Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=anime.littlet33n.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://anime.littlet33n.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: xclcd.com
Result:
HTTP/1.1 200 OK
Date: Sat, 28 Jun 2014 04:11:30 GMT
Accept-Ranges: bytes
ETag: "4e3c34ab9a8ecf1:1aef6"
Server: Microsoft-IIS/6.0
Content-Length: 22188
Content-Location: http://xclcd.com/index.html
Content-Type: text/html
Last-Modified: Mon, 23 Jun 2014 04:21:56 GMT
X-Powered-By: ASP.NET
...22188 bytes of data.
GET / HTTP/1.1
Host: xclcd.com
Result:
HTTP/1.1 200 OK
Date: Sat, 28 Jun 2014 04:11:30 GMT
Accept-Ranges: bytes
ETag: "4e3c34ab9a8ecf1:1aef6"
Server: Microsoft-IIS/6.0
Content-Length: 22188
Content-Location: http://xclcd.com/index.html
Content-Type: text/html
Last-Modified: Mon, 23 Jun 2014 04:21:56 GMT
X-Powered-By: ASP.NET
...22188 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: xclcd.com
Referer: http://www.google.com/search?q=xclcd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: xclcd.com
Referer: http://www.google.com/search?q=xclcd.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://anime.littlet33n.com/ | 200 OK Content-Length: 82400 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: taboo.cc ...[2676 bytes skipped]... egory/voyeur" title="Voyeur">Voyeur</a> <a href="http://smut7.com/category/webcam" title="Webcams">Webcam</a> <a href="http://smut7.com/category/wet" title="Wet">Wet</a> <a href="http://smut7.com/category/xxx" title="XXX">XXX</a> <a href="http://youngpussy.ws" title="young pussy">Young</a> <a href="http://zoo.taboo.cc" title="Anime Animal sex">Zoo</a> <script src="http://banners.cams.com/piclist?message=6&pid=p94197&rand=13&site=cams"></script> </div> </div> <div class="asstitle"> <a href="/contact.php?report" title="anime.littlet33n.com / REPORT ABUSE">report</a> <a href="http://hitslap.com/?ref=9#get" title="anime.littlet33n.com / GET HITS">buy hits</a> ...[1163 bytes skipped]... | ||
http://banners.cams.com/iframead_js_im_box?lang=english&plain_text=1&skip_lpo=1&version=1&delay=1&skin=6&align=left&genre_keys=01,02,05,08,09,03,04,07&min_age=18&max_age=35&explicit=1&page=cover&pid=p94197 | 200 OK Content-Length: 6357 Content-Type: text/html | clean |
http://banners.cams.com/test404page.js | HTTP/1.1 404 Not Found Connection: Keep-Alive Date: Sun, 14 Sep 2014 21:26:30 GMT Location: http://graphics.pop6.com/banners/cams/12216_468x60.jpg Server: Apache Content-Length: 0 Content-Type: text/plain Keep-Alive: timeout=5, max=124 Set-Cookie: banner_user_id=78.158.11.226-1410729990-23153; path=/; domain=.cams.com; expires=Mon, 15-Sep-2014 21:26:30 GMT Set-Cookie: banner=cams_none_p23_banner-12216_cl0; path=/; domain=.cams.com; expires=Mon, 15-Sep-2014 21:26:30 GMT X-ApacheServer: ki10-30.friendfinderinc.com X-PERF: 0.047908,0.039971,DB_2_0.0037870,CD_8_0.0016530,PK_2_0.0001130,CE_3_0.0023840 | clean |
http://graphics.pop6.com/banners/cams/12216_468x60.jpg | 200 OK Content-Length: 16360 Content-Type: image/jpeg | clean |
http://graphics.pop6.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://anime.littlet33n.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 404 Not Found Connection: close Date: Sun, 14 Sep 2014 21:26:31 GMT Server: Apache Content-Length: 297 Content-Type: text/html; charset=UTF-8 | malicious |
http://taboo.cc/exit | HTTP/1.1 200 OK Connection: close Date: Sun, 14 Sep 2014 21:26:31 GMT Server: Apache Content-Type: text/html | clean |
http://taboo.cc/video/26411/two_vicious_nymphs_fuck_in_the_riverbed | 200 OK Content-Length: 91859 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bizarresexuality.com <!-- hitslap.com redirect code begin -->
<script src=http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile></script> <!-- hitslap.com redirect code end --> <script type="text/javascript" src="http://banners.cams.com/iframead_js_im_box?lang=english&plain_text=1&skip_lpo=1&version=1&delay=1&skin=6&align=left&genre_keys=01,02,05,08,09,03,04,07&min_age=18&max_age=35&a ...[4364 bytes skipped]... | ||
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile | 200 OK Content-Length: 124 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+' | 200 OK Content-Length: 147 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 170 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 193 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 239 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 262 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 285 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 308 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 331 Content-Type: text/html | clean |