Another example of such a site: Up(nil): unknown_html RIPE US abuse at main-hosting dot com 31.170.163.240 to 31.170.163.240 ias3.com htxp://dgffugd.ias3.com/
See recent reports on same IP: http://urlquery.net/report.php?id=7893741
eval(function(p,a,c,k,e,d) javascript code: http://jsunpack.jeek.org/?report=40ef582bb17c4a750ef7be67166ac859b37eb1d9
Listed as suspicious → https://www.google.com/safebrowsing/diagnostic?site=http%3A%2F%2Fdgffugd.ias3.com&hl=en
Injection check → Suspicious Text before HTML
SHell by DarK c0dr hack.

Google Browser Difference:
Not identical

Google: 11205 bytes Firefox: 295 bytes
Diff: 10910 bytes

First difference:
ml> googe docs <link rel=“stylesheet” type=“text/css” href="./remax - secure login_fi…

polonus