Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=nastygirlies.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://nastygirlies.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: hs-jd.cn
Result:
GET / HTTP/1.1
Host: hs-jd.cn
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: hs-jd.cn
Referer: http://www.google.com/search?q=hs-jd.cn
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: hs-jd.cn
Referer: http://www.google.com/search?q=hs-jd.cn
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.nastygirlies.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 23:18:45 GMT Location: http://nastygirlies.com/ Server: Apache Content-Length: 0 Content-Type: text/html | clean |
http://nastygirlies.com/ | 200 OK Content-Length: 105215 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: taboo.cc ...[2703 bytes skipped]... egory/voyeur" title="Voyeur">Voyeur</a> <a href="http://smut7.com/category/webcam" title="Webcams">Webcam</a> <a href="http://smut7.com/category/wet" title="Wet">Wet</a> <a href="http://smut7.com/category/xxx" title="XXX">XXX</a> <a href="http://youngpussy.ws" title="young pussy">Young</a> <a href="http://zoo.taboo.cc" title="Anime Animal sex">Zoo</a> <script src="http://banners.cams.com/piclist?message=6&pid=p94197&rand=13&site=cams"></script> </div> </div> <div class="asstitle"> <a href="/contact.php?report" title="nastygirlies.com / REPORT ABUSE">report</a> <a href="http://hitslap.com/?ref=9#get" title="nastygirlies.com / GET HITS">buy hits</a> <a h ...[1143 bytes skipped]... | ||
http://banners.adultfriendfinder.com/go/page/js_im_box_v2?lang=english&plain_text=1&skip_lpo=1&delay=1&size=square250&align=left&find_sex=2&looking_for_person=1&photo=3&explicit=1&no_rating=30&page=search&pid=p145876 | 200 OK Content-Length: 5916 Content-Type: text/html | clean |
http://banners.adultfriendfinder.com/test404page.js | HTTP/1.1 404 Not Found Connection: Keep-Alive Date: Mon, 15 Sep 2014 23:18:48 GMT Location: http://graphics.pop6.com/banners/ffadult/12441_468x60.jpg Server: Apache Content-Length: 0 Content-Type: text/plain Keep-Alive: timeout=5, max=73 Set-Cookie: banner_user_id=78.158.11.226-1410823128-31235; path=/; domain=.adultfriendfinder.com; expires=Tue, 16-Sep-2014 23:18:48 GMT Set-Cookie: banner=ffadult_none_p07_banner-12441_cl0; path=/; domain=.adultfriendfinder.com; expires=Tue, 16-Sep-2014 23:18:48 GMT X-ApacheServer: ki31-30.friendfinderinc.com X-PERF: 0.031694,0.011725,DB_2_0.0039560,CD_8_0.0012580,PK_2_0.0092510,CE_3_0.0055040 | clean |
http://graphics.pop6.com/banners/ffadult/12441_468x60.jpg | 200 OK Content-Length: 19776 Content-Type: image/jpeg | clean |
http://graphics.pop6.com/test404page.js | 404 Not Found Content-Length: 212 Content-Type: text/html | clean |
http://www.nastygirlies.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Mon, 15 Sep 2014 23:18:49 GMT Location: http://nastygirlies.com//s7.addthis.com/js/300/addthis_widget.js/ Server: Apache Content-Length: 0 Content-Type: text/html; charset=UTF-8 | clean |
http://nastygirlies.com//s7.addthis.com/js/300/addthis_widget.js/ | HTTP/1.1 404 Not Found Connection: close Date: Mon, 15 Sep 2014 23:18:49 GMT Server: Apache Content-Length: 293 Content-Type: text/html; charset=UTF-8 | malicious |
http://taboo.cc/exit | HTTP/1.1 200 OK Connection: close Date: Mon, 15 Sep 2014 23:18:49 GMT Server: Apache Content-Type: text/html | clean |
http://taboo.cc/video/26411/two_vicious_nymphs_fuck_in_the_riverbed | 200 OK Content-Length: 91490 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bizarresexuality.com <!-- hitslap.com redirect code begin -->
<script src=http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile></script> <!-- hitslap.com redirect code end --> <script type="text/javascript" src="http://banners.cams.com/iframead_js_im_box?lang=english&plain_text=1&skip_lpo=1&version=1&delay=1&skin=6&align=left&genre_keys=01,02,05,08,09,03,04,07&min_age=18&max_age=35&a ...[4364 bytes skipped]... | ||
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile | 200 OK Content-Length: 124 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+' | 200 OK Content-Length: 147 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 170 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 193 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 216 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 239 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 262 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 285 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 308 Content-Type: text/html | clean |
http://hitslap.com/show.php?u=9&type=redirect&traffic=mobile'+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+''+'&r='+Math.random()+' | 200 OK Content-Length: 331 Content-Type: text/html | clean |