Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=susen123.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.susen123.com/ | 200 OK Content-Length: 95524 Content-Type: text/html | malicious |
Page code contains blacklisted domain: key.ddoshome.com <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1></iframe><br /> <b>Warning</b>: strpos() [<a href='function.strpos'>function.strpos</a>]: Empty needle in <b>/home/hzpgocom/public_html/susen123.com/wp-load.php</b> on line <b>1</b><br /> <!DOCTYPE html> <html lang="zh-CN"> <head> <meta charset="UTF-8"> <meta name="viewport" conte ...[4530 bytes skipped]... Malicious iFrame found. size: 123x1 src: http://key.ddoshome.com:21999/index.htm This URL is marked by Google as suspicious <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1> | ||
http://cbjs.baidu.com/js/o.js | 200 OK Content-Length: 30612 Content-Type: application/x-javascript | clean |
http://s22.cnzz.com/stat.php?id=5545593&web_id=5545593 | 200 OK Content-Length: 10072 Content-Type: application/javascript | clean |
http://www.susen123.com/function.strpos | 200 OK Content-Length: 6516 Content-Type: text/html | malicious |
Page code contains blacklisted domain: key.ddoshome.com <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1></iframe><br /> <b>Warning</b>: strpos() [<a href='function.strpos'>function.strpos</a>]: Empty needle in <b>/home/hzpgocom/public_html/susen123.com/wp-load.php</b> on line <b>1</b><br /> <!DOCTYPE html> <html lang="zh-CN"> <head> <meta charset="UTF-8"> <meta name="viewport" conte ...[4458 bytes skipped]... Malicious iFrame found. size: 123x1 src: http://key.ddoshome.com:21999/index.htm This URL is marked by Google as suspicious <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1> | ||
http://www.susen123.com/test404page.js | 200 OK Content-Length: 6515 Content-Type: text/html | malicious |
Page code contains blacklisted domain: key.ddoshome.com <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1></iframe><br /> <b>Warning</b>: strpos() [<a href='function.strpos'>function.strpos</a>]: Empty needle in <b>/home/hzpgocom/public_html/susen123.com/wp-load.php</b> on line <b>1</b><br /> <!DOCTYPE html> <html lang="zh-CN"> <head> <meta charset="UTF-8"> <meta name="viewport" conte ...[4458 bytes skipped]... Malicious iFrame found. size: 123x1 src: http://key.ddoshome.com:21999/index.htm This URL is marked by Google as suspicious <iframe src=http://key.ddoshome.com:21999/index.htm width=123 height=1> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: susen123.com
Result:
GET / HTTP/1.1
Host: susen123.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: susen123.com
Referer: http://www.google.com/search?q=susen123.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: susen123.com
Referer: http://www.google.com/search?q=susen123.com
Result:
The result is similar to the first query. There are no suspicious redirects found.