Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=zixun.xiangrikui.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://zixun.xiangrikui.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://zixun.xiangrikui.com/ | 200 OK Content-Length: 61321 Content-Type: text/html | clean |
http://static.xrkcdn.com/www/script/jquery/jquery-latest.pack.js | 200 OK Content-Length: 92523 Content-Type: application/x-javascript | clean |
http://static.xrkcdn.com/www/script/jquery/cookie/jquery.cookie.js | 200 OK Content-Length: 703 Content-Type: application/x-javascript | clean |
http://assets.xrkcdn.com/global/script/analysis/stat_code.js | 200 OK Content-Length: 475 Content-Type: application/x-javascript | clean |
http://static.xrkcdn.com/www/script/foot.js | 200 OK Content-Length: 1861 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: images.xiangrikui.com $(document).ready(function(){try{$("span[isA='true']").each(function(){var b=$(this).html();$(this).html('<a href="'+$(this).attr("href")+"\" target='_blank'>"+b+"</a>")});$("span[isA='void']").each(function(){var b=$(this).html();$(this).html('<a href="'+$(this).attr("href")+"\" class='"+$(this).attr("class")+($(this).attr("onclick")?"' onclick=\""+$(this).attr("onclick")+';return false;"':"")+">"+b+"</a>");$(this).removeAttr("class")});$("img[src='http://images.xiangrikui.com/system/logo/site_user.gif']").each(function(){$(this).attr("title","ÏòÈÕ¿ûÒÑÈÏÖ¤»áÔ±£¬±£Ö¤Æä×ÊÁÏÕæʵ¿É¿¿¡£")});$("div[changeImage='true']").each(function(){var h=$(this).attr("title");var g=getrank(h);var d="http://images.xiangrikui.com/system/grade/";var b='<img src="'+d+'rank1-5.gif" border="0" >';var f='<img src="'+d+'rank6_10.gif" border="0" >';var c='<img src="'+d+'rank11_15.gif" border="0" >';var j="<a href= ...[1220 bytes skipped]... | ||
http://zixun.xiangrikui.com/fangtan/ | 200 OK Content-Length: 36685 Content-Type: text/html | clean |
http://zixun.xiangrikui.com/cehua/ | 200 OK Content-Length: 31903 Content-Type: text/html | clean |
http://static.xiangrikui.com/assets/global/component/footer/script/new_footer.js | 200 OK Content-Length: 553 Content-Type: application/x-javascript | clean |
http://online.xiangrikui.com/script/online/online.js?1411872642015 | 200 OK Content-Length: 22565 Content-Type: application/x-javascript | clean |
http://zixun.xiangrikui.com/test404page.js | 404 Not Found Content-Length: 589 Content-Type: text/html | clean |
http://zixun.xiangrikui.com/fangtan/zhuguan/ | 200 OK Content-Length: 35326 Content-Type: text/html | clean |
http://static.xiangrikui.com/www/script/stat_code.js | 200 OK Content-Length: 713 Content-Type: application/x-javascript | clean |
http://static.xiangrikui.com/www/script/foot.js | 200 OK Content-Length: 1861 Content-Type: application/x-javascript | clean |
http://zixun.xiangrikui.com/fangtan/jingying/ | 200 OK Content-Length: 40376 Content-Type: text/html | clean |
http://zixun.xiangrikui.com/hangyedongtai/20120613/232357.html | 200 OK Content-Length: 21131 Content-Type: text/html | malicious |
Malicious iFrame found. size: 668x212 src: http://common.xiangrikui.com/comment/initcomment.do?aid=232357&a_name=mip&he=212&wi=668&a_title=ÖйúÈËÊÙ³ÉΪ¹þÇ¢»áÖ¸¶¨±£ÏÕ¹©Ó¦ÉÌ&back_url= This URL is marked by Yandex as suspicious <iframe id="commentfrm" name="commentfrm" marginwidth=0 marginheight=0 src="http://common.xiangrikui.com/comment/initcomment.do?aid=232357&a_name=mip&he=212&wi=668&a_title=ÖйúÈËÊÙ³ÉΪ¹þÇ¢»áÖ¸¶¨±£ÏÕ¹©Ó¦ÉÌ&back_url='+document.location.href+'" frameborder="0" height="212px" width="668px" scrolling="no" allowtransparency="true"> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: zixun.xiangrikui.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 02 Oct 2014 09:54:25 GMT
Accept-Ranges: bytes
Server: Tengine
Vary: Accept-Encoding
Content-Length: 61321
Content-Type: text/html
Last-Modified: Thu, 18 Sep 2014 10:00:54 GMT
...61321 bytes of data.
GET / HTTP/1.1
Host: zixun.xiangrikui.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 02 Oct 2014 09:54:25 GMT
Accept-Ranges: bytes
Server: Tengine
Vary: Accept-Encoding
Content-Length: 61321
Content-Type: text/html
Last-Modified: Thu, 18 Sep 2014 10:00:54 GMT
...61321 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: zixun.xiangrikui.com
Referer: http://www.google.com/search?q=zixun.xiangrikui.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: zixun.xiangrikui.com
Referer: http://www.google.com/search?q=zixun.xiangrikui.com
Result:
The result is similar to the first query. There are no suspicious redirects found.