New scan:

Malware Scanner report for return-hn.com

Malicious/Suspicious/Total urls checked
0/10/26
10 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "return-hn.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=return-hn.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://return-hn.com/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:33 GMT
Accept-Ranges: bytes
ETag: "b88d880131d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 12319
Content-Location: http://return-hn.com/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:34:05 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/index.html
200 OK
Content-Length: 12319
Content-Type: text/html
clean
http://return-hn.com/mobile/js/jquery-1.5.1.min.js
200 OK
Content-Length: 85260
Content-Type: application/x-javascript
clean
http://return-hn.com/mobile/js/js.js
200 OK
Content-Length: 4177
Content-Type: application/x-javascript
clean
http://return-hn.com/tj.js
200 OK
Content-Length: 124
Content-Type: application/x-javascript
clean
http://return-hn.com/94s816/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:38 GMT
Accept-Ranges: bytes
ETag: "8ce71257131d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8843
Content-Location: http://return-hn.com/94s816/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:32:57 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/94s816/index.html
200 OK
Content-Length: 8843
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾ÃÀÀû¼áºÏÖÚ¹ú±£»¤»ÆÉ«Ó°ÊÓ´óÈ«¡¿Â½ºÓºÓ¿Ú³µ»ö|ÂèÂèÎÒ°®ÄãÒ»¼¶Æ¬</title>
<meta name="keywords" content="ÃÀÀû¼áºÏÖÚ¹ú±£»¤»ÆÉ«Ó°ÊÓ´óÈ«" />
<meta name="description" content="ÃÀÀû¼áºÏÖÚ¹ú±£»¤»ÆÉ«Ó°ÊÓ´óÈ«£¨return-hn.com£©¹ãÖÝÊÐÒ×·çÐÅÏ¢×Éѯ½ºÓºÓ¿Ú³µ»öÓÐÏÞ¹«Ë¾ÎªÄúÌṩÕØÇìÊÐÒ×ѧ¡¢Ò×ѧ
...[4649 bytes skipped]...

http://Js.lwtzdec.com/mulu.js
200 OK
Content-Length: 405
Content-Type: application/x-javascript
clean
http://return-hn.com/imm079t355/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:43 GMT
Accept-Ranges: bytes
ETag: "de9ae556131d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9737
Content-Location: http://return-hn.com/imm079t355/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:32:56 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/imm079t355/index.html
200 OK
Content-Length: 9737
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wjf98.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾ÃÀÅ®ÍѹâÔõôÑù²é²ÅÄÜ¿´ÃÀŮȫ¡¿|ßäß䡤Òùͼ</title>
<meta name="keywords" content="ÃÀÅ®ÍѹâÔõôÑù²é²ÅÄÜ¿´ÃÀŮȫ" />
<meta name="description" content="ÃÀÅ®ÍѹâÔõôÑù²é²ÅÄÜ¿´ÃÀŮȫËÕÖÝ¡¶NABS¡·Äɲ¼Ë¹»úµçÓÐÏÞ¹«Ë¾ßäß䡤ÒùͼλÓÚÖйúËÕÖÝƽ½Ö·£¬ËÕÖÝ¡¶NABS¡·Äɲ¼Ë¹»úµçÃÀÅ®ÍѹâÔõô
...[4554 bytes skipped]...

http://return-hn.com/6e41m702/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:47 GMT
Accept-Ranges: bytes
ETag: "788b4c7261d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 7884
Content-Location: http://return-hn.com/6e41m702/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 19:00:39 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/6e41m702/index.html
200 OK
Content-Length: 7884
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾ÃÀ¹úÑÇÖÞɫͼ¡¿ÃÀʳ´óÕ½ÀÏÊó¸ÖצƤ|Ã÷ÐLJå̬¶·</title>
<meta name="keywords" content="ÃÀ¹úÑÇÖÞɫͼ" />
<meta name="description" content="ÃÀ¹úÑÇÖÞɫͼÌṩ2014ÏãºÓÂ¥ÅÌ,ÏãºÓÐÂÂ¥ÅÌÐÅÏ¢,×îȨÍþµÄÏãºÓ·¿¼Û×ßÊÆ·ÖÎö,×îÐÂÏãÃÀʳ´óÕ½ÀÏÊó¸ÖצƤºÓÐÂÂ¥Å̼ÛÃ÷ÐLJå̬¶·¸ñ»§ÐÍÐÅÏ¢,ΪÄúÕÒµ½×îÊʺϵ
...[4709 bytes skipped]...

http://return-hn.com/hrox398/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:49 GMT
Accept-Ranges: bytes
ETag: "bc83e2fa51d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9629
Content-Location: http://return-hn.com/hrox398/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:57:18 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/hrox398/index.html
200 OK
Content-Length: 9629
Content-Type: text/html
suspicious
Page code contains blacklisted domain: 88yinghong.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾Ã«Ö÷ϯÒÅÌå»ð»¯¡¿ÃÀÍÈË¿Íà»ÆÉ«ÍøÖ·-ĸ×ÓÂÒÂ×¾­µä¹ÊÊÂ</title>
<meta name="keywords" content="ëÖ÷ϯÒÅÌå»ð»¯" />
<meta name="description" content="ëÖ÷ϯÒÅÌå»ð»¯ÇൺÖÐÁÉ»úеÖÆÔìÓÐÃÀÍÈË¿Íà»ÆÉ«ÍøÖ·ÏÞ¹«Ë¾ÊÇÒ»¼Ò´ÓÊÂвúÆ·¡¢Ð¼¼ÊõµÄ¿ª·¢¡¢Éú²ú¡¢ÍƹãºÍ·þÎñÓÚÒ»ÌåµÄ´´ÐÂÐÍÆóÒµ¡£ÊÇÑз¢ÓëÖ
...[4681 bytes skipped]...

http://return-hn.com/w5n7098/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:51 GMT
Accept-Ranges: bytes
ETag: "9886a4fa51d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8914
Content-Location: http://return-hn.com/w5n7098/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:57:18 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/w5n7098/index.html
200 OK
Content-Length: 8914
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾ÂíÁåÊíµí·ÛÉ豸¼Û¸ñ¡¿ÃÀÀöÖйúÊÖ³­±¨µÄÅ®-ÃÔÄãÕÙ»½²¢¼ç×÷Õ½</title>
<meta name="keywords" content="ÂíÁåÊíµí·ÛÉ豸¼Û¸ñ" />
<meta name="description" content="ÂíÁåÊíµí·ÛÉ豸¼Û¸ñÂí°°É½ÊÐƷԪóÒ×ÓÐÏÞ¹«Ë¾ÊÇÒ»¼Ò¼¯±ö¹Ý·þÎñÒµ¡¢Í¶×ÊÀí²ÆÒµ¡¢²úÆ·ÏúÊÛ´úÀíΪһÌåµÄ×ۺϻú¹¹¡£±¾¹«Ë¾´úÀíµÄ³ø·¿À
...[4665 bytes skipped]...

http://return-hn.com/lez58518/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:54 GMT
Accept-Ranges: bytes
ETag: "8ceab2f441d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9305
Content-Location: http://return-hn.com/lez58518/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:49:59 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/lez58518/index.html
200 OK
Content-Length: 9305
Content-Type: text/html
suspicious
Page code contains blacklisted domain: cnpressrelease.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>Ä­Ä­ÕÕƬ͸Ã÷Ƥ·ô|Ã÷È˽ÚÅ®ÃÈÕÕ´ópkÃ÷³¯ÀúʷͯÄêÕÕ</title>
<meta name="keywords" content="Ä­Ä­ÕÕƬ͸Ã÷Ƥ·ô" />
<meta name="description" content="Ä­Ä­ÕÕƬ͸Ã÷Ƥ·ô¹«Ë¾³ÉÁ¢ÓÚ1997Ä꣬ÊôÃñÓª¹É·ÝÖÆÆóÒµ£¬×¨Òµ´ÓÊÂíÅÍâ¼Ó¼ÁµÄÑз¢¡¢Éú²úºÍÏúÊÛ£¬Éú²úÄÜÁ¦6000Óà¶Ö¡£¹«Ë¾ÏÂÉ裺¼¼ÊõÖÊÁ¿²¿£¨ÖÐÐÄʵÑ
...[4685 bytes skipped]...

http://return-hn.com/tzzb376/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:55 GMT
Accept-Ranges: bytes
ETag: "64a8874441d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8773
Content-Location: http://return-hn.com/tzzb376/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:45:03 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/tzzb376/index.html
200 OK
Content-Length: 8773
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wjf98.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>ħ·¨¹þÆæÊÔÁ¶±¦¿âµÄ|ÂÞÀ­¿ìÅÜѸÀ×ÏÂÔØ|ÂÖ¼éÉÙÅ®Ó×ŮС˵ÊÓƵ</title>
<meta name="keywords" content="ħ·¨¹þÆæÊÔÁ¶±¦¿âµÄ" />
<meta name="description" content="ħ·¨¹þÆæÊÔÁ¶±¦¿âµÄ»ªÈÝǧ×ËÁµÓ¤Í¯·þÊÎÆ·³§ÊÇÒ»¼Ò¼¯Éè¼Æ¡¢Éú²ú¡¢ÏúÊÛÓÚÒ»ÌåµÄ×ÛºÏÐÔ˽Ӫ¶À×ÊÆóÒµ¡£Ö÷ÒªÉú²úÓ¤¶ùЬ¡¢Ó¤¶ùñ¡¢Ó¤¶
...[4652 bytes skipped]...

http://return-hn.com/ctvw89o46/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:57 GMT
Accept-Ranges: bytes
ETag: "40ab494441d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9032
Content-Location: http://return-hn.com/ctvw89o46/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:45:03 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/ctvw89o46/index.html
200 OK
Content-Length: 9032
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zhugongmen.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾Â×Àí´óƬÍøÖ·¡¿|ÃÎÏë´ÓÕâÀïÆðº½</title>
<meta name="keywords" content="Â×Àí´óƬÍøÖ·" />
<meta name="description" content="Â×Àí´óƬÍøÖ·±¾¹«Ë¾ÓÚ2009Äê10ÔÂÔÙ´ÎͶ×ʹº½øÈÕ²ú40¶ÖÈ«×Ô¶¯½ø¿Ú¹ÒÃæÉú²úÏß2Ìõ£¬Ä¿Ç°ÈÕ²úÁ¿100¶Ö×óÓÒ£¬Çë¹ã´ó¿Í»§À´³§Ç¢Ì¸ÒµÎñ£¡ " />
<meta name="rob
...[4702 bytes skipped]...

http://return-hn.com/56p17d303/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:59 GMT
Accept-Ranges: bytes
ETag: "5665323641d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 8889
Content-Location: http://return-hn.com/56p17d303/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:44:39 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/56p17d303/index.html
200 OK
Content-Length: 8889
Content-Type: text/html
suspicious
Page code contains blacklisted domain: wjf98.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>¡¾Ã÷Ðǽá»éÀñ·þ¡¿|ÁúÓ£»éºóÌðÎÄ´øh</title>
<meta name="keywords" content="Ã÷Ðǽá»éÀñ·þ" />
<meta name="description" content="Ã÷Ðǽá»éÀñ·þÏÃÃÅÊÐÊ¥µÃ¿­½ø³ö¿ÚÓÐÏÞ¹«Ë¾Ö÷Òª¾­Óª£ºnullµÈ²úÆ·¡£¹«Ë¾×ð³ç¡°Ì¤Êµ¡¢Æ´²«¡¢ÔðÈΡ±µÄÆóÒµ¾«Éñ£¬²¢ÒÔ³ÏÐÅ¡¢¹²Ó®¡¢¿ª´´¾­ÓªÀíÄ´´ÔìÁ¼ºÃµÄÆóÒµ»·¾³£
...[4706 bytes skipped]...

http://return-hn.com/58qu553/
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:10:01 GMT
Accept-Ranges: bytes
ETag: "0afc7f921d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 9438
Content-Location: http://return-hn.com/58qu553/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 18:35:48 GMT
X-Powered-By: ASP.NET
clean
http://return-hn.com/58qu553/index.html
200 OK
Content-Length: 9438
Content-Type: text/html
suspicious
Page code contains blacklisted domain: lsairuier.com

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<title>ÃÀÅ®¶¯»­±íÇé|ô»ëεçÓ°ÏÂÔØÃ÷Í·ÉßÆÞÕÕ</title>
<meta name="keywords" content="ÃÀÅ®¶¯»­±íÇé" />
<meta name="description" content="ÃÀÅ®¶¯»­±íÇ飨return-hn.com£©³£ÖÝÔÆÌï¼Ò¾ßÓÐÏÞ¹«Ë¾£¬Î»ÓÚÃÀÀö¸»Èĵij¤½­Èý½ÇÖÞ---½­ËÕ³£ÖÝ£¬µØ´¦³ÇÎ÷ÎåÐÇÇÅÄÏÒÝÐÂׯ¹¤ÒµÔ°ÄÚ£¬ô»ëεçÓ°ÏÂÔؽ»Í¨Ê®·Ö±ã½Ý¡£Ê¼
...[4678 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: return-hn.com

Result:
HTTP/1.1 200 OK
Date: Sun, 18 Jan 2015 13:09:33 GMT
Accept-Ranges: bytes
ETag: "b88d880131d01:5e8d"
Server: Microsoft-IIS/6.0
Content-Length: 12319
Content-Location: http://return-hn.com/index.html
Content-Type: text/html
Last-Modified: Sat, 15 Nov 2014 20:34:05 GMT
X-Powered-By: ASP.NET

...12319 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: return-hn.com
Referer: http://www.google.com/search?q=return-hn.com

Result:
The result is similar to the first query. There are no suspicious redirects found.