by   February 09 2016   
When you least expect it you find a malware site using scraped content from great sites like StackOverflow.com trying to delivery crap that should get the web developers and the hosting company banned from the internet. On the bright side of life, this gave me a chance to video how malware advertisers work as well as pick on someone other than my friends. You're never going to be able to live this one down. Just close the domain and start again Mr. Recalll.co ..... this Bud is for your distribution method.

Malware Advertiser RECALLL.CO This is so sweet!

I stumbled upon this site called RECALLL.CO yes, that's 3 L's.

It seemed to be a good scraper site. Looked like the full article with the links were all good.

Kind of like “Big Resource” which Framed other content as if it was theirs...

Anyway, this site is really cool in that it's scripts let you bounce off of 3 to 4 malware sites before it offers up the true URLs listed in the articles.

My video shows 3 of the 4 malware sites I was redirected to from links and hover over scripts from Recalll.co

This site is not very nice but worth mentioning that the scripting is pure genius in that the advertisers which provide the malware which in the end you will pay for are pushed 4 times before the site acts normal.

 

I'll call this site one big ass drive by infection just waiting for those that still surf the internet with administrator privileges on their user.

Enjoy the screen capture of the Beta Recalll.co website.  

The distribution of the malware is really good if you ask me, seems to stop after the 4th refresh and all the links look normal.

My guess is they do the same for all search bots so it doesn't look fishy.
I was using MS Edge at the time. Next time I'll test with Chrome.

The major issue here is that this site is using scrapped content from valid sites.
It's scrapped content allows it to rank in Google Search and my guess other search engines. 
Becuase of this content millions of users are at risk. 
Sadly it's even hosted on the Google Cloud Servers but the redirects most likely aren't.
Still, this site is just bad for the internet even if it claims to be a ....

"Medium for programmers.
Recalll.co is crowed sourced knowledge vault, where community can create, curate and share qualitative knowledge, In form of small and precise topics"

Bellandur, Opp. Acme Harmony,
Bangalore, Karnataka 503103
India
parvinder@recalll.co
9738301026

Recalll.co 146.148.53.9 (Adding to firewall block)

Google Search Page: https://www.google.com/?gws_rd=ssl#q=-2147012891+The+URL+is+invalid+ASP+Classic+
Search Words: -2147012891 The URL is invalid ASP Classic
Results
https://recalll.co/app/?...asp...%20The%20request%20URL%20is%20inva...
asp.net - IIS 7 Bad Request response when %0A exists in the URL - Stac. ....
Why does not Asp.net mvc application work on Asp.Net Classic Applicati.

Enough for now, if you can't police your site or if you allow any and all scripts to be uploaded than you shouldn't be in the web development industry.
I don't believe it's anything more than a fake site with malware marketing goals.
We all know some of the best marketing for malware removal comes from India. (The New Nigeria.)  

RECALLL.CO Malware Scripts Video 1

RECALLL.CO Malware Scripts Video 2

Showing different ways the site redirects to malware then acts as if nothing is wrong setting up the redirects correctly. I'm not analyzing each URL but if you ask me it's on a session count or something similar.

RECALLL.CO Malware Scripts Video 3

I found if you right click a popup would launch. I found the best results to simulate the malware redirects was to start with your Google Search with a cleared browser. I used Avanti in private mode. It would allow me 1 to 3 actions bringing up auto downloads and warnings. Give it a try, right click blank area near left side. Close the browser and open the first link, it works sometimes with the redirect and I can assure you that it's not StackOverFlow.Com doing it. It comes from the code on the recalll.co site.

 

When you least expect it you find a malware site using scraped content from great sites like StackOverflow.com trying to delivery crap that should get the web developers and the hosting company banned from the internet. On the bright side of life, this gave me a chance to video how malware advertisers work as well as pick on someone other than my friends. You're never going to be able to live this one down. Just close the domain and start again Mr. Recalll.co ..... this Bud is for your distribution method.