polonus
1
See: http://killmalware.com/e-executarisilite.ro/#
See: https://aw-snap.info/file-viewer/?tgt=http%3A%2F%2Fe-executarisilite.ro&ref_sel=GSP2&ua_sel=ff&fs=1
Cloaking: There is a difference of 164 bytes between the version of the page you serve to Chrome and the version you serve to GoogleBot.
This website created with FreeHostingNoAds
Free Website Builder and Hosting
Non-malicious? -> https://www.virustotal.com/nl/url/5070d4565a343ed8de28aea60783d7173658faedf9d3ea0f9ad91c2a77971283/analysis/1482253919/
1 malicious file detected: index.html
Severity: Malicious
Reason: Detected encoded JavaScript code commonly used to hide malicious behaviour.
Details: Web site defaced. Details: http://sucuri.net/malware/entry/MW:DEFACED:01?v7
Offset: 115
Threat dump: [[Hacked By Joker-dz]]
Threat dump MD5: B64AAEC8FD420A7AC5E62A7067BCF502
File size[byte]: 2230
File type: ASCII
Page/File MD5: A931B3054B144C553CFF85844FBEBC2E
Scan duration[sec]: 0.004000
List of iframes included
-htxps://www.facebook.com/plugins/likebox.php?href=
htxps://www.facebook.com/AnonymousPalestine.vip&width=245&colorscheme=light&show_faces=true&connections=9&stream=false&header=false&height=270
polonus