New scan:

Malware Scanner report for kinkyamateurtube.com

Malicious/Suspicious/Total urls checked
0/5/20
5 pages have suspicious code. See details below
Blacklists
OK
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/11
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Scanned pages/files

RequestServer responseStatus
http://kinkyamateurtube.com/
200 OK
Content-Length: 180977
Content-Type: text/html
suspicious
Suspicious code found



<div class="headercont"><!--headercont-->

<h1 class="logo"><a href="http://kinkyamateurtube.com" title="Kinky Amateur Tube">
<img src="http://kinkyamateurtube.com/wp-content/uploads/2014/03/Fondo_Banner_Kinky-1220x75_1.jpg" alt="" />
</a>

...[1869 bytes skipped]...

http://adspaces.ero-advertising.com/adspace/306779.js
200 OK
Content-Length: 758
Content-Type: application/javascript
clean
http://toplist.raidrush.ws/js/popup.php?sid=4675
200 OK
Content-Length: 1885
Content-Type: text/html
clean
http://toplist.raidrush.ws/test404page.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 01:33:26 GMT
Location: http://toplist.raidrush.ws/
Server: nginx
Content-Type: text/html
clean
http://toplist.raidrush.ws/
200 OK
Content-Length: 35562
Content-Type: text/html
suspicious
Page code contains blacklisted domain: zwei.in

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="de-DE">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="Content-Language" content="de" />
<meta name="description" content="Die Raid-Rush Topliste ist ein kostenloses und
...[4608 bytes skipped]...

http://toplist.raidrush.ws/js/effekt.js
200 OK
Content-Length: 464
Content-Type: application/x-javascript
clean
http://raidrush.ws/ticker/ticker.js
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 16 Sep 2014 01:33:21 GMT
Location: http://www.raidrush.ws/ticker/ticker.js
Server: Apache
Vary: Accept-Encoding
Content-Length: 247
Content-Type: text/html; charset=iso-8859-1
clean
http://www.raidrush.ws/ticker/ticker.js
200 OK
Content-Length: 2887
Content-Type: application/javascript
clean
http://ads.raidrush.org/banner.php?w=468&h=60&t=sfw&s=rrws
200 OK
Content-Length: 281
Content-Type: text/html
clean
http://ads.raidrush.org/test404page.js
404 Not Found
Content-Length: 564
Content-Type: text/html
clean
http://toplist.raidrush.ws/rand.php?t=js&cid=&lim=1
200 OK
Content-Length: 518
Content-Type: text/html
clean
http://toplist.raidrush.ws/out/3748/
HTTP/1.1 307 Temporary Redirect
Connection: close
Date: Tue, 16 Sep 2014 01:33:28 GMT
Location: http://mlcboard.com
Server: nginx
Content-Type: text/html
clean
http://mlcboard.com/
HTTP/1.1 302 Moved Temporarily
Connection: close
Date: Tue, 16 Sep 2014 01:33:30 GMT
Location: http://mlcboard.com/forum/index.php
Server: cloudflare-nginx
Content-Type: text/html
CF-RAY: 16a950f7f20e0f57-FRA
Set-Cookie: __cfduid=d575ce7cdfa4016d45decc4c4497e59461410831210239; expires=Mon, 23-Dec-2019 23:50:00 GMT; path=/; domain=.mlcboard.com; HttpOnly
clean
http://mlcboard.com/forum/index.php
200 OK
Content-Length: 475
Content-Type: text/html
clean
http://ads.raidrush.org/banner.php?w=160&h=600&t=sfw&s=rrtop
200 OK
Content-Length: 284
Content-Type: text/html
clean
http://ads.raidrush.org/c.php?x=0
HTTP/1.1 307 Temporary Redirect
Cache-Control: no-store, no-cache, must-revalidate
Connection: close
Date: Tue, 16 Sep 2014 01:33:29 GMT
Location: http://buxflow.com/xref.php?ref=ok&dref=go
Server: nginx
Content-Type: text/javascript; charset=iso-8859-1
clean
http://buxflow.com/xref.php?ref=ok&dref=go
200 OK
Content-Length: 1522
Content-Type: text/javascript
suspicious
Suspicious code. Script contains iFrame.

function set2xcc(url,id) { var ccment = document.getElementById(id); if(id=="img2x"){ccment.src = url;}else{try{ccment.contentWindow.location.replace(url);}catch(e){ccment.src = url;}} return true;}var x2img = "<di"+"v style=\"display:no"+"ne;\"><im"+"g src=\"\" id=\"img2x\" /></d"+"iv>";var x2frame = "<di"+"v st"+"yle=\"display:no"+"ne;\"><ifr"+"ame src=\"\" id=\"f2x\" name=\"f2x\"></ifr"+"ame></d"+"iv>";v
...[1142 bytes skipped]...

Decoded script:

...[1372 bytes skipped]...
"f2x");
}, 19500 */
function () {
set2xcc("http://youspacko.com/com/ad.php?http://www.firstload.de/affiliate/log.php?log=45671", "f2x");
}
/*** called setTimeout with function () {
set2xcc("http://youspacko.com/com/ad.php?http://www.firstload.de/affiliate/log.php?log=45671", "f2x");
}, 100 */
<div style="display:none;"><img src="" id="img2x" /></div><div style="display:none;"><iframe src="" id="f2x" name="f2x"></iframe></div><div style="display:none;"><iframe src="" id="f3x" name="f3x"></iframe></div><div style="display:none;"><iframe src="" id="f4x" name="f4x"></iframe></div>

http://kinkyamateurtube.com//s7.addthis.com/js/300/addthis_widget.js/
404 Not Found
Content-Length: 11138
Content-Type: text/html
suspicious
Suspicious code found

<div id="content"><!--content-->
<div class="contentbg">
<div class="contenttop">
<div class="contentbtm">
<div class="postcont" style="width:1020px"><!--postcont-->
<div class="entry"><!--entry-->
<div class="nopost">Sorry, but you are looking for something that isn't here.</div&g
...[463 bytes skipped]...

http://kinkyamateurtube.com/wp-content/plugins/wp-postratings/postratings-js.js?ver=1.79
200 OK
Content-Length: 3329
Content-Type: application/x-javascript
clean
http://kinkyamateurtube.com/category/anal/
200 OK
Content-Length: 180473
Content-Type: text/html
suspicious
Suspicious code found



<div class="headercont"><!--headercont-->

<h1 class="logo"><a href="http://kinkyamateurtube.com" title="Kinky Amateur Tube">
<img src="http://kinkyamateurtube.com/wp-content/uploads/2014/03/Fondo_Banner_Kinky-1220x75_1.jpg" alt="" />
</a>

...[1869 bytes skipped]...


Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: kinkyamateurtube.com

Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 16 Sep 2014 01:33:27 GMT
Server: nginx
Content-Type: text/html; charset=UTF-8
X-Pingback: http://kinkyamateurtube.com/xmlrpc.php
X-Powered-By: PHP/5.3.28
Second query (visit from search engine):
GET / HTTP/1.1
Host: kinkyamateurtube.com
Referer: http://www.google.com/search?q=kinkyamateurtube.com

Result:
The result is similar to the first query. There are no suspicious redirects found.

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=kinkyamateurtube.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kinkyamateurtube.com/

Result: kinkyamateurtube.com is not infected or malware details are not published yet.