Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=novojoy.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://novojoy.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: phuket-lions.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 03 Mar 2015 09:12:17 GMT
Accept-Ranges: bytes
ETag: "6b24bb3-4d-4c85f1d6d6700"
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.1h mod_apreq2-20051231/2.6.0 mod_perl/2.0.5 Perl/v5.8.9
Content-Length: 77
Content-Type: text/html
Last-Modified: Wed, 29 Aug 2012 03:25:48 GMT
...77 bytes of data.
GET / HTTP/1.1
Host: phuket-lions.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 03 Mar 2015 09:12:17 GMT
Accept-Ranges: bytes
ETag: "6b24bb3-4d-4c85f1d6d6700"
Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.1h mod_apreq2-20051231/2.6.0 mod_perl/2.0.5 Perl/v5.8.9
Content-Length: 77
Content-Type: text/html
Last-Modified: Wed, 29 Aug 2012 03:25:48 GMT
...77 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: phuket-lions.com
Referer: http://www.google.com/search?q=phuket-lions.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: phuket-lions.com
Referer: http://www.google.com/search?q=phuket-lions.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Scanned pages/files
Request | Server response | Status |
http://www.novojoy.com/ | 200 OK Content-Length: 45724 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content2.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content2.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content2.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content2.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3046 bytes skipped]... | ||
http://www.novojoy.com/?category=Tits | 200 OK Content-Length: 44255 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content7.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content7.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content7.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content7.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3094 bytes skipped]... | ||
http://www.novojoy.com/?category=Ass | 200 OK Content-Length: 44024 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content9.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content9.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content9.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content9.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3046 bytes skipped]... | ||
http://www.novojoy.com/?category=Teen | 200 OK Content-Length: 42614 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content7.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content7.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content7.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content7.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3108 bytes skipped]... | ||
http://www.novojoy.com/?category=Babe | 200 OK Content-Length: 43331 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content5.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content5.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content5.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content5.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3072 bytes skipped]... | ||
http://www.novojoy.com/?category=Lesbian | 200 OK Content-Length: 45240 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content9.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content9.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content9.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content9.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3046 bytes skipped]... | ||
http://www.novojoy.com/?category=Hardcore | 200 OK Content-Length: 30559 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content5.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content5.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content5.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content5.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3270 bytes skipped]... | ||
http://www.novojoy.com/2001174 | HTTP/1.1 200 OK Connection: close Date: Thu, 11 Sep 2014 19:52:33 GMT Server: nginx/1.4.1 Vary: Accept-Encoding Content-Length: 527 Content-Type: text/html;charset=ISO-8859-1 Set-Cookie: lastvisit=1410465153839 Set-Cookie: p2001174=1; Domain=novojoy.com; Expires=Fri, 12-Sep-2014 19:52:33 GMT Set-Cookie: p2001174=1; Domain=www.novojoy.com; Expires=Fri, 12-Sep-2014 19:52:33 GMT | clean |
http://www.erosberry.com/tiffany-tight-ass | 200 OK Content-Length: 33351 Content-Type: text/html | clean |
http://www.erosberry.com/test404page.js | 404 Not Found Content-Length: 124120 Content-Type: text/html | clean |
http://www.novojoy.com/2000406 | HTTP/1.1 200 OK Connection: close Date: Thu, 11 Sep 2014 19:52:35 GMT Server: nginx/1.4.1 Vary: Accept-Encoding Content-Length: 533 Content-Type: text/html;charset=ISO-8859-1 Set-Cookie: lastvisit=1410465155310 Set-Cookie: p2000406=1; Domain=novojoy.com; Expires=Fri, 12-Sep-2014 19:52:35 GMT Set-Cookie: p2000406=1; Domain=www.novojoy.com; Expires=Fri, 12-Sep-2014 19:52:35 GMT | malicious |
http://www.perkybabes.com/sexy-mira-hardcore | 200 OK Content-Length: 30782 Content-Type: text/html | malicious |
Malicious code found. Script contains blacklisted domain: theglamsite.com function cremzads1() { var i = document.createElement("iframe"); var a = Math.random() + ""; i.src = "http://a.babescdn.com/banners.php?domain=theglamsite.com"; i.scrolling = "no"; i.frameBorder = "0"; i.width = "300px"; i.height = "250px"; document.getElementById("cremzads1").appendChild(i); }; if (window.addEventListener) window.addEventListener("load", cremzads1, false); else if (window.attachEvent) window.attachEvent("onload", cremzads1); else window.onload = cremzads1; Decoded script: function cremzads2() { var i = document.createElement("iframe"); var a = Math.random() + ""; i.src = "http://a.babescdn.com/banners.php?domain=theglamsite.com&zone=2"; i.scrolling = "no"; i.frameBorder = "0"; i.width = "300px"; i.height = "250px"; document.getElementById("cremzads2").appendChild(i); } | ||
http://mobile.juicyads.com/js/jam_min.js | 200 OK Content-Length: 21397 Content-Type: application/x-javascript | clean |
http://adspaces.ero-advertising.com/adspace/323369.js | 200 OK Content-Length: 0 Content-Type: application/javascript | clean |
http://a.babescdn.com/im.php?domain=perkybabes.com | 200 OK Content-Length: 4396 Content-Type: text/javascript | clean |
http://www.novojoy.com/1083986 | 404 Not Found Content-Length: 45724 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: content2.novojoy.com ...[600 bytes skipped]... meta http-equiv="Content-Language" content="en" /> <meta http-equiv="imagetoolbar" content="no" /> <!--[if lt IE 9]><script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script><![endif]--> <link rel="alternate" type="application/rss+xml" title="novojoy.com - porn, porn stars, teens, nude babes" href="http://novojoy.com/rss.xml" /> <link rel="stylesheet" media="all" href="http://content2.novojoy.com/images/novojoy.com/v2/font/font.css"/> <link rel="stylesheet" media="all" href="http://content2.novojoy.com/images/novojoy.com/v2/main.3.min.css"/> <link rel="shortcut icon" href="http://content2.novojoy.com/images/novojoy.com/favicon.ico" type="image/x-icon" /> <meta name="imagetoolbar" content="no" /> <meta name="apple-mobile-web-app-capable" content="yes" /> <meta name="viewport" content="width=device-width, initial-sc ...[3046 bytes skipped]... | ||
http://www.novojoy.com/2001973 | HTTP/1.1 200 OK Connection: close Date: Thu, 11 Sep 2014 19:52:37 GMT Server: nginx/1.4.1 Vary: Accept-Encoding Content-Length: 515 Content-Type: text/html;charset=ISO-8859-1 Set-Cookie: lastvisit=1410465157832 Set-Cookie: p2001973=1; Domain=novojoy.com; Expires=Fri, 12-Sep-2014 19:52:37 GMT Set-Cookie: p2001973=1; Domain=www.novojoy.com; Expires=Fri, 12-Sep-2014 19:52:37 GMT | clean |
http://www.glam0ur.com/melissa-debling | 200 OK Content-Length: 46188 Content-Type: text/html | clean |