Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=sh86.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://sh86.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.sh86.com/ | 200 OK Content-Length: 60142 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: www.shbiz.net imgUrl1="http://cache.163data.net/images/ad/ad3.jpg"; imgtext1="¹ã¸æÒ»" imgLink1=escape("http://www.shbiz.net"); imgUrl2="http://cache.163data.net/images/ad/ad4.jpg"; imgtext2="¹ã¸æ¶þ" imgLink2=escape("http://www.shbiz.net"); imgUrl3="http://cache.163data.net/images/ad/ad3.jpg"; imgtext3="¹ã¸æÈý" imgLink3=escape("http://www.shbiz.net"); imgUrl4="http://cache.163data.net/images/ad/ad4.jpg"; imgtext4="¹ã¸æËÄ" imgLink4=escape("http://www.shbiz.net"); imgUrl5="http://cache.163data.net/images/ad/ad5.jp ...[1775 bytes skipped]... Decoded script: ...[323 bytes skipped]... wf"><param name="quality" value="high"><param name="bgcolor" value="#F0F0F0"><param name="menu" value="false"><param name=wmode value="opaque"><param name="FlashVars" value="pics=http://cache.163data.net/images/ad/ad3.jpg|http://cache.163data.net/images/ad/ad4.jpg|http://cache.163data.net/images/ad/ad3.jpg|http://cache.163data.net/images/ad/ad4.jpg|http://cache.163data.net/images/ad/ad5.jpg&links=http%3A//www.shbiz.net|http%3A//www.shbiz.net|http%3A//www.shbiz.net|http%3A//www.shbiz.net|http%3A//www.shbiz.net&texts=¹ã¸æÒ»|¹ã¸æ¶þ|¹ã¸æÈý|¹ã¸æËÄ|¹ã¸æÎå&borderwidth=521&borderheight=130&textheight=0"><embed src="images/ad/pixviewer.swf" wmode="opaque" FlashVars="pics=http://cache.163data.net/images/ad/ad3.jpg|http://cache.163data.net/images/ad/ad4.jpg|http://cache.163data.net/images/ad/ad3.jpg|http://cache.163data.net/images/ad/ad4.jpg|http://cache.163data.net/images/ad/ad5.jpg& ...[451 bytes skipped]... | ||
http://www.sh86.com/counter/count.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
http://www.sh86.com/test404page.js | 404 Not Found Content-Length: 1308 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: sh86.com
Result:
GET / HTTP/1.1
Host: sh86.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: sh86.com
Referer: http://www.google.com/search?q=sh86.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: sh86.com
Referer: http://www.google.com/search?q=sh86.com
Result:
The result is similar to the first query. There are no suspicious redirects found.