Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tj3z.net
Result:
HTTP/1.1 200 OK
Date: Sat, 04 Oct 2014 23:36:16 GMT
Accept-Ranges: bytes
ETag: "64bf1ff9bdccf1:164fdfb"
Server: Microsoft-IIS/6.0
Content-Length: 23200
Content-Location: http://tj3z.net/index.htm
Content-Type: text/html
Last-Modified: Tue, 30 Sep 2014 10:47:58 GMT
X-Powered-By: ASP.NET
...23200 bytes of data.
GET / HTTP/1.1
Host: tj3z.net
Result:
HTTP/1.1 200 OK
Date: Sat, 04 Oct 2014 23:36:16 GMT
Accept-Ranges: bytes
ETag: "64bf1ff9bdccf1:164fdfb"
Server: Microsoft-IIS/6.0
Content-Length: 23200
Content-Location: http://tj3z.net/index.htm
Content-Type: text/html
Last-Modified: Tue, 30 Sep 2014 10:47:58 GMT
X-Powered-By: ASP.NET
...23200 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tj3z.net
Referer: http://www.google.com/search?q=tj3z.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tj3z.net
Referer: http://www.google.com/search?q=tj3z.net
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://fuckedtime.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 15:07:23 GMT Location: http://www.fuckedtime.com/ Server: servikus/nginx Content-Length: 234 Content-Type: text/html; charset=iso-8859-1 X-Cache: HIT from Backend | clean |
http://www.fuckedtime.com/ | 200 OK Content-Length: 81420 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bitchcrawler.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"/> <title>Fucked Virgin Sex | Amateur Teen Porn Videos & Free Porns - fuckedtime.com</title> <meta name="description" content="Welcome to Amateur ...[4159 bytes skipped]... | ||
http://adspaces.ero-advertising.com/adspace/205308.js | 200 OK Content-Length: 1834 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/111469.js | 200 OK Content-Length: 1824 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/111470.js | 200 OK Content-Length: 1840 Content-Type: application/javascript | clean |
http://adspaces.ero-advertising.com/adspace/111471.js | 200 OK Content-Length: 1820 Content-Type: application/javascript | clean |
http://s10.histats.com/js9.js | 200 OK Content-Length: 7417 Content-Type: text/javascript | clean |
http://fuckedtime.com/?ctr=filter&act=videos | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 15:07:26 GMT Location: http://www.fuckedtime.com/?ctr=filter&act=videos Server: servikus/nginx Content-Length: 260 Content-Type: text/html; charset=iso-8859-1 X-Cache: HIT from Backend | clean |
http://www.fuckedtime.com/?ctr=filter&act=videos | 200 OK Content-Length: 79913 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bitchcrawler.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"/> <title>Video Content | Amateur Teen Porn Videos & Free Porns - fuckedtime.com</title> <meta name="description" content="Welcome to Amateur Teen ...[4169 bytes skipped]... | ||
http://www.fuckedtime.com/index.php?ctr=view&id=1335 | HTTP/1.1 302 Moved Temporarily Connection: close Date: Mon, 15 Sep 2014 15:07:28 GMT Location: http://www.4sex4.com/70892/Young-redhead-20-yr-fucked-by-stranger.html Server: servikus/nginx Content-Length: 0 Content-Type: text/html X-Powered-By: PHP/5.2.17 | malicious |
http://www.4sex4.com/70892/young-redhead-20-yr-fucked-by-stranger.html | 200 OK Content-Length: 69271 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: fucking8.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><title>Young redhead 20 yr fucked by stranger - 4sex4.com</title><meta name="description" content="Naive redhead teen 20 years old fucked by mature stranger in hotel room - sex for mony" /><meta name="keywords" content="Naive redhead ...[4025 bytes skipped]... | ||
http://ajax.googleapis.com/ajax/libs/jquery/1.6.1/jquery.min.js | 200 OK Content-Length: 91342 Content-Type: text/javascript | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6875 Content-Type: text/javascript | clean |
http://service.clicksvenue.com/get_embed.php?sid=241&spid=285&scid=10 | 200 OK Content-Length: 665 Content-Type: application/x-javascript | clean |
http://www.fuckedtime.com/tube/upload.php | HTTP/1.1 302 Found Connection: close Date: Mon, 15 Sep 2014 15:07:30 GMT Location: http://www.fuckedtime.com/ Server: servikus/nginx Content-Length: 210 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.fuckedtime.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Mon, 15 Sep 2014 15:07:30 GMT Location: http://www.fuckedtime.com/ Server: servikus/nginx Content-Length: 210 Content-Type: text/html; charset=iso-8859-1 | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=fuckedtime.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://fuckedtime.com/
Result: fuckedtime.com is not infected or malware details are not published yet.
Result: fuckedtime.com is not infected or malware details are not published yet.