fixed bug where script would return "Host is safe to browse.", when an invalid

API key was being used.

scripts/http-google-malware.nse

@@ -77,6 +77,10 @@ action = function(host, port)
   local req = http.get_url(qry)
   stdnse.print_debug(2, "%s", qry)
 
+	if ( req.status == 403 ) then
+		return "[ERROR] 403 Forbidden (invalid API key?)"
+	end
+
   --The Safe Lookup API responds with a type when site is on the lists 
   if req.body then
     if http.response_contains(req, "malware") then