🎭 Demo Results - Cloaking Scanner

Example detection results from a suspicious website with multiple security issues

Scan Your Site

📌 Note: This is sample data showing what the scanner can detect. The URL and findings are fictional examples for demonstration purposes.

Scanned URL

https://suspicious-example-site.tk

Scan Time

2026-09-30 23:57:49

🔴
critical
YES
Cloaking
4
Malware
3
JS Redirects
3
Suspicious Links
4
JS Issues
2
Base64
4
Hidden

💡 Key Findings & Recommendations

  • • 🚨 CRITICAL: Cloaking detected! This site shows different content to different user agents.
  • • Cloaking violates Google Webmaster Guidelines and can result in severe penalties or deindexing.
  • • Suspicious difference between googlebot and desktop: 12.3% similarity
  • • Suspicious difference between googlebot and mobile: 11.8% similarity
  • • Suspicious difference between bingbot and desktop: 12.1% similarity
  • • Suspicious difference between bingbot and mobile: 11.6% similarity
  • • 🚨 CRITICAL: Known malware signatures detected in page content!
  • • Found 4 malware pattern(s). Review immediately.
  • • ⚠️ JavaScript redirects detected (3 found).
  • • Review redirect destinations to ensure they are legitimate.
  • • ⚠️ Suspicious external links detected (3 found).
  • • Check for malicious domains, suspicious TLDs, or excessive external linking.
  • • ⚠️ External domain redirects detected. Verify these are legitimate.
  • • ⚠️ High-risk JavaScript patterns detected: eval(), Function constructor, etc.
  • • These are commonly used in malware and obfuscated code.
  • • ⚠️ Base64-encoded JavaScript detected. Review decoded content carefully.
  • • ⚠️ Hidden iframes detected. These are often used for malicious redirects.
  • • ⚠️ Meta refresh redirects detected. Check if these are legitimate.
  • • 💡 Always verify suspicious findings manually before taking action.

🔎 Multi-UA Cloaking Detection Results

User Agent Responses

googlebot
Status: 200
Length: 15,420 bytes
bingbot
Status: 200
Length: 15,380 bytes
desktop
Status: 200
Length: 3,240 bytes
mobile
Status: 200
Length: 3,180 bytes

User Agent Comparison Matrix

googlebot vs bingbot
Similarity: 98.5%
Length Diff: 0.26%
googlebot vs desktop
Similarity: 12.3%
Length Diff: 78.9%
⚠️ Suspicious
googlebot vs mobile
Similarity: 11.8%
Length Diff: 79.4%
⚠️ Suspicious
bingbot vs desktop
Similarity: 12.1%
Length Diff: 78.9%
⚠️ Suspicious
bingbot vs mobile
Similarity: 11.6%
Length Diff: 79.3%
⚠️ Suspicious
desktop vs mobile
Similarity: 97.2%
Length Diff: 1.9%

Meta Tag Differences

title
Googlebot: Premium Products - Best Deals Online
Normal: Buy Cheap Pharmacy Products
description
Googlebot: Shop premium quality products with free worldwide shipping
Normal: Discount pharmacy online - viagra cialis cheap prices

🔁 Redirect Chain Analysis (3 hops)

Hop 1 301 Moved Permanently

https://suspicious-example-site.tk

Hop 2 302 Found

https://suspicious-example-site.tk/redirect.php

Hop 3 200 OK External

https://external-pharmacy-site.info/products

🦠 Malware Signatures Detected (4)

⚠️ CRITICAL: Known malware patterns detected in page content!

HIGH eval(unescape (3 occurrences)
Show context
...var code = eval(unescape("%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65"));...
...function decrypt() { eval(unescape(encoded_payload)); }...
...setTimeout(function(){ eval(unescape(obfuscated)); }, 100);...
HIGH window.location="http (2 occurrences)
Show context
...if(isBot) { window.location="https://legitimate-site.com"; }...
...else { window.location="https://malicious-redirect.tk"; }...
MEDIUM viagra (12 occurrences)
Show context
...Buy cheap viagra online without prescription...
...Generic viagra at discount prices...
...Viagra cialis levitra pharmacy...
MEDIUM pharma (8 occurrences)
Show context
...Online pharma store with worldwide delivery...
...Discount pharma products...

↗️ JavaScript Redirects Detected (3)

External

https://legitimate-looking-site.com/products

External

https://malicious-redirect.tk/landing

/redirect.php?ref=bot

🔗 External Links Analysis

Total Links: 47

External Links: 23 (48.94%)

Suspicious Links: 3

⚠️ Suspicious Links Found

Suspicious TLD: .tk

Domain: free-downloads.tk

URL: https://free-downloads.tk/software

Suspicious TLD: .ml

Domain: casino-bonus.ml

URL: https://casino-bonus.ml/promo

Known Malicious: bit.ly

Domain: bit.ly

URL: https://bit.ly/3xYz9Qw

📜 JavaScript Obfuscation Patterns (4)

HIGH eval() (5 occurrences)
Show example
var encrypted = "JDIkMTAkR..."; eval(decrypt(encrypted));
HIGH Function constructor (2 occurrences)
Show example
var f = new Function("x", "return " + userInput); f(data);
MEDIUM document.write() (8 occurrences)
Show example
document.write(unescape("%3Cscript%3E...%3C/script%3E"));
MEDIUM String.fromCharCode (15 occurrences)
Show example
var code = String.fromCharCode(101,118,97,108,40,46,46,46);

🧪 Base64 Encoded Payloads (2)

Payload #1 Contains Script
View decoded content
document.location.href="https://malicious-site.tk/"
Payload #2 Contains Script Contains HTML
View decoded content
<script>eval(unescape("%64%6f%63%75%6d%65%6e

🪟 Hidden Elements & Suspicious HTML (4)

HIGH hidden_iframe External

Source: https://malicious-ads.tk/tracker.html

Size: 0 x 0

HIGH meta_refresh External

Redirects to: https://redirect-site.info/landing

MEDIUM css_cloaking
View element
<div style="position:absolute;left:-9999px;top:-9999px;">Buy cheap viagra cialis online pharmacy discount prices</div>
MEDIUM css_cloaking
View element
<span style="display:none;">casino poker gambling online betting</span>