Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=coolxxx.ru
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://coolxxx.ru/ | 200 OK Content-Length: 5257 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[4081 bytes skipped]... href="porno/view/category/show/name/brunette">ÐÑÑнеÑки</a> (5075)</div><div class="pic topcont"><img src="video.png" alt=""/><a href="porno/view/category/show/name/blowjob">ÐинеÑ</a> (3850)</div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html><a href='http://waplog.tj/click.php?4632'><img src='http://waplog.tj/image.php?4632,small' alt='waplog.tj' / ></a> <script type="text/javascript" src="http://mobtop.ru/c/83791.js"></script><noscript><a href="http://mobtop.ru/in/83791"><img src="http://mobtop.ru/83791.gif" alt="MobTop.Ru - РейÑинг и ÑÑаÑиÑÑика моР...[1314 bytes skipped]... Hidden iFrame found. style: hidden src: http://trafan.ru/link/92 <iframe src="http://trafan.ru/link/92" style="display:none"> | ||
http://mobtop.ru/c/83791.js | 200 OK Content-Length: 860 Content-Type: application/x-javascript | clean |
http://coolxxx.ru/fotosex | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=86400 Connection: close Date: Fri, 04 Apr 2014 13:10:53 GMT Location: http://coolxxx.ru/fotosex/ Server: nginx Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 Expires: Sat, 05 Apr 2014 13:10:53 GMT | clean |
http://coolxxx.ru/fotosex/ | 200 OK Content-Length: 8558 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[9725 bytes skipped]... >Юбки</a> 1426</div> </div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://mobiclick.su/js/250 | 200 OK Content-Length: 158 Content-Type: text/javascript | clean |
http://mobiclick.su/js/223 | 200 OK Content-Length: 158 Content-Type: text/javascript | clean |
http://coolxxx.ru/porno | HTTP/1.1 301 Moved Permanently Cache-Control: max-age=86400 Connection: close Date: Fri, 04 Apr 2014 13:10:54 GMT Location: http://coolxxx.ru/porno/ Server: nginx Content-Length: 232 Content-Type: text/html; charset=iso-8859-1 Expires: Sat, 05 Apr 2014 13:10:54 GMT | clean |
http://coolxxx.ru/porno/ | 200 OK Content-Length: 14722 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[17358 bytes skipped]... /></div> </div> <a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/category/show/name/amateur | 200 OK Content-Length: 6339 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[7256 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/video/show/title/nice_handjob/id/9151594 | 200 OK Content-Length: 3965 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[4209 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/video/show/title/nice_handjob/id/rtsp://rtsp.youporn.com/dl/1396618388/1a8475d7a21e8ba94b9a976afdfd5dfd/201401/05/9151594/180p_150k_9151594.3gp | 200 OK Content-Length: 4098 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[4427 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/category/browse | 200 OK Content-Length: 14838 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[17520 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/category/show/name/anal | 200 OK Content-Length: 6099 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[7016 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/video/show/title/3d_porn/id/631716 | 200 OK Content-Length: 3698 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[3918 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/test404page.js | 404 Not Found Content-Length: 758 Content-Type: text/html | clean |
http://coolxxx.ru/porno/view/video/show/title/chanel_chavez_and_kat_get_ass_fucked_hard/id/9316997 | 200 OK Content-Length: 4117 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[4361 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> | ||
http://coolxxx.ru/porno/view/video/show/title/chanel_chavez_and_kat_get_ass_fucked_hard/id/rtsp://rtsp.youporn.com/dl/1396620536/d20c869705a01fae3e948fd312318a68/201403/12/9316997/180p_150k_9316997.3gp | 200 OK Content-Length: 4098 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: xxxmo.ru ...[4427 bytes skipped]... rno">РкаÑегоÑии</a><br /></div></div><a href="http://nclick.su/go/26904/1"><img src="http://nclick.su/img/26904/1" alt="nclick.ru" /></a><script type="text/javascript" src="http://mobiclick.su/js/250"></script> <script type="text/javascript" src="http://mobiclick.su/js/223"></script> <div class="foot"><div class="footB"> © 2014 xxxmo.ru - <b>ÐоÑно на ÑелеÑон</b> </div></div></body></html> |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: coolxxx.ru
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Connection: close
Date: Fri, 04 Apr 2014 13:10:53 GMT
Server: nginx
Content-Length: 5257
Content-Type: text/html; charset=UTF-8
Expires: Sat, 05 Apr 2014 13:10:53 GMT
X-Powered-By: PHP/5.4.10
...5257 bytes of data.
GET / HTTP/1.1
Host: coolxxx.ru
Result:
HTTP/1.1 200 OK
Cache-Control: max-age=86400
Connection: close
Date: Fri, 04 Apr 2014 13:10:53 GMT
Server: nginx
Content-Length: 5257
Content-Type: text/html; charset=UTF-8
Expires: Sat, 05 Apr 2014 13:10:53 GMT
X-Powered-By: PHP/5.4.10
...5257 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: coolxxx.ru
Referer: http://www.google.com/search?q=coolxxx.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: coolxxx.ru
Referer: http://www.google.com/search?q=coolxxx.ru
Result:
The result is similar to the first query. There are no suspicious redirects found.