Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=innocentvirgins.net
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://innocentvirgins.net/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: tmhahn.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 02 Aug 2014 02:23:05 GMT
Location: http://pi.tmhahn.com/
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 401
Content-Type: text/html; charset=iso-8859-1
...401 bytes of data.
GET / HTTP/1.1
Host: tmhahn.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sat, 02 Aug 2014 02:23:05 GMT
Location: http://pi.tmhahn.com/
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
Content-Length: 401
Content-Type: text/html; charset=iso-8859-1
...401 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: tmhahn.com
Referer: http://www.google.com/search?q=tmhahn.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: tmhahn.com
Referer: http://www.google.com/search?q=tmhahn.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.innocentvirgins.net/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 16 Sep 2014 03:13:28 GMT Location: http://innocentvirgins.net/ Server: Apache Content-Length: 0 Content-Type: text/html | clean |
http://innocentvirgins.net/ | 200 OK Content-Length: 103726 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: taboo.cc ...[2681 bytes skipped]... egory/voyeur" title="Voyeur">Voyeur</a> <a href="http://smut7.com/category/webcam" title="Webcams">Webcam</a> <a href="http://smut7.com/category/wet" title="Wet">Wet</a> <a href="http://smut7.com/category/xxx" title="XXX">XXX</a> <a href="http://youngpussy.ws" title="young pussy">Young</a> <a href="http://zoo.taboo.cc" title="Anime Animal sex">Zoo</a> <script src="http://banners.cams.com/piclist?message=6&pid=p94197&rand=13&site=cams"></script> </div> </div> <div class="asstitle"> <a href="/contact.php?report" title="innocentvirgins.net / REPORT ABUSE">report</a> <a href="http://hitslap.com/?ref=9#get" title="innocentvirgins.net / GET HITS">buy hits</a> & ...[1158 bytes skipped]... | ||
http://banners.adultfriendfinder.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=large&align=left&find_sex=2&looking_for_person=1&photo=3&explicit=1&no_rating=30&page=search&pid=p145876 | 200 OK Content-Length: 5911 Content-Type: text/html | clean |
http://banners.adultfriendfinder.com/test404page.js | HTTP/1.1 404 Not Found Connection: Keep-Alive Date: Tue, 16 Sep 2014 03:13:31 GMT Location: http://graphics.pop6.com/banners/ffadult/erin/affrefresh_468x60_02.gif Server: Apache Content-Length: 0 Content-Type: text/plain Keep-Alive: timeout=5, max=115 Set-Cookie: banner_user_id=78.158.11.226-1410837211-87719; path=/; domain=.adultfriendfinder.com; expires=Wed, 17-Sep-2014 03:13:31 GMT Set-Cookie: banner=ffadult_none_p07_banner-10570_cl0; path=/; domain=.adultfriendfinder.com; expires=Wed, 17-Sep-2014 03:13:31 GMT X-ApacheServer: ki43-37.friendfinderinc.com X-PERF: 0.054727,0.032052,DB_2_0.0040890,CD_8_0.0041500,PK_2_0.0001920,CE_3_0.0142440 | clean |
http://graphics.pop6.com/banners/ffadult/erin/affrefresh_468x60_02.gif | 200 OK Content-Length: 11616 Content-Type: image/gif | clean |
http://graphics.pop6.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://www.innocentvirgins.net//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 16 Sep 2014 03:13:32 GMT Location: http://innocentvirgins.net//s7.addthis.com/js/300/addthis_widget.js/ Server: Apache Content-Length: 0 Content-Type: text/html | clean |
http://innocentvirgins.net//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 404 Not Found Connection: close Date: Tue, 16 Sep 2014 03:13:32 GMT Server: Apache Content-Length: 296 Content-Type: text/html; charset=UTF-8 | malicious |
http://taboo.cc/exit | HTTP/1.1 200 OK Connection: close Date: Tue, 16 Sep 2014 03:13:32 GMT Server: Apache Content-Type: text/html | clean |
http://taboo.cc/video/26411/two_vicious_nymphs_fuck_in_the_riverbed | 200 OK Content-Length: 91023 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: fuckedall.com <!-- hitslap.com redirect code begin -->
<script src=http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile></script> <!-- hitslap.com redirect code end --> <script type="text/javascript" src="http://banners.cams.com/iframead_js_im_box?lang=english&plain_text=1&skip_lpo=1&version=1&delay=1&skin=6&align=left&genre_keys=01,02,05,08,09,03,04,07&min_age=18&max_age= ...[4368 bytes skipped]... | ||
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile | 200 OK Content-Length: 124 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+' | 200 OK Content-Length: 147 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 170 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 193 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 239 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 262 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 285 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 308 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 331 Content-Type: text/html | clean |