New scan:

Malware Scanner report for syxxy.com

Malicious/Suspicious/Total urls checked
1/2/20
3 pages have malicious or suspicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://syxxy.com/
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:51:59 GMT
Accept-Ranges: bytes
ETag: "e054bd4a9a7cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 12870
Content-Location: http://syxxy.com/index.html
Content-Type: text/html
Last-Modified: Thu, 24 Jul 2014 06:34:16 GMT
X-Powered-By: ASP.NET
clean
http://syxxy.com/index.html
200 OK
Content-Length: 12870
Content-Type: text/html
suspicious
Page code contains blacklisted domain: kfehome.com

...[2238 bytes skipped]...
getElementById("bdshell_js").src = "http://bdimg.share.baidu.com/static/js/shell_v2.js?t=" + new Date().getHours();
</script>
</div>
</div>
<div id="nav">
<div class="nav-top">
<ul>
<li class="index"><h1><a href="http://syxxy.com/">ÉòÑôöÎöÎÒw.com/baijialewanfa" target="_blank">мÓƶij¡</a></li>
<li><a href="http://kfehome.com/aomenduqiu" target="_blank">»Ê¹ÚÍø</a></li>
<li><a href="http://dxhjy.com/zgdq" target="_blank">ÑÇÖÞ²©²ÊÍø</a></li>
<li><a href="http://kfehome.com/zhongguoduqiu" target="_blank">Á¢²©</a></li>
<li><a href="http://0452cx.com/zgdq" target="_blank">°ÄÃÅÐǼʶij¡</a></li>

</ul>
</div>
</div>
<div id="footer">
ÓÉ<span style="fo
...[1910 bytes skipped]...

http://syxxy.com/common.js
200 OK
Content-Length: 280
Content-Type: application/x-javascript
malicious
Malicious code found. Script contains blacklisted domain: www.1581588.com

var gotourl = "http://www.1581588.com/";
document.writeln("<div style=\"background-color:#FFF;\"><IFRAME border=0 name=I1 align=center marginWidth=0 src=\""+gotourl+"\" frameBorder=0 width=\"100%\" scrolling=no height=4000 target=\"_blank\" target=\"_blank\"><\/IFRAME><\/div>");

Decoded script:


<div style="background-color:#FFF;"><IFRAME border=0 name=I1 align=center marginWidth=0 src="http://www.1581588.com/" frameBorder=0 width="100%" scrolling=no height=4000 target="_blank" target="_blank"></IFRAME></div>

http://syxxy.com/tj.js
200 OK
Content-Length: 120
Content-Type: application/x-javascript
clean
http://syxxy.com/sitemap.html
200 OK
Content-Length: 35198
Content-Type: text/html
clean
http://syxxy.com/l3diq/
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:52:04 GMT
Accept-Ranges: bytes
ETag: "9469335aeda6cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 13593
Content-Location: http://syxxy.com/l3diq/index.html
Content-Type: text/html
Last-Modified: Thu, 24 Jul 2014 03:14:16 GMT
X-Powered-By: ASP.NET
clean
http://syxxy.com/l3diq/index.html
200 OK
Content-Length: 13593
Content-Type: text/html
clean
http://syxxy.com/9p5pa/
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:52:05 GMT
Accept-Ranges: bytes
ETag: "7ee928489a7cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 13523
Content-Location: http://syxxy.com/9p5pa/index.html
Content-Type: text/html
Last-Modified: Thu, 24 Jul 2014 06:34:12 GMT
X-Powered-By: ASP.NET
clean
http://syxxy.com/9p5pa/index.html
200 OK
Content-Length: 13523
Content-Type: text/html
clean
http://syxxy.com/ahu5v/
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:52:07 GMT
Accept-Ranges: bytes
ETag: "a89df995eea6cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 13709
Content-Location: http://syxxy.com/ahu5v/index.html
Content-Type: text/html
Last-Modified: Thu, 24 Jul 2014 03:23:06 GMT
X-Powered-By: ASP.NET
clean
http://syxxy.com/ahu5v/index.html
200 OK
Content-Length: 13709
Content-Type: text/html
clean
http://syxxy.com/d3kt0/
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:52:08 GMT
Accept-Ranges: bytes
ETag: "54bc3bf3aa3cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 13608
Content-Location: http://syxxy.com/d3kt0/index.html
Content-Type: text/html
Last-Modified: Sat, 19 Jul 2014 04:36:04 GMT
X-Powered-By: ASP.NET
clean
http://syxxy.com/d3kt0/index.html
200 OK
Content-Length: 13608
Content-Type: text/html
clean
http://syxxy.com/d3kt0/131.html
200 OK
Content-Length: 16955
Content-Type: text/html
clean
http://syxxy.com/d3kt0/130.html
200 OK
Content-Length: 17230
Content-Type: text/html
clean
http://syxxy.com/d3kt0/129.html
200 OK
Content-Length: 17253
Content-Type: text/html
suspicious
Page code contains blacklisted domain: kfehome.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>¶«·½ÏÄÍþÒÄÓéÀÖ³ÇËÍ18ÔªÌåÑé½ðµÄ²©²ÊÍø ¼´È϶¨2013Äê10ÔÂ28ÈÕÇ©¶© - ÆóÒµÎÄ»¯ - ÉòÑôöÎöÎÒµÃÀÊõÉè¼Æ¹¤×÷ÊÒ</title>
<meta name="keywords" content="
...[4697 bytes skipped]...

http://syxxy.com/ahu5v/128.html
200 OK
Content-Length: 16901
Content-Type: text/html
clean
http://syxxy.com/d3kt0/127.html
200 OK
Content-Length: 16995
Content-Type: text/html
clean
http://syxxy.com/ahu5v/126.html
200 OK
Content-Length: 16742
Content-Type: text/html
clean
http://syxxy.com/d3kt0/125.html
200 OK
Content-Length: 17034
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: syxxy.com

Result:
HTTP/1.1 200 OK
Date: Thu, 24 Jul 2014 22:51:59 GMT
Accept-Ranges: bytes
ETag: "e054bd4a9a7cf1:301"
Server: Microsoft-IIS/6.0
Content-Length: 12870
Content-Location: http://syxxy.com/index.html
Content-Type: text/html
Last-Modified: Thu, 24 Jul 2014 06:34:16 GMT
X-Powered-By: ASP.NET

...12870 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: syxxy.com
Referer: http://www.google.com/search?q=syxxy.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=syxxy.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://syxxy.com/

Result: syxxy.com is not infected or malware details are not published yet.