Re: http://killmalware.com/sanindo.co.id/# → http://toolbar.netcraft.com/site_report?url=http://sanindo.co.id → http://toolbar.netcraft.com/site_report?url=http://192.254.230.207
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.sanindo.co.id%2Findex.php
Scanner output:
Scanning -http://www.sanindo.co.id …
Script loaded: -https://s.ytimg.com/yts/jsbin/www-embed-player-vflPrvcMb/www-embed-player.js
Script loaded: -https://s.ytimg.com/yts/jsbin/player-en_US-vflnrstgx/base.js
Script loaded: -https://www.google.com/js/bg/-Ps1iJvWGBmTVUUzMYLqRAlGj-KyO_h0L7-M6Ghkbv8.js
Script loaded: -https://static.doubleclick.net/instream/ad_status.js
Status: success
Load time: 2986ms
Similar hack was being analyzed here: http://izumino.jp/Security/analyze/24449951.html
Being blocked for me was -http://stats.hosting24.com/count.php
pol