www.eyuyan.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned www.eyuyan.com and returned a unknown verdict (score -12). The page resolved to 58.220.33.218 on CHINANET jiangsu province network in CN. The domain was registered 9431 days ago through Alibaba Cloud Computing (Beijing) Co., Ltd.. 10 domains and 1 IP were contacted, over 1 HTTP request. 34 malware samples communicate with this URL (HUILoader, Ulise, FlyAgent, Maldoc). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://www.eyuyan.com/ - Domain: www.eyuyan.com · IP: 58.220.33.218 · AS137697 · CN
- Server: nginx
- Page title: 易语言汉语编程官方站
- HTTP status: 200 · text/html
- Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd. · domain age 9431 days · created 2000-10-23
- TLS issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA - G2 · valid to Oct 15 23: · subject CN=eyuyan.com
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-19 19:17:58 UTC
Redirect chain
http://www.eyuyan.com/https://www.eyuyan.com/
Malware communicating with this URL (34)
These samples were observed contacting or being served from www.eyuyan.com. Each links to its full analysis.
- HUILoader - referenced ·
3d06b29d4b5dd0751c0991e6e7323fdb· first seen 2026-08-19 - Ulise - referenced ·
771261ef6bf9c7f46d3f186c7d1dba15· first seen 2026-08-19 - FlyAgent - referenced ·
375c7748f4b2c662eb1e1143978ec92b· first seen 2026-08-18 - HUILoader - referenced ·
baeb48dabaf645dd49f7c743653f8dcc· first seen 2026-08-18 - HUILoader - referenced ·
157d93bb1112bff8fc9ef6d04b456424· first seen 2026-08-17 - FlyAgent - referenced ·
f720301238ef186d0c2d54d0e6a16daf· first seen 2026-08-16 - Maldoc - referenced ·
0e5a490bdb611a2f91b62d0a5ed470bf· first seen 2026-08-16 - Maldoc - referenced ·
c7dc721388ac80482a576e64c395a6fa· first seen 2026-08-16 - HUILoader - referenced ·
6f36cf484fc0e281a137b2cdc1312118· first seen 2026-08-16 - Dqan - referenced ·
6b60840d05bec998ff2104bd86226927· first seen 2026-08-16 - FlyAgent - referenced ·
d7a9c1bbf7e702b6d0e39891b5a61d58· first seen 2026-08-16 - HUILoader - referenced ·
5993b633f6668c2bcc6614861544857f· first seen 2026-08-15 - Maldoc - referenced ·
5fc625be172f1c55833c3901128d387d· first seen 2026-08-15 - HUILoader - referenced ·
c738f7a44665e280893813d03df075cb· first seen 2026-08-15 - HUILoader - referenced ·
e368bba1a7791a609dfa0004f6ce7b97· first seen 2026-08-15
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Nginx
Contacted infrastructure
- 58.220.33.218 - AS137697 CHINANET jiangsu province network (China)
Observed indicators
- www.eyuyan.com
- www.dywt.com.cn
- bbs.eyuyan.com
- dotef.eyuyan.com
- epl.eyuyan.com
- www.voldp.com
- www.beian.miit.gov.cn
- www.beian.gov.cn
- 210.83.208.156
- ln.cyberpolice.cn
- 58.220.33.218
- https://www.eyuyan.com/
- http://www.dywt.com.cn/favicon.ico
- https://www.eyuyan.com/images/e.ico
- https://www.eyuyan.com/images/css.css
- https://www.eyuyan.com/images/home.js
- https://www.eyuyan.com/images/index_19.gif
- https://www.eyuyan.com/index.htm
- https://www.eyuyan.com/newslist.htm
- https://www.eyuyan.com/prc.htm
Other scans of www.eyuyan.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown ·
https://www.dywt.com.cn/ - 21 Aug 2026 - unknown
Questions about www.eyuyan.com
- Is www.eyuyan.com safe?
- The scan of www.eyuyan.com on 19 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.eyuyan.com?
- 34 analysed samples communicate with this URL, including HUILoader, Ulise, FlyAgent, Maldoc.
- How was www.eyuyan.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.eyuyan.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan