I received a suspicious email from a friend of mine with stange name of the form
last are his/her first and last names. But the domain is totally awkward. Then he/she didn't used my real name, apparently not knowing it, and greeted me by my email username. Then it was written in English, whereas we both are from a non-english speaking country. The link was not masked:
When googling the site, Google reports something like "This website may be changed by hackers." below the URL. Scanning the link, however, shows no threats.
view-source: I get the following one-line, which I divided in multiple line for readibility:
<script>location.href = "/tut.php?c=1&key=08j67nnw86627tzh7270prli& id=6f7b72ba&gid=&pin=&pid=18068&sid=http://com-d77f0s.com& cid=22.214.171.124& tid=mc42erz1&dal=http://com-d77f0s.com /?affID=18068*aff_name=TDsSD*clickID=7226147247891*funnel=google*token=BKahRDesaD*timeID=mc42erz1"; </script>
giving that some script is being run on click.
Is the site malicious and how could I actually know that?
Should I report it somewhere and tell the affected person that his/her personal information has been stolen?