Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sh-mrf.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sh-mrf.com
Result:
HTTP/1.1 200 OK
Date: Sat, 07 Mar 2015 03:30:46 GMT
Accept-Ranges: bytes
ETag: "3a3fd01565d01:5ff8"
Server: Microsoft-IIS/6.0
Content-Length: 27849
Content-Location: http://sh-mrf.com/index.html
Content-Type: text/html
Last-Modified: Thu, 20 Nov 2014 21:08:08 GMT
X-Powered-By: ASP.NET
...27849 bytes of data.
GET / HTTP/1.1
Host: sh-mrf.com
Result:
HTTP/1.1 200 OK
Date: Sat, 07 Mar 2015 03:30:46 GMT
Accept-Ranges: bytes
ETag: "3a3fd01565d01:5ff8"
Server: Microsoft-IIS/6.0
Content-Length: 27849
Content-Location: http://sh-mrf.com/index.html
Content-Type: text/html
Last-Modified: Thu, 20 Nov 2014 21:08:08 GMT
X-Powered-By: ASP.NET
...27849 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: sh-mrf.com
Referer: http://www.google.com/search?q=sh-mrf.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sh-mrf.com
Referer: http://www.google.com/search?q=sh-mrf.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://sh-mrf.com/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:30:46 GMT Accept-Ranges: bytes ETag: "3a3fd01565d01:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 27849 Content-Location: http://sh-mrf.com/index.html Content-Type: text/html Last-Modified: Thu, 20 Nov 2014 21:08:08 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/index.html | 200 OK Content-Length: 27849 Content-Type: text/html | clean |
http://Js.lwtzdec.com/taobao.js | 200 OK Content-Length: 183 Content-Type: application/x-javascript | clean |
http://sh-mrf.com/tj.js | 200 OK Content-Length: 122 Content-Type: application/x-javascript | clean |
http://sh-mrf.com/qixiawangzhan/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:30:52 GMT Accept-Ranges: bytes ETag: "e431c51323dbcf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 20365 Content-Location: http://sh-mrf.com/qixiawangzhan/index.html Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 13:49:51 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/qixiawangzhan/index.html | 200 OK Content-Length: 20365 Content-Type: text/html | clean |
http://sh-mrf.com/chanpinfuwu/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:30:54 GMT Accept-Ranges: bytes ETag: "98f6c91323dbcf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 18773 Content-Location: http://sh-mrf.com/chanpinfuwu/index.html Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 13:49:51 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/chanpinfuwu/index.html | 200 OK Content-Length: 18773 Content-Type: text/html | clean |
http://sh-mrf.com/lianxiwomen/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:30:56 GMT Accept-Ranges: bytes ETag: "4cbbce1323dbcf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 27425 Content-Location: http://sh-mrf.com/lianxiwomen/index.html Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 13:49:51 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/lianxiwomen/index.html | 200 OK Content-Length: 27425 Content-Type: text/html | clean |
http://sh-mrf.com/jituanjieshao/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:30:58 GMT Accept-Ranges: bytes ETag: "689dd1323dbcf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 27574 Content-Location: http://sh-mrf.com/jituanjieshao/index.html Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 13:49:52 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/jituanjieshao/index.html | 200 OK Content-Length: 27574 Content-Type: text/html | clean |
http://sh-mrf.com/yewupingtai/ | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:31:00 GMT Accept-Ranges: bytes ETag: "8457eb1323dbcf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 14709 Content-Location: http://sh-mrf.com/yewupingtai/index.html Content-Type: text/html Last-Modified: Sun, 28 Sep 2014 13:49:52 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/yewupingtai/index.html | 200 OK Content-Length: 14709 Content-Type: text/html | clean |
http://sh-mrf.com/yewupingtai/235443qvb383385.html | 200 OK Content-Length: 16213 Content-Type: text/html | clean |
http://sh-mrf.com/yewupingtai/{longshao_url} | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:31:03 GMT Accept-Ranges: bytes ETag: "2cd8ea1073d4cf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 1516 Content-Location: http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/yewupingtai/{longshao_url} Content-Type: text/html Last-Modified: Sat, 20 Sep 2014 01:34:48 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/yewupingtai/{longshao_url} | 200 OK Content-Length: 1516 Content-Type: text/html | clean |
http://sh-mrf.com/common.js | 200 OK Content-Length: 0 Content-Type: application/x-javascript | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/javascript | clean |
http://sh-mrf.com/test404page.js | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:31:05 GMT Accept-Ranges: bytes ETag: "2cd8ea1073d4cf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 1516 Content-Location: http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/test404page.js Content-Type: text/html Last-Modified: Sat, 20 Sep 2014 01:34:48 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/test404page.js | 200 OK Content-Length: 1516 Content-Type: text/html | clean |
http://sh-mrf.com/lianxiwomen/906730t2ye70099.html | 200 OK Content-Length: 17489 Content-Type: text/html | clean |
http://sh-mrf.com/lianxiwomen/{longshao_url} | HTTP/1.1 200 OK Date: Sat, 07 Mar 2015 03:31:07 GMT Accept-Ranges: bytes ETag: "2cd8ea1073d4cf1:5ff8" Server: Microsoft-IIS/6.0 Content-Length: 1516 Content-Location: http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/lianxiwomen/{longshao_url} Content-Type: text/html Last-Modified: Sat, 20 Sep 2014 01:34:48 GMT X-Powered-By: ASP.NET | clean |
http://sh-mrf.com/404.html?404;http://sh-mrf.com:80/lianxiwomen/{longshao_url} | 200 OK Content-Length: 1516 Content-Type: text/html | clean |