New scan:

Malware Scanner report for wfd-bearing.com

Malicious/Suspicious/Total urls checked
0/9/55
9 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "wfd-bearing.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=wfd-bearing.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://wfd-bearing.com/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:27:36 GMT
Accept-Ranges: bytes
ETag: "a2323adfc114d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 18025
Content-Location: http://wfd-bearing.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 21:40:10 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/index.html
200 OK
Content-Length: 18025
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zzhoard.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" content="Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾"/>
<met
...[4770 bytes skipped]...

http://Js.lwtzdec.com/huishou.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://wfd-bearing.com/tj.js
200 OK
Content-Length: 0
Content-Type: application/x-javascript
clean
http://wfd-bearing.com/cubzq236000/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:44 GMT
Location: http://wfd-bearing.com/cubzq236000/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/test404page.js
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:27:44 GMT
Accept-Ranges: bytes
ETag: "ce6e1c7811d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 1569
Content-Location: http://wfd-bearing.com/404.html?404;http://wfd-bearing.com:80/test404page.js
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:25:01 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/404.html?404;http://wfd-bearing.com:80/test404page.js
200 OK
Content-Length: 1569
Content-Type: text/html
clean
http://www.qq.com/404/search_children.js
200 OK
Content-Length: 295
Content-Type: application/javascript
clean
http://js.users.51.la/17453581.js
200 OK
Content-Length: 1930
Content-Type: application/x-javascript
clean
http://wfd-bearing.com/gn2p33395999/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:47 GMT
Location: http://wfd-bearing.com/gn2p33395999/
Server: Microsoft-IIS/6.0
Content-Length: 159
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/8w24tz995998/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:47 GMT
Location: http://wfd-bearing.com/8w24tz995998/
Server: Microsoft-IIS/6.0
Content-Length: 159
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/my2k805997/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:47 GMT
Location: http://wfd-bearing.com/my2k805997/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/g079t585996/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:48 GMT
Location: http://wfd-bearing.com/g079t585996/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/e0y5905995/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:48 GMT
Location: http://wfd-bearing.com/e0y5905995/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/nrsg3xx645994/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:49 GMT
Location: http://wfd-bearing.com/nrsg3xx645994/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/hus5805993/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:49 GMT
Location: http://wfd-bearing.com/hus5805993/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/9joa2sl485992/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:49 GMT
Location: http://wfd-bearing.com/9joa2sl485992/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/f5mk7885991/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:50 GMT
Location: http://wfd-bearing.com/f5mk7885991/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/xre08iw59106/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:50 GMT
Location: http://wfd-bearing.com/xre08iw59106/
Server: Microsoft-IIS/6.0
Content-Length: 159
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/8iwb8oj523467/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:51 GMT
Location: http://wfd-bearing.com/8iwb8oj523467/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/nmul34971/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:51 GMT
Location: http://wfd-bearing.com/nmul34971/
Server: Microsoft-IIS/6.0
Content-Length: 156
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/ss1m803646/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:52 GMT
Location: http://wfd-bearing.com/ss1m803646/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/5ukv051720/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:52 GMT
Location: http://wfd-bearing.com/5ukv051720/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/nk3rz244543/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:52 GMT
Location: http://wfd-bearing.com/nk3rz244543/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/5l8m963089/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:53 GMT
Location: http://wfd-bearing.com/5l8m963089/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/0ng3nl3925539/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:53 GMT
Location: http://wfd-bearing.com/0ng3nl3925539/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/kph89hc214227/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:54 GMT
Location: http://wfd-bearing.com/kph89hc214227/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/2em81515470/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:54 GMT
Location: http://wfd-bearing.com/2em81515470/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/drn0973504/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:54 GMT
Location: http://wfd-bearing.com/drn0973504/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/zgpf64023547/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:55 GMT
Location: http://wfd-bearing.com/zgpf64023547/
Server: Microsoft-IIS/6.0
Content-Length: 159
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/915frr442435/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:55 GMT
Location: http://wfd-bearing.com/915frr442435/
Server: Microsoft-IIS/6.0
Content-Length: 159
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/08b25a58465/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:56 GMT
Location: http://wfd-bearing.com/08b25a58465/
Server: Microsoft-IIS/6.0
Content-Length: 158
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/suy077h902851/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:56 GMT
Location: http://wfd-bearing.com/suy077h902851/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/t6a6415259/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:57 GMT
Location: http://wfd-bearing.com/t6a6415259/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/uuy2711519/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:57 GMT
Location: http://wfd-bearing.com/uuy2711519/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/ny6r841995769/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:57 GMT
Location: http://wfd-bearing.com/ny6r841995769/
Server: Microsoft-IIS/6.0
Content-Length: 160
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/tp94f36752/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:58 GMT
Location: http://wfd-bearing.com/tp94f36752/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/rh1k154424/
HTTP/1.1 301 Moved Permanently
Date: Sat, 17 Jan 2015 07:27:58 GMT
Location: http://wfd-bearing.com/rh1k154424/
Server: Microsoft-IIS/6.0
Content-Length: 157
Content-Type: text/html
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/sitemap.html
200 OK
Content-Length: 121720
Content-Type: text/html
clean
http://wfd-bearing.com/ukimu00115990/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:01 GMT
Accept-Ranges: bytes
ETag: "dc1e146dfb6d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 12749
Content-Location: http://wfd-bearing.com/ukimu00115990/index.html
Content-Type: text/html
Last-Modified: Sun, 23 Nov 2014 08:56:53 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/ukimu00115990/index.html
200 OK
Content-Length: 12749
Content-Type: text/html
suspicious
Page code contains blacklisted domain: yimingjx.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>ÇïË®ÒÁÈËÃû´Ê½âÊÍ-À¥Ã÷ÂÖÌ¥Åú·¢¼ÓÌÚÄÎÑë_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" content="ÇïË®ÒÁÈË
...[4411 bytes skipped]...

http://wfd-bearing.com/9ezq3583106/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:02 GMT
Accept-Ranges: bytes
ETag: "9462516e644d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 11431
Content-Location: http://wfd-bearing.com/9ezq3583106/index.html
Content-Type: text/html
Last-Modified: Thu, 20 Nov 2014 01:50:58 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/9ezq3583106/index.html
200 OK
Content-Length: 11431
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 4006692292.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¸ÉÒ»úÊ²Ã´ÅÆ×ÓºÃ-·î½ÚÆê³È2014ÄêÊÕ¹º¼Û_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" content="¸ÉÒ»úʲÃ
...[4758 bytes skipped]...

http://wfd-bearing.com/flw6062828/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:04 GMT
Accept-Ranges: bytes
ETag: "d4a914c8b72d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 12289
Content-Location: http://wfd-bearing.com/flw6062828/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 22:42:35 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/flw6062828/index.html
200 OK
Content-Length: 12289
Content-Type: text/html
suspicious
Page code contains blacklisted domain: syxinhaiyang.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾ÇïÒâŨ¾øÐ¡ÍÞÍÞ¡¿|Å®ÉúÓûÍûС˵_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" content="ÇïÒâŨ¾øÐ¡ÍÞÍÞ,Å
...[4472 bytes skipped]...

http://wfd-bearing.com/c46a7lc802578/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:06 GMT
Accept-Ranges: bytes
ETag: "421aa96db82d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 12100
Content-Location: http://wfd-bearing.com/c46a7lc802578/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 22:47:13 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/c46a7lc802578/index.html
200 OK
Content-Length: 12100
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 2cconnect.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾µçÓ°ºÚ°µÊÀ½ç¡¿²£Á§ÒÕÊõ´´×÷·½·¨ÂÛÑо¿-ÖÐÑëµç´ó¹ú¼ÊÆóÒµ¹ÜÀí_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywo
...[4507 bytes skipped]...

http://wfd-bearing.com/qhrq9242577/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:08 GMT
Accept-Ranges: bytes
ETag: "ae11636eb82d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 12030
Content-Location: http://wfd-bearing.com/qhrq9242577/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 22:47:14 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/qhrq9242577/index.html
200 OK
Content-Length: 12030
Content-Type: text/html
suspicious
Page code contains blacklisted domain: phppaper.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾¾ü¸èàÚÁÁÖ÷ÌâÇúƬβÇú¡¿ÓàҦ˧¿µÀϰåÅÜ·|¼ªµÂÀû¿¨¡¤¼Ö˹͡_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keyword
...[4538 bytes skipped]...

http://wfd-bearing.com/d8ivn301983/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:09 GMT
Accept-Ranges: bytes
ETag: "d8e1b966ba2d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 11800
Content-Location: http://wfd-bearing.com/d8ivn301983/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 23:01:20 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/d8ivn301983/index.html
200 OK
Content-Length: 11800
Content-Type: text/html
suspicious
Page code contains blacklisted domain: gnandoor.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾¼ªÆÕÖ¸ÄÏÕß¡¿±£¶¨ÊÐÃÀÊõÖÐѧÔÚÄÄ|exoÍê½áС˵Ö÷²Ó°×_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" cont
...[4686 bytes skipped]...

http://wfd-bearing.com/63ms4361953/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:11 GMT
Accept-Ranges: bytes
ETag: "3018cf81ba2d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 11731
Content-Location: http://wfd-bearing.com/63ms4361953/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 23:02:05 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/63ms4361953/index.html
200 OK
Content-Length: 11731
Content-Type: text/html
suspicious
Page code contains blacklisted domain: runrong88.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>ղķɭÊÇÅ®°´Ä¦Ê¦ts-flashÈçºÎ¼ÓÁ´½ÓÔÚ¼ÒÁ·è¤Ù¤ÊÓÆµ_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" conten
...[4702 bytes skipped]...

http://wfd-bearing.com/4ezc711952/
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:28:13 GMT
Accept-Ranges: bytes
ETag: "7a49a382ba2d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 11796
Content-Location: http://wfd-bearing.com/4ezc711952/index.html
Content-Type: text/html
Last-Modified: Mon, 17 Nov 2014 23:02:07 GMT
X-Powered-By: ASP.NET
clean
http://wfd-bearing.com/4ezc711952/index.html
200 OK
Content-Length: 11796
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhongyuantongchang.com

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="zh-CN" lang="zh-CN">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>Â¥ÅÌ ¸ÄÃû-ÊÖ»ú³ÉÈ˼¤É«ÇéÊé_Íß·¿µê½ðº£Öá³ÐÖÆÔìÓÐÏÞ¹«Ë¾</title>
<meta name="keywords" content="Â¥ÅÌ ¸ÄÃû,ÊÖ»ú³ÉÈ˼¤É«Çé
...[4530 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: wfd-bearing.com

Result:
HTTP/1.1 200 OK
Date: Sat, 17 Jan 2015 07:27:36 GMT
Accept-Ranges: bytes
ETag: "a2323adfc114d01:39b"
Server: Microsoft-IIS/6.0
Content-Length: 18025
Content-Location: http://wfd-bearing.com/index.html
Content-Type: text/html
Last-Modified: Wed, 10 Dec 2014 21:40:10 GMT
X-Powered-By: ASP.NET

...18025 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: wfd-bearing.com
Referer: http://www.google.com/search?q=wfd-bearing.com

Result:
The result is similar to the first query. There are no suspicious redirects found.