New scan:

Malware Scanner report for uu110.net

Malicious/Suspicious/Total urls checked
2/6/18
8 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "uu110.net" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=uu110.net

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://uu110.net/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://uu110.net/
HTTP/1.1 200 OK
Date: Fri, 03 Oct 2014 05:55:10 GMT
Accept-Ranges: bytes
ETag: "ca669b36383fcf1:d17e"
Server: Microsoft-IIS/6.0
Content-Length: 27245
Content-Location: http://uu110.net/index.htm
Content-Type: text/html
Last-Modified: Fri, 14 Mar 2014 03:48:08 GMT
X-Powered-By: ASP.NET
clean
http://uu110.net/index.htm
200 OK
Content-Length: 27245
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.tourunion.com

<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content='2011-2012ÂÃÓÎÏß·_ÂÃÓÎ_ÖйúÂÃÓÎ_ÉϺ£ÊÀ²©_ÊÀ²©_»úƱ_ÃÅƱ_¾°µã_¾°Çø_½»Í¨_ÃÀʳ_С³Ô_Ç©Ö¤_¾Æµê_ÌìÆø_ÖйúÂÃÓÎÁªÃË' name=keywords>
<meta content='ÖйúÂÃÓÎÁªÃ˹ٷ½ÍøÕ¾,ÖйúÂÃÓÎ×ÊÔ´ÖÐÐÄÖ÷Õ¾,È«ÃæÕûºÏÂÃÓÎ×ÊÔ´,´î½¨ÂÃÓÎÐÐÒµ½»Ò×ƽ̨,¹²½¨ÂÃÓÎÐÐÒµ×ÊÔ´¡¢ÒµÎñ¡¢¹ã¸æ¡¢È˲Ź²ÏíÍøÂç...' name=description>
<META content='ÖйúÂÃÓÎÁªÃË:ÂÃÓν»Ò×ƽ̨£¬ÂÃÓÎÐÐÒµÁªÃË£¬ÂÃÓ
...[4549 bytes skipped]...

http://uu110.net/js/bottom_UN.js
200 OK
Content-Length: 1692
Content-Type: application/x-javascript
malicious
Malicious code found. Script contains blacklisted domain: www.tourunion.com

...[122 bytes skipped]...
t-size:9pt;><tr align=center><td height=1 bgcolor=#cccccc></td></tr><tr align=center><td height=30 nowrap><a href=/>Ê×Ò³</a> ¡¤ <a href='/aboutus/index.htm' target='_blank'>¹ØÓÚÁªÃË</a> ¡¤ <a href='/aboutus/index.htm#lx' target='_blank'>ÁªÏµÎÒÃÇ</a> ¡¤ <a href='/aboutus/index.htm#cw' target='_blank'><b>¸¶¿î·½Ê½</b></a> ¡¤ <a href=http://www.tourunion.com/UU/MemLogin.aspx>×¢²áµÇ½</a> ¡¤ <a href=/ad/>¹ã¸æ</a> ¡¤ <a href='/TourSoft/Help/GuestBook.aspx' target='_blank'>ÁôÑÔ</a> ¡¤ <a href=/bbsnew>ÂÛ̳</a> ¡¤ <a href=/zhaoping.asp>ÕÐƸ</a> ¡¤ <a href='/lawyera.htm'>·¨ÂÉÉêÃ÷</a> ¡¤ <a href=/toursoft/help/>°ïÖú</a></td></tr><tr><td height='90' align='center'>×Ü»ú:028-66767300 QQ:357192699,361718835 E_mail:<a href=mailto:webmaste
...[990 bytes skipped]...

Decoded script:

...[111 bytes skipped]...
t-size:9pt;><tr align=center><td height=1 bgcolor=#cccccc></td></tr><tr align=center><td height=30 nowrap><a href=/>Ê×Ò³</a> ¡¤ <a href='/aboutus/index.htm' target='_blank'>¹ØÓÚÁªÃË</a> ¡¤ <a href='/aboutus/index.htm#lx' target='_blank'>ÁªÏµÎÒÃÇ</a> ¡¤ <a href='/aboutus/index.htm#cw' target='_blank'><b>¸¶¿î·½Ê½</b></a> ¡¤ <a href=http://www.tourunion.com/UU/MemLogin.aspx>×¢²áµÇ½</a> ¡¤ <a href=/ad/>¹ã¸æ</a> ¡¤ <a href='/TourSoft/Help/GuestBook.aspx' target='_blank'>ÁôÑÔ</a> ¡¤ <a href=/bbsnew>ÂÛ̳</a> ¡¤ <a href=/zhaoping.asp>ÕÐƸ</a> ¡¤ <a href='/lawyera.htm'>·¨ÂÉÉêÃ÷</a> ¡¤ <a href=/toursoft/help/>°ïÖú</a></td></tr><tr><td height='90' align='center'>×Ü»ú:028-66767300 QQ:357192699,361718835 E_mail:<a href=mailto:webmaste
...[853 bytes skipped]...

http://uu110.net/China/
200 OK
Content-Length: 185518
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.tourunion.com

<html>
<head>
<meta content='ÂÃÓÎÁªÃË-ÂÃÓÎ-¹úÄÚÓÎ-³ö¾³ÓÎ-ÂÃÓξ°µã-ÊÀ²©Ô°-Î÷ºþ-¾ÅÕ¯¹µ-¶ëüɽ-ÈýÑÇ-¹ðÁÖ-»Æɽ...' name=keywords>
<meta content='ÖйúÂÃÓÎÁªÃ˹ٷ½ÍøÕ¾,ÖйúÂÃÓÎ×ÊÔ´ÖÐÐÄÖ÷Õ¾,È«ÃæÕûºÏÂÃÓÎ×ÊÔ´,´î½¨ÂÃÓÎÐÐÒµ½»Ò×ƽ̨,¹²½¨ÂÃÓÎÐÐÒµ×ÊÔ´¡¢ÒµÎñ¡¢¹ã¸æ¡¢È˲Ź²ÏíÍøÂç...' name=description>
<META content='ÂÃÓÎÍø£¬ÂÃÓΣ¬ÖйúÂÃÓΣ¬ÖйúÂÃÓÎÍø£¬ÖйúÂÃÓÎÁªÃË£¬ÂÃÓγ¬ÊУ¬ÂÃÓÎÏß·£¬ÂÃÓξ°µã£¬ÖйúÂÃÓΣ¬¹úÄÚÂÃÓΣ¬ÂÃÓξ°Çø£
...[4528 bytes skipped]...

http://uu110.net/CTUascx/CodeVerson.Js
200 OK
Content-Length: 8480
Content-Type: application/x-javascript
clean
http://uu110.net/ad/js/69.js
200 OK
Content-Length: 1032
Content-Type: application/x-javascript
clean
http://uu110.net/ad/js/34.js
200 OK
Content-Length: 657
Content-Type: application/x-javascript
clean
http://uu110.net/ad/js/71.js
200 OK
Content-Length: 609
Content-Type: application/x-javascript
clean
http://uu110.net/uu110/
HTTP/1.1 200 OK
Cache-Control: private
Date: Fri, 03 Oct 2014 05:55:25 GMT
Server: Microsoft-IIS/6.0
Content-Length: 185918
Content-Type: text/html; charset=gb2312
Set-Cookie: ASP.NET_SessionId=bhfgct551jemfu55s54mrd2m; path=/
X-AspNet-Version: 1.1.4322
X-Powered-By: ASP.NET
clean
http://uu110.net/china/
200 OK
Content-Length: 185518
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.tourunion.com

<html>
<head>
<meta content='ÂÃÓÎÁªÃË-ÂÃÓÎ-¹úÄÚÓÎ-³ö¾³ÓÎ-ÂÃÓξ°µã-ÊÀ²©Ô°-Î÷ºþ-¾ÅÕ¯¹µ-¶ëüɽ-ÈýÑÇ-¹ðÁÖ-»Æɽ...' name=keywords>
<meta content='ÖйúÂÃÓÎÁªÃ˹ٷ½ÍøÕ¾,ÖйúÂÃÓÎ×ÊÔ´ÖÐÐÄÖ÷Õ¾,È«ÃæÕûºÏÂÃÓÎ×ÊÔ´,´î½¨ÂÃÓÎÐÐÒµ½»Ò×ƽ̨,¹²½¨ÂÃÓÎÐÐÒµ×ÊÔ´¡¢ÒµÎñ¡¢¹ã¸æ¡¢È˲Ź²ÏíÍøÂç...' name=description>
<META content='ÂÃÓÎÍø£¬ÂÃÓΣ¬ÖйúÂÃÓΣ¬ÖйúÂÃÓÎÍø£¬ÖйúÂÃÓÎÁªÃË£¬ÂÃÓγ¬ÊУ¬ÂÃÓÎÏß·£¬ÂÃÓξ°µã£¬ÖйúÂÃÓΣ¬¹úÄÚÂÃÓΣ¬ÂÃÓξ°Çø£
...[4528 bytes skipped]...

http://uu110.net/spot/
HTTP/1.1 200 OK
Date: Fri, 03 Oct 2014 05:55:30 GMT
Accept-Ranges: bytes
ETag: "b69466c221ece1:d17e"
Server: Microsoft-IIS/6.0
Content-Length: 29951
Content-Location: http://uu110.net/spot/index.htm
Content-Type: text/html
Last-Modified: Mon, 11 Mar 2013 06:31:22 GMT
X-Powered-By: ASP.NET
clean
http://uu110.net/spot/index.htm
200 OK
Content-Length: 29951
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.tourunion.com

...[1652 bytes skipped]...
<!--
.dns1 {FONT-SIZE: 6pt; COLOR: #0066ff }
.dns11 {FONT-SIZE: 6pt; COLOR: #0066ff }
.Blue {COLOR: #10326B }
-->
</style>
</head>

<body>
<table width="980" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td height="20" align="right" bgcolor="F8F8F8"><a target=_top href=javascript:window.external.addfavorite(http://www.tourunion.com;,ÖйúÂÃÓÎÁªÃË)>¡¤¼ÓÈëÊÕ²Ø</a>¡¡<a href=# onClick="this.style.behavior=url(#default#homepage);this.sethomepage(ww.tourunion.com/weather"><img src="../info/pic/weather.gif" width="134" height="54" border="0"></a></td>
<td><a href="http://www.tourunion.com/plane"><img src="../info/pic/plane.gif" width="134" height="54" border="0"></a></td>
</tr>
<tr>

...[2331 bytes skipped]...

http://uu110.net/ad/js/6.js
200 OK
Content-Length: 1941
Content-Type: application/x-javascript
suspicious
Page code contains blacklisted domain: www.tourunion.com

...[1406 bytes skipped]...
document.write("<a href='http:\/\/www.sc788.com' target=_blank><img src='\/ad\/ADImg\/SpotHome\/sc788.jpg' border=0><\/a>");
}

}
*/
else
{
var OverDate='2011-02-24';
var DayMuch=GetOverDayNum(OverDate);
if(DayMuch<0)
{
document.write(TourADInfo);
}
else
{
document.write("<embed src='http:\/\/www.tourunion.com\/ad\/ADImg\/SpotHome\/7sc.swf' quality='high' pluginspage='http:\/\/www.macromedia.com\/go\/getflashplayer' type='application\/x-shockwave-flash' width='300' height='250'><\/embed>");

/*document.write("<a href='http:\/\/www.78sc.com' target=_blank><img src='\/ad\/ADImg\/SpotHome\/78sc.jpg' border=0><\/a>");*/
}

}

}
ShowTVAD();

http://uu110.net/ad/js/7.js
200 OK
Content-Length: 605
Content-Type: application/x-javascript
clean
http://uu110.net/ad/js/8.js
200 OK
Content-Length: 627
Content-Type: application/x-javascript
clean
http://uu110.net/news/
200 OK
Content-Length: 134234
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.tourunion.com

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta content='ËÄ´¨ÂÃÓÎÐÂÎÅ£¬ËÄ´¨¾°ÇøÐÂÎÅ£¬ãë´¨¾°ÇøÐÂÎÅ£¬µØÕð¾°ÇøÐÂÎÅ£¬ÂÃÓÎÐÂÎÅ£¬¹úÄÚÂÃÓÎÐÂÎÅ£¬ÐÂÎÅ£¬ÐÂÎÅ¿ìѶ£¬¾°ÇøÐÂÎÅ£¬±±¾©ÂÃÓÎÐÂÎÅ£¬ÉϺ£ÂÃÓÎÐÂÎÅ£¬ºþÄÏÂÃÓÎÐÂÎÅ£¬ºþ±±ÂÃÓÎÐÂÎÅ£¬¹ãÎ÷ÂÃÓÎÐÂÎÅ£¬¹ã¶«ÂÃÓÎÐÂÎÅ£¬º£ÄÏÂÃÓÎÐÂÎÅ£¬ºÓÄÏÂÃÓÎÐÂÎÅ£¬ºÓ±±ÂÃÓÎÐÂÎÅ£¬ÇຣÂÃÓÎÐÂÎÅ£¬½­ËÕÂÃÓÎÐÂÎÅ£¬½­Î÷ÂÃÓÎÐÂÎÅ£¬Õã½­ÂÃÓÎÐÂÎÅ£¬Î÷²ØÂÃÓÎÐÂÎÅ£¬ÄþÏÄÂÃÓÎÐÂÎÅ£¬ÖØÇìÂÃÓ
...[4326 bytes skipped]...

http://pagead2.googlesyndication.com/pagead/show_ads.js
200 OK
Content-Length: 21308
Content-Type: text/javascript
clean
http://uu110.net/bottom.js
200 OK
Content-Length: 1692
Content-Type: application/x-javascript
malicious
Malicious code found. Script contains blacklisted domain: www.tourunion.com

...[122 bytes skipped]...
t-size:9pt;><tr align=center><td height=1 bgcolor=#cccccc></td></tr><tr align=center><td height=30 nowrap><a href=/>Ê×Ò³</a> ¡¤ <a href='/aboutus/index.htm' target='_blank'>¹ØÓÚÁªÃË</a> ¡¤ <a href='/aboutus/index.htm#lx' target='_blank'>ÁªÏµÎÒÃÇ</a> ¡¤ <a href='/aboutus/index.htm#cw' target='_blank'><b>¸¶¿î·½Ê½</b></a> ¡¤ <a href=http://www.tourunion.com/UU/MemLogin.aspx>×¢²áµÇ½</a> ¡¤ <a href=/ad/>¹ã¸æ</a> ¡¤ <a href='/TourSoft/Help/GuestBook.aspx' target='_blank'>ÁôÑÔ</a> ¡¤ <a href=/bbsnew>ÂÛ̳</a> ¡¤ <a href=/zhaoping.asp>ÕÐƸ</a> ¡¤ <a href='/lawyera.htm'>·¨ÂÉÉêÃ÷</a> ¡¤ <a href=/toursoft/help/>°ïÖú</a></td></tr><tr><td height='90' align='center'><a href=/construct.asp>ÖйúÂÃÓÎÁªÃË</a>¡¡°æȨËùÓÐ&copy;200
...[990 bytes skipped]...

Decoded script:

...[111 bytes skipped]...
t-size:9pt;><tr align=center><td height=1 bgcolor=#cccccc></td></tr><tr align=center><td height=30 nowrap><a href=/>Ê×Ò³</a> ¡¤ <a href='/aboutus/index.htm' target='_blank'>¹ØÓÚÁªÃË</a> ¡¤ <a href='/aboutus/index.htm#lx' target='_blank'>ÁªÏµÎÒÃÇ</a> ¡¤ <a href='/aboutus/index.htm#cw' target='_blank'><b>¸¶¿î·½Ê½</b></a> ¡¤ <a href=http://www.tourunion.com/UU/MemLogin.aspx>×¢²áµÇ½</a> ¡¤ <a href=/ad/>¹ã¸æ</a> ¡¤ <a href='/TourSoft/Help/GuestBook.aspx' target='_blank'>ÁôÑÔ</a> ¡¤ <a href=/bbsnew>ÂÛ̳</a> ¡¤ <a href=/zhaoping.asp>ÕÐƸ</a> ¡¤ <a href='/lawyera.htm'>·¨ÂÉÉêÃ÷</a> ¡¤ <a href=/toursoft/help/>°ïÖú</a></td></tr><tr><td height='90' align='center'><a href=/construct.asp>ÖйúÂÃÓÎÁªÃË</a>¡¡°æȨËùÓÐ&copy;200
...[853 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: uu110.net

Result:
HTTP/1.1 200 OK
Date: Fri, 03 Oct 2014 05:55:10 GMT
Accept-Ranges: bytes
ETag: "ca669b36383fcf1:d17e"
Server: Microsoft-IIS/6.0
Content-Length: 27245
Content-Location: http://uu110.net/index.htm
Content-Type: text/html
Last-Modified: Fri, 14 Mar 2014 03:48:08 GMT
X-Powered-By: ASP.NET

...27245 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: uu110.net
Referer: http://www.google.com/search?q=uu110.net

Result:
The result is similar to the first query. There are no suspicious redirects found.