See: http://urlquery.net/report.php?id=1495728484690 & http://urlquery.net/report.php?id=1493642067665
See: https://malwr.com/analysis/YmMyYzY1ZGJkYzRkNDY0ZmIxYTY3MmMwNGE0M2VhZjY/
Re: https://www.virustotal.com/pl/url/1f1082256e1091832682faf7e05ab90082f567e7d967e15a6688859fc8610e3b/analysis/1495731064/
Nothing on file analysis: https://www.virustotal.com/pl/file/d13278767c932d0aa9ebf9a80c6b1c7498b284b08d8973907fa1147b532acc81/analysis/1489306900/
Re: https://urlscan.io/result/f5f0e3a2-31a7-4c8a-b3a4-13c6dd261ec7#summary
See: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fgo.padsdel.com%2Fajs.php
Could this be open to banner php hack? Blocked by XSS auditor See: https://www.whitefirdesign.com/resources/openx-banner-page-hack.html
Google blocks this as [query_shard_exception] Failed to parse query [page.url:https://www.google.de/?gfe_rd=cr&ei=9xAnWfGmEOna8AeO4KyIBA&gws_rd=ssl], with { index_uuid=“PRN42sl_SNKxA0WQRC3fjw” & index=“results” }
furthermore 2 adblocked given…re: https://malwaretips.com/blogs/remove-ssp-zryydi-com/
polonus