Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=prettynubiles.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://prettynubiles.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://prettynubiles.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:38 GMT Location: http://www.prettynubiles.com/ Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 369 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/ | 200 OK Content-Length: 22763 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: trafficholder.com ...[4322 bytes skipped]... ter"> <img src="/widget.php?crc=140923347378447" border="0" width="0" height="0"> <p>All models were at least 18 years old when they were photographed. The site is in full compliance with 18 USC Section 2257. We have no control over the content of these pages. We take no responsibility for the content on any website which we link to, please use your own discretion while surfing the links. <a href="http://trafficholder.com/aff.php?finestar" rel="nofollow">Traffic Holder</a> | <a href="http://oggysites.com/">Webmaster</a></p> </div> </div> <script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#pubid=ra-4de732e77cd52d53"></script> </body> </html> | ||
http://www.prettynubiles.com/jquery.js | 200 OK Content-Length: 70843 Content-Type: application/javascript | clean |
http://prettynubiles.com/common.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:40 GMT Location: http://www.prettynubiles.com/common.js Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 378 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/common.js | 200 OK Content-Length: 301 Content-Type: application/javascript | clean |
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 6875 Content-Type: text/javascript | clean |
http://prettynubiles.com/out.php?member=youngheaven.com | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:41 GMT Location: http://www.prettynubiles.com/out.php?member=youngheaven.com Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 399 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/out.php?member=youngheaven.com | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:42 GMT Location: http://www.youngheaven.com Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 0 Content-Type: text/html Set-Cookie: from=nocookie; expires=Wed, 24-Sep-2014 19:50:42 GMT; path=/ Set-Cookie: to=%7Cyoungheaven.com; expires=Wed, 24-Sep-2014 19:50:42 GMT; path=/ Set-Cookie: vs=youngheaven.com%7C; expires=Wed, 24-Sep-2014 19:50:42 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://www.youngheaven.com/ | 200 OK Content-Length: 101126 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: prettynubiles.com <!DOCTYPE html> <head> <meta charset="utf-8"> <title>Young Heaven - Naked Teens & Young Porn Pictures</title> <link rel="STYLESHEET" type="text/css" href="NEW2.css" /> <link rel="shortcut icon" href="http://images.youngheaven.com/favicon.ico" /> <link rel="apple-touch-icon" href="http://images.youngheaven.com/apple-touch-iphone.png" /> <link rel="apple-touch-icon ...[4425 bytes skipped]... | ||
http://www.youngheaven.com//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js/ | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:44 GMT Location: http://www.youngheaven.com/ Server: Apache Content-Length: 211 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.youngheaven.com/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:44 GMT Location: http://www.youngheaven.com/ Server: Apache Content-Length: 211 Content-Type: text/html; charset=iso-8859-1 | clean |
http://prettynubiles.com/scripts/jquery.unveil.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:44 GMT Location: http://www.prettynubiles.com/scripts/jquery.unveil.js Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 393 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/scripts/jquery.unveil.js | 404 Not Found Content-Length: 354 Content-Type: text/html | clean |
http://w.sharethis.com/button/buttons.js | 200 OK Content-Length: 145774 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) if(typeof(stlib)=="undefined"){var stlib={}}if(!stlib.functions){stlib.functions=[];stlib.functionCount=0}stlib.global={};stlib.global.hash=document.location.href.split("#");stlib.global.hash.shift();stlib.global.hash=stlib.global.hash.join("#");stlib.dynamicOn=true;stlib.debugOn=false;stlib.debug={count:0,messages:[],debug:function(b,a){if(a&&(typeof console)!="undefined"){console.log(b)}stlib.debug.messages.push(b)},show:function(a){for(message in stlib.debug.messages){if((typeof conso Antivirus reports:
| ||
http://prettynubiles.com/out.php?member=kiwi-teens.com | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:45 GMT Location: http://www.prettynubiles.com/out.php?member=kiwi-teens.com Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 398 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/out.php?member=kiwi-teens.com | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:46 GMT Location: http://kiwi-teens.com/ Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 0 Content-Type: text/html Set-Cookie: from=nocookie; expires=Wed, 24-Sep-2014 19:50:46 GMT; path=/ Set-Cookie: to=%7Ckiwi-teens.com; expires=Wed, 24-Sep-2014 19:50:46 GMT; path=/ Set-Cookie: vs=kiwi-teens.com%7C; expires=Wed, 24-Sep-2014 19:50:46 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://kiwi-teens.com/ | 200 OK Content-Length: 145440 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.prettynubiles.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title>Kiwi-Teens</title> <script language=JavaScript> <!-- document.cookie = "stvisitor=noref|1|megateenfuck.com; path=/;" // -->< ...[4759 bytes skipped]... | ||
http://kiwi-teens.com/js/jquery-1.10.2.min.js | 200 OK Content-Length: 93107 Content-Type: application/javascript | clean |
http://prettynubiles.com/js/jquery.cookie.js | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:51 GMT Location: http://www.prettynubiles.com/js/jquery.cookie.js Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 388 Content-Type: text/html; charset=iso-8859-1 X-Pad: avoid browser bug | clean |
http://www.prettynubiles.com/js/jquery.cookie.js | 404 Not Found Content-Length: 349 Content-Type: text/html | clean |
http://prettynubiles.com/out.php?member=smallteenpussy.com | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:51 GMT Location: http://www.prettynubiles.com/out.php?member=smallteenpussy.com Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 402 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/out.php?member=smallteenpussy.com | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:52 GMT Location: http://www.smallteenpussy.com/?vs= Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 0 Content-Type: text/html Set-Cookie: from=nocookie; expires=Wed, 24-Sep-2014 19:50:52 GMT; path=/ Set-Cookie: to=%7Csmallteenpussy.com; expires=Wed, 24-Sep-2014 19:50:52 GMT; path=/ Set-Cookie: vs=smallteenpussy.com%7C; expires=Wed, 24-Sep-2014 19:50:52 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://www.smallteenpussy.com/?vs= | 200 OK Content-Length: 69839 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: prettynubiles.com <!DOCTYPE html>
<html> <head> <title>Small Teen Pussy - Young Pussy Pics</title> <link rel="canonical" href="http://www.smallteenpussy.com/"> <meta name="description" content=""> <base target="_blank"></base> <link rel="stylesheet" href="/style.css"> <script type="text/javascript" src="/jquery.js"></script> <script type="text/j ...[4839 bytes skipped]... | ||
http://www.smallteenpussy.com/jquery.js | 200 OK Content-Length: 70843 Content-Type: application/javascript | clean |
http://prettynubiles.com/out.php?member=hotsexyteensphotos.com | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 23 Sep 2014 19:50:54 GMT Location: http://www.prettynubiles.com/out.php?member=hotsexyteensphotos.com Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 406 Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.prettynubiles.com/out.php?member=hotsexyteensphotos.com | HTTP/1.1 302 Found Connection: close Date: Tue, 23 Sep 2014 19:50:55 GMT Location: http://tiny-slit.com/ Server: Apache/2.2.25 (Unix) PHP/5.2.17 Content-Length: 0 Content-Type: text/html Set-Cookie: from=nocookie; expires=Wed, 24-Sep-2014 19:50:55 GMT; path=/ Set-Cookie: to=%7Ctiny-slit.com; expires=Wed, 24-Sep-2014 19:50:55 GMT; path=/ Set-Cookie: vs=tiny-slit.com%7C; expires=Wed, 24-Sep-2014 19:50:55 GMT; path=/ X-Powered-By: PHP/5.2.17 | clean |
http://tiny-slit.com/ | 200 OK Content-Length: 93067 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: prettynubiles.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <html> <head> <title>Tiny Slit - small wet teen pussy, young hairless slit pics, tight pussy hot babes, shaved pussy girls!</title> <meta name="description" content="Tiny Juicy Slits - wet pussy lips galleries, tight young puss ...[4408 bytes skipped]... | ||
http://tiny-slit.com/img/bookmark.js | 200 OK Content-Length: 974 Content-Type: application/x-javascript | clean |
http://cbanners.virtuagirlhd.com/customdata/banner/FloatingAds/jquery-1.3.2.min.js | 200 OK Content-Length: 57254 Content-Type: application/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: prettynubiles.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 23 Sep 2014 19:50:38 GMT
Location: http://www.prettynubiles.com/
Server: Apache/2.2.25 (Unix) PHP/5.2.17
Content-Length: 369
Content-Type: text/html; charset=iso-8859-1
...369 bytes of data.
GET / HTTP/1.1
Host: prettynubiles.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Tue, 23 Sep 2014 19:50:38 GMT
Location: http://www.prettynubiles.com/
Server: Apache/2.2.25 (Unix) PHP/5.2.17
Content-Length: 369
Content-Type: text/html; charset=iso-8859-1
...369 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: prettynubiles.com
Referer: http://www.google.com/search?q=prettynubiles.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: prettynubiles.com
Referer: http://www.google.com/search?q=prettynubiles.com
Result:
The result is similar to the first query. There are no suspicious redirects found.