The Hidden Dangers of Suspicious Facebook Ads: A Case Study on https://7f9cd87.ixg.llc (Scam)
The Hidden Dangers of Suspicious Facebook Ads: A Case Study on https://7f9cd87.ixg.llc
summary of the analysis
🔹 Type: Suspicious / potentially malicious HTML page.
🔹 Key Findings:
-
Hidden Redirect: Meta refresh redirects the user after 10 seconds.
-
Suspicious Links: External links point to shady or spammy domains.
-
Tracking Pixel: A hidden image (tiny.cc link) is likely used for tracking.
-
External Scripts: Loads scripts from third-party sources (Cloudflare, jQuery).
-
Potential Phishing Risk: "Continue" button may lead to a fake or malicious site.
🔹 No direct malware like keyloggers, auto-downloads, or permission abuse in this file itself, but the redirected destinations could be dangerous.
🔹 Overall Risk Level: ⚠️ High – Strong indicators of phishing, spam, or tracking.
https://l.facebook.com/l.php?u=http%3A%2F%2F7f9cd87.ixg.llc%2Fa%2FMXxodHRwczovL3QuY28vM0kzb29ScEZwWnxzZWUgbW9yZSBhYm91dCBtZSA4NDR8IHwxMjQwMjQ1NzQyODc0MTR8aHR0cDovL3RpbnkuY2MvazluaDAwMQ%3Ffbclid%3DIwZXh0bgNhZW0CMTEAYnJpZBExaUcwaDhuWEtIbDdkWnhJQwEeyudeDj0HS2y_nKgzm7SoC4VG8jVBUPa01b3BMUHcYW4Qd3pRGirXubIgiUY_aem_qv3rTgCnvm5HlUIzFmf8zg&h=AT3OkWwYNkxtDJ_dN27-EpNXq8cqWFNKMeR6iNsH7hWmqO0iQJjmtf5aDOsxmnDPg0mVWcbARFpRBJSYYyTYXfLcwRtw--mbB8xw0pu4PQip7HVtXcuG8phAVqNkXpI_6HOwj0Dilf-PD8K8CA&__tn__=%2CmH-R&c[0]=AT3d6kcn1CUYjf2Ijib5dEi-rEQ61SO1oHDqxiu2YsbdpdXH4vySH4kDjkn5mTF-9rf2ilvqJ3Z30BSq1FnVNnRIbZC84k7S58WihhEHvCN9nv5rWSbHM05WLoBZVre1bgYuDjgewUX1CfKNaChT__5zm0DwssZW2pKtRKyDNnKN2I9dcuCywsZgDUqQjH46NwLs6xBP1uInVFEaCQ_GUDyH3h2zx3Lixmyfbfa5JFNfyOUo_dvi6GsHyvV3mbB_dQS9rFAa_LpC8bNp86uZijuIOylDwhdEfGsGJIb9mf4GHa5gOjP7EooEoCO2QwtbIPwYL7U7NYk8ySNVl5TzTj2tR5RQBAOPiHfhRMMFXhKa43jf0ek_pWiWv8b9-HZOpzKGUUNBuqydIRKGXI4591nj6xpCf2AxR98vd2XFQV5q03iLafkemVeudmLPCm2BmgUGZZJNm1h43xV9EehlhPX-pQv0JdaBvGrtMfajqlDWZSdRP8NrxykIHOrg2g
====================================================
https://7f9cd87.ixg.llc/a/MXxodHRwczovL3QuY28vM0kzb29ScEZwWnxzZWUgbW9yZSBhYm91dCBtZSA4NDR8IHwxMjQwMjQ1NzQyODc0MTR8aHR0cDovL3RpbnkuY2MvazluaDAwMQ?fbclid=IwY2xjawJ5uWlleHRuA2FlbQIxMQBicmlkETFpRzBoOG5YS0hsN2RaeElDAR7K514OPQdLbL-cqDObtKgLhUbyNUFQ9rTVvcExQdxhbhB3elEaKte5siCJRg_aem_qv3rTgCnvm5HlUIzFmf8zg
====================================================
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:fb="http://www.facebook.com/2008/fbml" lang="en">
<head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# weheartit-tl: http://ogp.me/ns/fb/weheartit-tl#">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<meta charset="UTF-8">
<meta name="robots" content="noindex,noimageindex,nofollow">
<meta name="verify-v1" content="yWQd1QQOfyW6rzPkONyfqW5FWN893CD28NUQk30n2Po=">
<meta name="apple-itunes-app" content="app-id=274266067164">
<meta name="google" value="notranslate">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content=" ">
<meta name="keywords" content="">
<meta name="generator" content="WordPress 5.3.2">
<meta http-equiv="refresh" content="10;url=/_meetups/?">
<title>see more about me 844</title>
<link rel="stylesheet" href="style.css">
<link rel="canonical" href="https://t.co/3I3ooRpFpZ">
<meta name="theme-color" content="#563d7c">
<meta property="fb:app_id" content="274266067164">
<meta property="og:url" content="https://t.co/3I3ooRpFpZ">
<meta property="og:type" content="article">
<meta property="og:title" content="see more about me 844">
<meta property="og:description" content=" ">
<meta property="og:image" content="http://tiny.cc/k9nh001">
<meta property="og:image:url" content="http://tiny.cc/k9nh001">
<meta property="og:image:type" content="image/jpeg">
<meta property="og:image:width" content="650">
<meta property="og:image:height" content="366">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:description" content=" ">
<meta name="twitter:image" content="http://tiny.cc/k9nh001">
</head>
<img alt="we-love-it" aria-hidden="true" data-uia="nmhp-card-hero+background+image" src="http://tiny.cc/k9nh001" srcset="http://tiny.cc/k9nh001 1000w, http://tiny.cc/k9nh001 1500w, http://tiny.cc/k9nh001 1800w" style="display: none;">
<body><div class="landing-page">
<div class="page-content">
<h1>WATCH ME LIVE!</h1>
<p>1,627,830 Online members</p><a href="https://efgpmrg.ladies-womanflirts.com/pvc0v61?t=IXG">continue</a></div>
</div><script src="https://code.jquery.com/jquery-3.4.1.slim.min.js" integrity="sha384-J6qa4849blE2+poT4WnyKhv5vZF5SrPo0iEjwBvKU7imGFAV0wwj1yYfoRSJoZ+n" crossorigin="anonymous"></script>
<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId":"93664baf0e6d4170","version":"2025.4.0-1-g37f21b1","r":1,"token":"aab9656ff92c45c9a6d9c0467944ec99","serverTiming":{"name":{"cfExtPri":true,"cfL4":true,"cfSpeedBrain":true,"cfCacheStatus":true}}}' crossorigin="anonymous"></script>
</body>
</html>
====================================================
Comments
Post a Comment