New scan:

Malware Scanner report for tube8-italiano.com

Malicious/Suspicious/Total urls checked
1/1/9
2 pages have malicious or suspicious code. See details below
Blacklists
Found
The website is marked by Google as suspicious.

The website "tube8-italiano.com" is probably hacked and losing its visitors. You need to take action as soon as possible to fix security issues.
Malicious Redirects
OK
Malicious/Hidden/Total iFrames
0/0/0
Deface / Content modification
OK

Free periodic scanning and alerting: setup
(requires eVuln badge or a link to eVuln.com)

Malware & Hack Repair

  • Malware Removal
  • Blacklists Removal
  • Reason Eliminating
  • 1 Month Hack Insurance

More details

Website Hack Insurance

  • Files & DB Monitoring
  • Daily Backups
  • Malware & Hack Detection
  • Unlimited Hack Repairs

More details

Safe Browsing / Blacklists

Query: http://www.google.com/safebrowsing/diagnostic?site=tube8-italiano.com

Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.

Scanned pages/files

RequestServer responseStatus
http://tube8-italiano.com/
200 OK
Content-Length: 30230
Content-Type: text/html
suspicious
Page code contains blacklisted domain: px.pornorio.com

...[1025 bytes skipped]...
me="google-site-verification" content="Wd976Dc02u5iHvd4Z5qGao2dEEEbh2V5WRCyIl0ermc" />



<link rel="stylesheet" href="/media/css/main.css" type="text/css" media="screen" />

<script type="text/javascript" src="http://s1x.slimtrade.com/s2200.js"></script>
<script type="text/javascript" src="/media/js/global.js"></script>
<script type="text/javascript" src="http://px.pornorio.com/paref.js?s=2200"></script>


<script type="text/javascript">var STRADE_ID=2200;var STRADE_GALLERY=50;var SRADE_OUT;var stLinkNoFollow=true;var stNewWindow=true;</script>
</head>
<body onunload="anti();">
<div id="wrapper">
<div id="header">
<div id="logo">
<a href="http://tube8-italiano.com" title="Tube Porno Filme"><img alt="Tube Porno Filme" src="/gfx/logo.png"
...[2879 bytes skipped]...

http://s1x.slimtrade.com/s2200.js
200 OK
Content-Length: 6319
Content-Type: application/javascript
malicious
Malicious code found. Script contains blacklisted domain: surf2x-porno.com

eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('e p=w 1d("2v 2w 2y (2)","7 1X (0)","2p 1X (0)","2o 2q (0)","2r 2s (0)");e A=w 1d("m://2H.2K.q","m://2C.2f.2j","m://2g-2l.q","m://2a-2d.q","m://2b-2B.q");e Z=w 1d("1h,3H,3v","L,3E,1r","W,3G,1U","2V,2W,W","22,2R,2N","26,2O,C","2Q,2X,F","2Y,3f
...[3589 bytes skipped]...

Decoded script:


var stTrName=new Array("Red Light Italia (2)","7 Porno (0)","Surf2x Porno (0)","XPorn Hub (0)","Youjizz Italiano (0)");var stTrUrl=new Array("http://italia.redlighthost.com","http://www.seventube.info","http://surf2x-porno.com","http://xporn-hub.com","http://youjizz-italiano.com");var stTrValues=new Array("155,465,281","82,246,189","124,372,150","312,826,124","22,134,106","26,139,91","193,579,89","118,353,64","120,360,64","122,213,20","50,150,16","25,75,12","19,62,7","20,59,4","24,72,4","5,79,4","6,64,4","6,36,3","1,98,1","2,47,0","8,96,0","8,32,0","77,154,140","76,91,51","12,31,8","12,29,6","9,19,2","22,52,2","4,22,0","27,36,0","75,175,127","287,229,108","39,
...[11638 bytes skipped]...

http://tube8-italiano.com/media/js/global.js
200 OK
Content-Length: 107423
Content-Type: application/javascript
clean
http://px.pornorio.com/paref.js?s=2200
200 OK
Content-Length: 0
Content-Type: text/html
clean
http://px.pornorio.com/test404page.js
200 OK
Content-Length: 0
Content-Type: text/html
clean
http://adspaces.ero-advertising.com/adspace/182570.js
200 OK
Content-Length: 1548
Content-Type: application/javascript
clean
http://adspaces.ero-advertising.com/adspace/181843.js
200 OK
Content-Length: 1284
Content-Type: application/javascript
clean
http://spaces.slimspots.com/slimspace/358.js
200 OK
Content-Length: 44
Content-Type: text/html
clean
http://spaces.slimspots.com/slimspace/193.js
200 OK
Content-Length: 2903
Content-Type: text/javascript
clean

Malicious Redirects

First query (normal visit):
GET / HTTP/1.1
Host: tube8-italiano.com

Result:
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Connection: close
Date: Wed, 17 Sep 2014 16:03:23 GMT
Pragma: no-cache
Server: lighttpd/1.4.31
Content-Type: text/html
Expires: Fri, 17 Oct 2014 16:03:23 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Set-Cookie: PHPSESSID=tab6mc9bqa01716ohmib95gmb2; path=/
Set-Cookie: ck=1; expires=Sat, 12-Sep-2015 16:03:23 GMT; path=/; domain=tube8-italiano.com
X-Powered-By: PHP/5.4.4-14
Second query (visit from search engine):
GET / HTTP/1.1
Host: tube8-italiano.com
Referer: http://www.google.com/search?q=tube8-italiano.com

Result:
The result is similar to the first query. There are no suspicious redirects found.