Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=donne-mature.co
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://donne-mature.co/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://donne-mature.co/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 16 Sep 2014 06:37:27 GMT Location: http://www.donne-mature.co/ Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.3.29 Vary: Accept-Encoding Content-Length: 235 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.donne-mature.co/ | 200 OK Content-Length: 38298 Content-Type: text/html | clean |
http://www.donne-mature.co/wp-includes/js/jquery/jquery.js?ver=1.11.1 | 200 OK Content-Length: 95807 Content-Type: application/javascript | clean |
http://www.donne-mature.co/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 | 200 OK Content-Length: 7200 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/299280.js | 200 OK Content-Length: 3854 Content-Type: application/javascript | clean |
http://s1.slimtrade.com/s3883.js | 200 OK Content-Length: 9090 Content-Type: application/javascript | malicious |
Malicious code found. Script contains blacklisted domain: 18enni.net eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('e m=w N("3h 2F (9)","1L.H (9)","1K.H (7)","1C.1D (7)","1H.p (2)","1l.p (2)");e x=w N("l://u.2D.p/O/O.L","l://u.1L.H?1F=T-Q.1k","l://u.1K.H","l://u.1C.1D/?2B=T-Q","l://u.1H.p/?1F=T-Q.1k","l://u.1l.p");e U=w N("24,17,6","27,15,3","2,2,1"," ...[3605 bytes skipped]... Decoded script: var stTrName=new Array("Cazzo Figa (9)","incesti.net (9)","18enni.net (7)","pornoitalia.it (7)","koalaporno.com (2)","videocasalinghi.com (2)");var stTrUrl=new Array("http://www.cazzofiga.com/random/random.php","http://www.incesti.net?td=donne-mature.co","http://www.18enni.net","http://www.pornoitalia.it/?id=donne-mature","http://www.koalaporno.com/?td=donne-mature.co","http://www.videocasalinghi.com");var stTrValues=new Array("24,17,6","27,15,3","2,2,1","6,3,1","20,12,1","3,3,0","2,8,0","1,1,0","5,3,0","87,1 ...[17918 bytes skipped]... | ||
http://ads.juicyads.com/jsclients/jac.js | 200 OK Content-Length: 91344 Content-Type: application/x-javascript | clean |
http://adspaces.ero-advertising.com/adspace/229437.js | 200 OK Content-Length: 1822 Content-Type: application/javascript | clean |
http://syndication.exoclick.com/splash.php?cat=129&idsite=260439&idzone=802359&login=videoitaliani&type=12&capping=0 | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://syndication.exoclick.com/test404page.js | 404 Not Found Content-Length: 564 Content-Type: text/html | clean |
http://www.donne-mature.co/wp-content/plugins/acurax-on-click-pop-under/js.php | 200 OK Content-Length: 2958 Content-Type: text/html | clean |
http://adspaces.ero-advertising.com/adspace/299284.js | 200 OK Content-Length: 1571 Content-Type: application/javascript | clean |
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/selectnav.js?ver=1.0 | 200 OK Content-Length: 3750 Content-Type: application/javascript | clean |
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/jQuery.ba-resize.min.js?ver=1.0 | 200 OK Content-Length: 1098 Content-Type: application/javascript | clean |
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/main.js?ver=1.0 | 200 OK Content-Length: 2434 Content-Type: application/javascript | clean |
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/scrollToTop.min.js?ver=1.0 | 200 OK Content-Length: 1146 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: donne-mature.co
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 06:37:27 GMT
Location: http://www.donne-mature.co/
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.3.29
Vary: Accept-Encoding
Content-Length: 235
Content-Type: text/html; charset=iso-8859-1
...235 bytes of data.
GET / HTTP/1.1
Host: donne-mature.co
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 06:37:27 GMT
Location: http://www.donne-mature.co/
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.3.29
Vary: Accept-Encoding
Content-Length: 235
Content-Type: text/html; charset=iso-8859-1
...235 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: donne-mature.co
Referer: http://www.google.com/search?q=donne-mature.co
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: donne-mature.co
Referer: http://www.google.com/search?q=donne-mature.co
Result:
The result is similar to the first query. There are no suspicious redirects found.