Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=6kino.org
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://6kino.org/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://6kino.org/ | 200 OK Content-Length: 109303 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: zwei.in <!DOCTYPE html> <!--[if IE 6]> <html id="ie6" lang="de-DE"> <![endif]--> <!--[if IE 7]> <html id="ie7" lang="de-DE"> <![endif]--> <!--[if IE 8]> <html id="ie8" lang="de-DE"> <![endif]--> <!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!--> <html lang="de-DE"> <!--<![endif]--> <head> <meta name=" ...[4201 bytes skipped]... | ||
https://code.jquery.com/jquery-latest.min.js | 200 OK Content-Length: 95786 Content-Type: application/x-javascript | clean |
http://6kino.org/wp-content/themes/6kino/js/wow.js | 200 OK Content-Length: 4778 Content-Type: application/javascript | clean |
http://s1.slimtrade.com/s6811.js | 200 OK Content-Length: 21822 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: zwei.in eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('e x=L 2c("3w.1z (33)","6v.1u (29)","6u 6t 6w (24)","6x.6A (14)","6z.1u (3)","6y 6s 6r (0)","6l.3d (0)");e J=L 2c("k://3w.1z","k://6k.1u?6j=6m.6n","k://6q.6p-6o.1e","k://6B.6C","k://6P.6O.1u","k://6N-6Q-6R.1e","k://6T.3d");e 1M=L 2c("9, ...[3554 bytes skipped]... Decoded script: var stTrName=new Array("zwei.in (33)","PlayPorn.to (29)","Porca Vacca Latina (24)","FreePorns.TV (14)","6TV.to (3)","Bruder Fickt Schwester (0)","PornoCloud.net (0)");var stTrUrl=new Array("http://zwei.in","http://playporn.to?td=6kino.org","http://porcavacca.the-chan.com","http://freeporns.tv","http://www.6tv.to","http://bruder-fickt-schwester.com","http://pornocloud.net");var stTrValues=new Array("9,35,0","3,17,1","1,4,0","6,4,0","2,2,0","37,6,5","18,5,0","11,4,0","8,2,0" ...[41291 bytes skipped]... | ||
http://6kino.org/wp-includes/js/jquery/jquery.js?ver=1.11.0 | 200 OK Content-Length: 96402 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://6kino.org/wp-content/plugins/yo-manga-jquery-ui-autocomplete/auto_complete.js?ver=3.9.2 | 200 OK Content-Length: 1046 Content-Type: application/javascript | clean |
http://6kino.org/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.63 | 200 OK Content-Length: 3263 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.4 | 200 OK Content-Length: 4289 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.10.4 | 200 OK Content-Length: 6521 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/ui/jquery.ui.position.min.js?ver=1.10.4 | 200 OK Content-Length: 6360 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/ui/jquery.ui.menu.min.js?ver=1.10.4 | 200 OK Content-Length: 9583 Content-Type: application/javascript | clean |
http://6kino.org/wp-includes/js/jquery/ui/jquery.ui.autocomplete.min.js?ver=1.10.4 | 200 OK Content-Length: 7786 Content-Type: application/javascript | clean |
http://6kino.org/?r_sortby=highest_rated&r_orderby=desc | 200 OK Content-Length: 87380 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: zwei.in <!DOCTYPE html> <!--[if IE 6]> <html id="ie6" lang="de-DE"> <![endif]--> <!--[if IE 7]> <html id="ie7" lang="de-DE"> <![endif]--> <!--[if IE 8]> <html id="ie8" lang="de-DE"> <![endif]--> <!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!--> <html lang="de-DE"> <!--<![endif]--> <head> <meta name=" ...[4201 bytes skipped]... | ||
http://6kino.org/?v_sortby=views&v_orderby=desc | 200 OK Content-Length: 89277 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: zwei.in <!DOCTYPE html> <!--[if IE 6]> <html id="ie6" lang="de-DE"> <![endif]--> <!--[if IE 7]> <html id="ie7" lang="de-DE"> <![endif]--> <!--[if IE 8]> <html id="ie8" lang="de-DE"> <![endif]--> <!--[if !(IE 6) | !(IE 7) | !(IE 8) ]><!--> <html lang="de-DE"> <!--<![endif]--> <head> <meta name=" ...[4201 bytes skipped]... |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: 6kino.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Sep 2014 02:47:16 GMT
Server: Apache mod_fcgid/2.3.10-dev
Content-Length: 109303
Content-Type: text/html; charset=UTF-8
X-Pingback: http://6kino.org/xmlrpc.php
X-Powered-By: PHP/5.4.31
...109303 bytes of data.
GET / HTTP/1.1
Host: 6kino.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Sep 2014 02:47:16 GMT
Server: Apache mod_fcgid/2.3.10-dev
Content-Length: 109303
Content-Type: text/html; charset=UTF-8
X-Pingback: http://6kino.org/xmlrpc.php
X-Powered-By: PHP/5.4.31
...109303 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: 6kino.org
Referer: http://www.google.com/search?q=6kino.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: 6kino.org
Referer: http://www.google.com/search?q=6kino.org
Result:
The result is similar to the first query. There are no suspicious redirects found.