New scan:

Malware Scanner report for donne-mature.co

Malicious/Suspicious/Total urls checked
1/0/16
1 page has malicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "donne-mature.co" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/1
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=donne-mature.co

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://donne-mature.co/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://donne-mature.co/
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 06:37:27 GMT
Location: http://www.donne-mature.co/
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.3.29
Vary: Accept-Encoding
Content-Length: 235
Content-Type: text/html; charset=iso-8859-1
clean
http://www.donne-mature.co/
200 OK
Content-Length: 38298
Content-Type: text/html
clean
http://www.donne-mature.co/wp-includes/js/jquery/jquery.js?ver=1.11.1
200 OK
Content-Length: 95807
Content-Type: application/javascript
clean
http://www.donne-mature.co/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK
Content-Length: 7200
Content-Type: application/javascript
clean
http://adspaces.ero-advertising.com/adspace/299280.js
200 OK
Content-Length: 3854
Content-Type: application/javascript
clean
http://s1.slimtrade.com/s3883.js
200 OK
Content-Length: 9090
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: 18enni.net

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('e m=w N("3h 2F (9)","1L.H (9)","1K.H (7)","1C.1D (7)","1H.p (2)","1l.p (2)");e x=w N("l://u.2D.p/O/O.L","l://u.1L.H?1F=T-Q.1k","l://u.1K.H","l://u.1C.1D/?2B=T-Q","l://u.1H.p/?1F=T-Q.1k","l://u.1l.p");e U=w N("24,17,6","27,15,3","2,2,1","
...[3605 bytes skipped]...

Decoded script:


var stTrName=new Array("Cazzo Figa (9)","incesti.net (9)","18enni.net (7)","pornoitalia.it (7)","koalaporno.com (2)","videocasalinghi.com (2)");var stTrUrl=new Array("http://www.cazzofiga.com/random/random.php","http://www.incesti.net?td=donne-mature.co","http://www.18enni.net","http://www.pornoitalia.it/?id=donne-mature","http://www.koalaporno.com/?td=donne-mature.co","http://www.videocasalinghi.com");var stTrValues=new Array("24,17,6","27,15,3","2,2,1","6,3,1","20,12,1","3,3,0","2,8,0","1,1,0","5,3,0","87,1
...[17918 bytes skipped]...

http://ads.juicyads.com/jsclients/jac.js
200 OK
Content-Length: 91344
Content-Type: application/x-javascript
clean
http://adspaces.ero-advertising.com/adspace/229437.js
200 OK
Content-Length: 1822
Content-Type: application/javascript
clean
http://syndication.exoclick.com/splash.php?cat=129&idsite=260439&idzone=802359&login=videoitaliani&type=12&capping=0
200 OK
Content-Length: 0
Content-Type: text/html
clean
http://syndication.exoclick.com/test404page.js
404 Not Found
Content-Length: 564
Content-Type: text/html
clean
http://www.donne-mature.co/wp-content/plugins/acurax-on-click-pop-under/js.php
200 OK
Content-Length: 2958
Content-Type: text/html
clean
http://adspaces.ero-advertising.com/adspace/299284.js
200 OK
Content-Length: 1571
Content-Type: application/javascript
clean
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/selectnav.js?ver=1.0
200 OK
Content-Length: 3750
Content-Type: application/javascript
clean
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/jQuery.ba-resize.min.js?ver=1.0
200 OK
Content-Length: 1098
Content-Type: application/javascript
clean
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/main.js?ver=1.0
200 OK
Content-Length: 2434
Content-Type: application/javascript
clean
http://www.donne-mature.co/wp-content/themes/novavideo/scripts/scrollToTop.min.js?ver=1.0
200 OK
Content-Length: 1146
Content-Type: application/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: donne-mature.co

Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 06:37:27 GMT
Location: http://www.donne-mature.co/
Server: Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 PHP/5.3.29
Vary: Accept-Encoding
Content-Length: 235
Content-Type: text/html; charset=iso-8859-1

...235 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: donne-mature.co
Referer: http://www.google.com/search?q=donne-mature.co

Result:
The result is similar to the first query. There are no suspicious redirects found.