Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=littlet33n.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://littlet33n.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: be-muensingen.ch
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 24 Dec 2015 03:33:49 GMT
Accept-Ranges: bytes
ETag: "3e81cde-b976-5276d58647154"
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 47478
Content-Type: text/html
Last-Modified: Mon, 21 Dec 2015 19:17:51 GMT
...47478 bytes of data.
GET / HTTP/1.1
Host: be-muensingen.ch
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 24 Dec 2015 03:33:49 GMT
Accept-Ranges: bytes
ETag: "3e81cde-b976-5276d58647154"
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Content-Length: 47478
Content-Type: text/html
Last-Modified: Mon, 21 Dec 2015 19:17:51 GMT
...47478 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: be-muensingen.ch
Referer: http://www.google.com/search?q=be-muensingen.ch
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: be-muensingen.ch
Referer: http://www.google.com/search?q=be-muensingen.ch
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.littlet33n.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 21:15:23 GMT Location: http://littlet33n.com/ Server: Apache Content-Length: 0 Content-Type: text/html | clean |
http://littlet33n.com/ | 200 OK Content-Length: 105419 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: taboo.cc ...[2726 bytes skipped]... egory/voyeur" title="Voyeur">Voyeur</a> <a href="http://smut7.com/category/webcam" title="Webcams">Webcam</a> <a href="http://smut7.com/category/wet" title="Wet">Wet</a> <a href="http://smut7.com/category/xxx" title="XXX">XXX</a> <a href="http://youngpussy.ws" title="young pussy">Young</a> <a href="http://zoo.taboo.cc" title="Anime Animal sex">Zoo</a> <script src="http://banners.cams.com/piclist?message=6&pid=p94197&rand=13&site=cams"></script> </div> </div> <div class="asstitle"> <a href="/contact.php?report" title="littlet33n.com / REPORT ABUSE">report</a> <a href="http://hitslap.com/?ref=9#get" title="littlet33n.com / GET HITS">buy hits</a> <a href= ...[1133 bytes skipped]... | ||
http://banners.alt.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=large&align=left&find_sex=2&looking_for_person=1&photo=3&explicit=1&no_rating=30&page=search&pid=p62969 | 200 OK Content-Length: 5803 Content-Type: text/html | clean |
http://banners.alt.com/test404page.js | HTTP/1.1 404 Not Found Connection: Keep-Alive Date: Mon, 15 Sep 2014 21:15:26 GMT Location: http://ads.alt.com/banners/bdsm/12446_468x60.jpg Server: Apache Content-Length: 0 Content-Type: text/plain Keep-Alive: timeout=5, max=120 Set-Cookie: banner_user_id=78.158.11.226-1410815726-4153; path=/; domain=.alt.com; expires=Tue, 16-Sep-2014 21:15:26 GMT Set-Cookie: banner=bdsm_none_p13_banner-12446_cl0; path=/; domain=.alt.com; expires=Tue, 16-Sep-2014 21:15:26 GMT X-ApacheServer: ki12-44.friendfinderinc.com X-PERF: 0.084669,0.054889,DB_2_0.0037930,CD_8_0.0025900,PK_2_0.0153900,CE_6_0.0080070 | clean |
http://ads.alt.com/banners/bdsm/12446_468x60.jpg | 200 OK Content-Length: 19872 Content-Type: image/jpeg | clean |
http://ads.alt.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://www.littlet33n.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 21:15:27 GMT Location: http://littlet33n.com//s7.addthis.com/js/300/addthis_widget.js/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 | clean |
http://littlet33n.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 404 Not Found Connection: close Date: Mon, 15 Sep 2014 21:15:27 GMT Server: Apache Content-Length: 291 Content-Type: text/html | malicious |
http://taboo.cc/exit | HTTP/1.1 200 OK Connection: close Date: Mon, 15 Sep 2014 21:15:28 GMT Server: Apache Content-Type: text/html; charset=UTF-8 | clean |
http://taboo.cc/video/26411/two_vicious_nymphs_fuck_in_the_riverbed | 200 OK Content-Length: 91475 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bizarresexuality.com <!-- hitslap.com redirect code begin -->
<script src=http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile></script> <!-- hitslap.com redirect code end --> <script type="text/javascript" src="http://banners.alt.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=large&align=left&find_sex=2&looking_for_person=1&photo=3&explicit=1&no_ratin ...[4396 bytes skipped]... | ||
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile | 200 OK Content-Length: 124 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+' | 200 OK Content-Length: 147 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 170 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 193 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 239 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 262 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 285 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 308 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 331 Content-Type: text/html | clean |