See: https://www.virustotal.com/nl/url/002b104dc01e9a93be774b3ec0ecf74fce88a7b60631b7fb9889cb2ece9ae5fc/analysis/1414877559/
Site vulnerable: Scan for: htxp://dbfii1ue.pokasko.pp.ua
Hostname: dbfii1ue.pokasko.pp dot ua
IP address: 91.202.63.43
System Details:
Running on: nginx/1.2.3
Powered by: PHP/5.4.6
Outdated Web Server Nginx Found: nginx/1.2.3
Spam domains running on IP: http://knujon.com/ips/91.202.63.43.html
DrWeb detects JS.Loadpays.2 avast! Win32:LoadMoney-FA [PUP] from IP.
htxp://dbfii1ue.pokasko.pp.ua/ is in Dr.Web malicious sites list!
avast blocks the site as unsafe! and nothing changed since: https://forum.avast.com/index.php?topic=156230.0
pol