New scan:

Malware Scanner report for kostenlose-schlampen.com

Malicious/Suspicious/Total urls checked
1/1/13
2 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Yandex as suspicious.

The website "kostenlose-schlampen.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=kostenlose-schlampen.com

Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kostenlose-schlampen.com/

Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://kostenlose-schlampen.com/
200 OK
Content-Length: 43602
Content-Type: text/html
clean
http://s1x.slimtrade.com/s1750.js
200 OK
Content-Length: 3825
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: xporn-hub.com

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('g p=A N("J-E.e (3)","2r 2u (1)","1h-K.1c (1)","2x 2h (0)","J-1d.e (0)","1e-B.e (0)","2K 2M (0)","2N (0)","2G (0)","L-E.e (0)","2F (0)","1b.e (0)","1a.e (0)","X-K.e (0)","Y.e (0)","Z.e (0)","1f-1g.e (0)","2g (0)","1m-1n.e (0)");g x=A N("f:
...[3389 bytes skipped]...

Decoded script:

...[210 bytes skipped]...
","Youjizz (0)","tube8-sexfilme.com (0)","Tube8 (0)","pornoclipfish.com (0)","hurrasex.com (0)","gute-pornofilme.com (0)","glamourfick.com (0)","erotikalarm.com (0)","dildo-huren.com (0)","Blowjobs (0)","youtube-pornos.com (0)");var stTrUrl=new Array("http://xhamster-sexfilme.com","http://www.amateur-fickerei.net","http://hd-pornofilme.info","http://versaute-studentinnen.com","http://xhamster-sexclips.com","http://4tube-porno.com","http://xporn-hub.com","http://xvideos-porno.com","http://youjizz-deutsch.com","http://tube8-sexfilme.com","http://tube8-porno.com","http://pornoclipfish.com","http://hurrasex.com","http://gute-pornofilme.com","http://glamourfick.com","http://erotikalarm.com","http://dildo-huren.com","http://blasemaul.com","http://youtube-pornos.com");var stTrValues=new Array("2,6,2","9,14,1","3,6,1","75,64,1","34,39,1","2,1,0","15,2,0","2,2,0","1,1,0","1,1,0","7,13,0","7,2,0","2,1,0","2,3,0","2,2,0","1,2,0","1,0,0","1
...[7143 bytes skipped]...

http://kostenlose-schlampen.com/media/js/jquery-1.5.2.min.js
200 OK
Content-Length: 85939
Content-Type: application/javascript
clean
http://www.google.com/recaptcha/api/js/recaptcha_ajax.js
200 OK
Content-Length: 115874
Content-Type: text/javascript
clean
http://kostenlose-schlampen.com/media/js/global.js?t=893739
200 OK
Content-Length: 21743
Content-Type: application/javascript
suspicious
Page code contains blacklisted domain: s1.slimtrade.com

/*!
* jQuery UI 1.8.11
*
* Copyright 2011, AUTHORS.txt (http://jqueryui.com/about)
* Dual licensed under the MIT or GPL Version 2 licenses.
* http://jquery.org/license
*
* http://docs.jquery.com/UI
*/
(function(c,j){function k(a){return!c(a).parents().andSelf().filter(function(){return c.curCSS(this,"visibility")==="hidden"||c.expr.filters.hidden(this)}).length}c.ui=c.ui||{};if(!c.ui.version){c.extend
...[3899 bytes skipped]...

http://timteen.com/parx/parx.php?s=1750
200 OK
Content-Length: 334
Content-Type: text/javascript
clean
http://slimspread.com/adspace.php?a=th
200 OK
Content-Length: 39
Content-Type: text/html
clean
http://slimspread.com/test404page.js
404 Not Found
Content-Length: 345
Content-Type: text/html
clean
http://slimspread.com/adspace.php?a=b300x250&n=0
200 OK
Content-Length: 39
Content-Type: text/html
clean
http://slimspread.com/adspace.php?a=b300x250&n=1
200 OK
Content-Length: 39
Content-Type: text/html
clean
http://slimspread.com/adspace.php?a=b300x250&n=2
200 OK
Content-Length: 39
Content-Type: text/html
clean
http://slimspread.com/adspace.php?a=pu&n=0
200 OK
Content-Length: 39
Content-Type: text/html
clean
http://slimspread.com/adspace.php?a=pu&n=1
200 OK
Content-Length: 39
Content-Type: text/html
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: kostenlose-schlampen.com

Result:
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Fri, 12 Sep 2014 10:09:23 GMT
Pragma: no-cache
Server: lighttpd/1.4.28
Content-Type: text/html; charset=utf-8
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=lqa2qjfoo147in2ls3ha7cqih3; path=/
X-Powered-By: PHP/5.3.3-7+squeeze14
Second query (visit from search engine):
GET / HTTP/1.1
Host: kostenlose-schlampen.com
Referer: http://www.google.com/search?q=kostenlose-schlampen.com

Result:
The result is similar to the first query. There are no suspicious redirects found.