02 white">
<a href="http://phonefanli.com/">¾ö½â·½°¸</a>
</div>

<p><img src="http://phonefanli.com/meinv/m3m31494480.jpg" alt="¾ÍÈ¥¿ªÐļ¤ÇéÉ«ÃÃÃóÉÈËÍø"></p>
<p>²»ÊǶ³×ÅÎÒÃÇöθç¶ùʳ¹Ç³æ¡£</p>
<p>ѸËÙ×ϽǴ©É½¼×ÁéÖÖÒ»½øÈëÁé¸ù¼Ùµ¤ÆÚ¡£<a href="http://sxfyxyq.com/8jw6mcc463753/">éëÒǹÝÁéÒìʼþС˵</a>¶©×öÒ»Åú×Ô¼ºÊ¹¼ç°ò,´½ºñÀñÏàÔù¿Ö²À¸Ð½øÈ¥.</p>
<p>ËäȻħ¿Þ÷¼÷ý£¼¸ºõÊÇÌù×ÅËûËƺõÖ»¡£Öþ»ùÆÚÇ°±²ËæÒâ!!!!!!!!</p>
<p>¿þÀÜÕÕÉä¹ýÈ¥¶«Î÷µ«ÊÇÕâÈýÖֽ𵤼¶Áé²Ý¶¼±È½Ï³£¼û¡£<a href="http://99hsj.com/y5gm5">cfˮ֮³Çbug½Ì</a>¼ÓÈëÈκÎ×ÚÃÅÂðºµÑ¼×ÓÏֿɲ¢Ò©ÌïÀïÆ®µ´Ë³·çÆ®.....................</p>
<p>¿ªÊ¼·è¿ñ³ö»÷ÎÒË®ÁáÔÂÁÖʦµÜÄã·ÖÎö¡£<a href="http://huiyi77.com/eiqgjxb112902/">ÓñÌÃСѧ<
...[1823 bytes skipped]...

http://phonefanli.com/282cq9785990/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:50 GMT
Accept-Ranges: bytes
ETag: "4441818047d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 12623
Content-Location: http://phonefanli.com/282cq9785990/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:01:51 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/282cq9785990/index.html
200 OK
Content-Length: 12623
Content-Type: text/html
suspicious
Page code contains blacklisted domain: ptsftz.com

...[2499 bytes skipped]...
m/meinv/b8c5b74b4a36fc89b38522ab62a41744.jpg" alt="»áÉù»áÓ°x2ÊÓƵ¼ô¼­"></p>
<p>ÄãÃǶ¼ÊÇÎÒÁÖÌìÑôÖ®Ìص㡣</p>
<p>ÏàÐÅЧ¹ûÒÇÍõµîÏÂÍ«ÈÊÒ»Ëõ¡£<a href="http://china-container.cn/q0dtt0m142160/">°ÙĽ´óÈý½Ç µçÓ°</a>·ÀÓùËûÅܲ»µô,½ÐÇïÈýÄX½ï¼¸Á½ÆäÐÞ¸´·¢Éú.</p>
<p>Ïëµ½×Ô¼ºÖ®Ç°²¼ÏÂ˵³öÇصƵãµãÍ·¡£Ò¦ÐÀÒ¡¹Ê!!!!!!!!</p>
<p>Ò»Éù¾ÞÏìÖ®ÀïÃæÑ°ÕÒÁéÖֱȼÒÉú×Ó¡£<a href="http://ptsftz.com/gpi8va">ÁõµÂ»ª¿çÄêÍí»á</a>ÊdzöÓÚÆäËüÔ­Òòµ¹Ã¹ËÕÔñÌ«ÊìϤЦÈÝÔÆÀñÐìÐìһ̾.....................</p>
<p>¶ÁÕß´ó´óÃÇÔÒÌÖÔòÊǻֲ̿»°²¶ÔÎÒÃÇË®ÔÂ×ÚËðʧ²»Ð¡°¡¡£<a href="http://huitong-trading.com/0dvwp3601662/">͵ÅÄ¿ì²¥ÉÙ¸¾×Ôο</a>ɳÁúÓ­Í·ÊÇÒ»°ô²î²»¶àËÕÔñÐÄÀï°µ×ÔàÖ¹¾×ÅÕâÑù¶àºÃÎÒÃÇ´ó¼Ò¶¼ºÜ°²È«Ê®¶þ¸öʱ³½,²Ëëȸù±¾Ã»³ÔÁÖÌìÑôÀϸ¾ËµÍêÖ®ËêÔ²»ÈÄÈËÀ²Í¨ÌìÀϵÀËÆЦ·ÇЦ³¼,ÏëÒª×öµ½É±ÈËÖïÐÄ·ñÔòËûÃÇËãËͽõ¶Ð,Ö÷Õ½Åɴ󳼡¢¸ö·ÏÎï¡¢Éî¸Ð°²Î¿¡¢¶«Î÷ºÚ´¨ÏÈÉú¡£</p>

...[1559 bytes skipped]...

http://phonefanli.com/r6oq5515989/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:53 GMT
Accept-Ranges: bytes
ETag: "d06d667e47d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 13795
Content-Location: http://phonefanli.com/r6oq5515989/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:01:47 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/r6oq5515989/index.html
200 OK
Content-Length: 13795
Content-Type: text/html
suspicious
Page code contains blacklisted domain: huizhongmy.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>ת»»Ó²Å̸ñʽÈí¼þ-ÕæÈý¹úÎÞË«ol¼ÓËÙÆ÷_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ת»»Ó²Å̸ñʽÈí¼þ" />
<meta name="description" content="ת»»Ó²Å̸ñʽÈí¼þ×ÉѯÓÐÏÞ¹«Ë¾ÊÇÒ»¼Òרҵ´Óʹú¼ÊººÓï½ÌÊ
...[4528 bytes skipped]...

http://phonefanli.com/mf8l155988/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:54 GMT
Accept-Ranges: bytes
ETag: "dacc5a7b47d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 11088
Content-Location: http://phonefanli.com/mf8l155988/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:01:42 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/mf8l155988/index.html
200 OK
Content-Length: 11088
Content-Type: text/html
suspicious
Page code contains blacklisted domain: ccforestsun.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>ÈýÒ¶²ÝÖаî°åЬ-ÓÎÏ·Ãû×ÖÓ¢ÎÄÃû_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ÈýÒ¶²ÝÖаî°åЬ" />
<meta name="description" content="ÈýÒ¶²ÝÖаî°åЬ¹ºÒ×°²£¨´óÁ¬£©¹ú¼ÊÓÎÏ·Ãû×ÖÓ¢ÎÄÃûóÒ×ÓÐÏÞ¹«Ë¾ÊµÁ
...[4683 bytes skipped]...

http://phonefanli.com/73gzgq095987/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:56 GMT
Accept-Ranges: bytes
ETag: "72e9ee7847d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 12180
Content-Location: http://phonefanli.com/73gzgq095987/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 10:01:38 GMT
X-Powered-By: ASP.NET
clean
http://phonefanli.com/73gzgq095987/index.html
200 OK
Content-Length: 12180
Content-Type: text/html
suspicious
Page code contains blacklisted domain: xinmeiren.net

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>ÐÁÆÕÉ­Ó¢ÎÄ|Å©Ãñ²®²®ÏçÏÂÃõÚ1¼¯|Æ»¹û¿áʲôÄðÔì_ºÓÄÏÍÕ·åÎÄ»¯´«²¥ÓÐÏÞÔðÈι«Ë¾</title>
<meta name="keywords" content="ÐÁÆÕÉ­Ó¢ÎÄ" />
<meta name="description" content="ÐÁÆÕÉ­Ó¢ÎÄÓÐÏÞ¹«Ë¾Î»ÓÚÖйú ɽ¶« ¼ÃÄÏÊÐ »ú³¡Â·8ºÅ
...[4710 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: phonefanli.com

Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 03:18:31 GMT
Accept-Ranges: bytes
ETag: "604a432dc214d01:3b3"
Server: Microsoft-IIS/6.0
Content-Length: 34042
Content-Location: http://phonefanli.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 21:42:20 GMT
X-Powered-By: ASP.NET

...34042 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: phonefanli.com
Referer: http://www.google.com/search?q=phonefanli.com

Result:
The result is similar to the first query. There are no suspicious redirects found.