Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=familyscandal.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://familyscandal.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: transports-nonde.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 20 Jul 2013 18:19:32 GMT
Accept-Ranges: bytes
ETag: "211f5-e73-4e1eb47d00d21"
Server: nginx/1.5.2
Content-Length: 3699
Content-Type: text/html
Last-Modified: Sat, 20 Jul 2013 06:09:05 GMT
...3699 bytes of data.
GET / HTTP/1.1
Host: transports-nonde.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 20 Jul 2013 18:19:32 GMT
Accept-Ranges: bytes
ETag: "211f5-e73-4e1eb47d00d21"
Server: nginx/1.5.2
Content-Length: 3699
Content-Type: text/html
Last-Modified: Sat, 20 Jul 2013 06:09:05 GMT
...3699 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: transports-nonde.com
Referer: http://www.google.com/search?q=transports-nonde.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: transports-nonde.com
Referer: http://www.google.com/search?q=transports-nonde.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://familyscandal.com/ | 200 OK Content-Length: 84837 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: taboo.cc ...[2698 bytes skipped]... egory/voyeur" title="Voyeur">Voyeur</a> <a href="http://smut7.com/category/webcam" title="Webcams">Webcam</a> <a href="http://smut7.com/category/wet" title="Wet">Wet</a> <a href="http://smut7.com/category/xxx" title="XXX">XXX</a> <a href="http://youngpussy.ws" title="young pussy">Young</a> <a href="http://zoo.taboo.cc" title="Anime Animal sex">Zoo</a> <script src="http://banners.cams.com/piclist?message=6&pid=p94197&rand=13&site=cams"></script> </div> </div> <div class="asstitle"> <a href="/contact.php?report" title="familyscandal.com / REPORT ABUSE">report</a> <a href="http://hitslap.com/?ref=9#get" title="familyscandal.com / GET HITS">buy hits</a> <a ...[1148 bytes skipped]... | ||
http://banners.adultfriendfinder.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=square250&align=left&find_sex=2&looking_for_person=1&photo=3&explicit=1&no_rating=30&page=search&pid=p145876 | 200 OK Content-Length: 5919 Content-Type: text/html | clean |
http://banners.adultfriendfinder.com/test404page.js | HTTP/1.1 404 Not Found Connection: Keep-Alive Date: Tue, 16 Sep 2014 10:54:34 GMT Location: http://graphics.pop6.com/banners/ffadult/15489_468x30.gif Server: Apache Content-Length: 0 Content-Type: text/plain Keep-Alive: timeout=5, max=124 Set-Cookie: banner_user_id=78.158.11.226-1410864874-73332; path=/; domain=.adultfriendfinder.com; expires=Wed, 17-Sep-2014 10:54:34 GMT Set-Cookie: banner=ffadult_none_p07_banner-15489_cl0; path=/; domain=.adultfriendfinder.com; expires=Wed, 17-Sep-2014 10:54:34 GMT X-ApacheServer: ki54-31.friendfinderinc.com X-PERF: 0.033284,0.021763,DB_2_0.0041480,CD_8_0.0019250,PK_2_0.0000980,CE_3_0.0053500 | clean |
http://graphics.pop6.com/banners/ffadult/15489_468x30.gif | 200 OK Content-Length: 15961 Content-Type: image/gif | clean |
http://graphics.pop6.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://familyscandal.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 404 Not Found Connection: close Date: Tue, 16 Sep 2014 10:54:35 GMT Server: Apache Content-Length: 294 Content-Type: text/html; charset=UTF-8 | malicious |
http://taboo.cc/exit | HTTP/1.1 200 OK Connection: close Date: Tue, 16 Sep 2014 10:54:35 GMT Server: Apache Content-Type: text/html | clean |
http://taboo.cc/video/26411/two_vicious_nymphs_fuck_in_the_riverbed | 200 OK Content-Length: 124063 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.realexgfsexposed.com <!-- hitslap.com redirect code begin -->
<script src=http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile></script> <!-- hitslap.com redirect code end --> <script type="text/javascript" src="http://banners.adultfriendfinder.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=square250&align=left&find_sex=2&looking_for_person=1&photo=3&explici ...[4394 bytes skipped]... | ||
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile | 200 OK Content-Length: 124 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+' | 200 OK Content-Length: 147 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 170 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 193 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 239 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 262 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 285 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 308 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 331 Content-Type: text/html | clean |