Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=ketab.ir
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://ketab.ir/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://ketab.ir/ | 200 OK Content-Length: 96670 Content-Type: text/html | suspicious |
Page code contains blacklisted domain: bookfair.ketab.ir <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head><title> </title><link rel="stylesheet" href="css/demo.css" /><link rel="stylesheet" href="dist/ladda.min.css" /><link href="css/Style.css" rel="stylesheet" type="text/css" /> <script src="js/Modal.j ...[4054 bytes skipped]... | ||
http://ketab.ir/js/Modal.js | 200 OK Content-Length: 240 Content-Type: application/x-javascript | clean |
http://ketab.ir/js/jquery-1.10.2.min.js | 200 OK Content-Length: 93107 Content-Type: application/x-javascript | clean |
http://ketab.ir/WebResource.axd?d=ENvl5hDtFB-4CVPmJy8WfSyAgUJ2NDBIH267aLeDZQ12a4FjpPQih9cbKMlojXQhEPTiXAIy2ozkHbsFsY8bC0P6bANmQBzAxD8yj3J1g3U1&t=635212482134109798 | 200 OK Content-Length: 21823 Content-Type: application/x-javascript | clean |
http://ketab.ir/ScriptResource.axd?d=B6mcWYnP9lvlYL_E1SHVpMqsQruGYvi8Nh3dZ9oYiL2vhW5x8FrKgO4BZ9GAdb33EMj-6kbh09PGMd8_v4KxSydxrK75254vBYobRa-TR-RgrAbWJk5DnP-Z8RoBq8_ImprGzll8EgtSXmLTul9txNMF46Wyn_sDvUJMkDU14Oc1&t=68c4b60a | 200 OK Content-Length: 21603 Content-Type: application/x-javascript | clean |
http://ketab.ir/ScriptResource.axd?d=Gn32KGz0E7MkFDywqKKdc29YqjKHWX6UtIPiO9FHGVw8EuKtdvUdYpXldXP2DHOtGJW_jXuLBBGD_i0XF6yj7VP3fpJC9sVzQFMb0mKtt9rENjdMs0hz2a-uucYv88Ro9UfWeVddqDwvxUBtLI-Rxlmk94bnczAMRIO23z3c9R1yJXTZNHgIIPG0vC1tSIDc0&t=ffffffff940d030f | 200 OK Content-Length: 300917 Content-Type: application/x-javascript | clean |
http://ketab.ir/ScriptResource.axd?d=yt2wfeGB7DaSQCH43p_5lh0hqPt7Gxa4WtMermBRrWy-ev_ipuRFI-nE7L9deaynXmBg2Yi6iqoARZEA0wAjH2HUtpsnVAZJlLDkSWu7htBpm7wx-U5jZf_TXz_pLWRIJF7NAtO5xKdUyJa6gxSq9nHYe8BisI8y-b3LvXimhq2svj3lIwmThdnmGs5XsPB90&t=ffffffff940d030f | 200 OK Content-Length: 99908 Content-Type: application/x-javascript | clean |
http://ketab.ir/ScriptResource.axd?d=BI-rezjf6pz4G4plyGeaooW-UXK0x91woA0cAN7CpOyp_llgP6ztJAJZXYhvhPJzXgvRQwZJAGDbgZfHYOgSMQ-9Iywm6X9Q62lDGlMhuo9IgbkNM7gSFWlqWBjkaddNxOySdzMGBIwGnap_6zDUZKDwHQfIVXC-xcNPlYVpo7k1&t=367ed963 | 200 OK Content-Length: 69137 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=iNA3q2MsfrmYUy_PDCTu28OgkoOlzhEbdNzmiPAh-ZZTK5qMLjkpoSYqGZHtLgMbk50Md8G8q14sxwz3Bwa40V-sApkNdGeCWjW084vJ_D0J-66nZsnElArbiThX8JXv9GCwiHLI1y9Q5fF-6tM4NK-ShVsC65JkW1DNNWR7K2Y1&t=367ed963 | 200 OK Content-Length: 2946 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=xIQayuxzfSfSGbQq5JWrotL5jzE4q8WuV7_U4z9695wPnvl6wT0yMqI9Hq_yJuvlvPW8hlkAWVMgId3Z1ZuhHEy0AscmfdH2nBaLDQx0qGHKWx4LOmxFZwfI1IwX9oVgbnAYsG_GLbYOXgYSASWRgjCiyAU5_qmDkbropdijlVM1&t=367ed963 | 200 OK Content-Length: 143101 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=3hFeZMXnny0boQAtd50ZSrpoXnlVAVU5WeS_wYIlyzlbn3f-7JzrAmmuzl8Vf0ULNy6ZoN3DsbPtEBA-nETlHlPk7_GIL7XtMKOOOJ6FL6bcPK2iYawPSqlqFrMJc9nxlI1bA0__0CEeRcjF4b9XjK-mWncRFCD7eB86iwqK1DY1&t=367ed963 | 200 OK Content-Length: 27463 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=OLr5XNIpC9MetrLCXrQXyNzHKxUnGnfm6pL5GBWpgmcFlL2yKx9YOjEdDPIEQxNIY2IZ0LHl9kzMJU6-YO7yaV6kTq44Ex1HedNpIrf-0xa03WhkeA1YJE9qUQFACV3wNDPebbI8mzjodErGhDu8A9ct7juQY3oZX7FBwPMT0aM1&t=367ed963 | 200 OK Content-Length: 15830 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=7dy3zALtRvIUaV9KE0Ps8mherRal_kI1ftCae0zdRgUg4JEvGAcMheEhuMcI3mU3DJMCAivPts3TNDzywK1Egu9vhRpnLFMte7wS36OWpLfy0SVT4GknF4peSQ7Pii7ExYHI8C8E-vMrriNxZFZd7s6E7iLnFDOpgMqC11WiOmAxXSyVcjnM_GWML-SvAIjt0&t=367ed963 | 200 OK Content-Length: 15758 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=mrxDiRcV8rkpJQgqNLyr4Bz16Dm7TNXK1WZjESCbXNOzBc_flNaFLDBOk67ZPWAihpUA_0Kg6oFhiCgcuZBMOx5D1Y3DqbCrzbcvIGkiPnz16F5xnibYs6f9kpwpjYdIm2j_MFwDmJJjoPG3P6C1bjbvzRkBOEkIHDa3duncmKXd0Sz9RdatqSNl938i6JKs0&t=367ed963 | 200 OK Content-Length: 14859 Content-Type: text/javascript | clean |
http://ketab.ir/ScriptResource.axd?d=9jlt5SJCh8MIM9zLXMjsvNwB0SbrXRK0y3-eQtVj3VCZzCx-361N1U-bcg7EMKvBOrbb9EjCUDONCxKVndRqpsZY6pXNn5h4jQkTLSJzPCHBX45Cfng5OEKq_uheGU4j3fGaJdxvghx81fQDCgnRqPZLscbX6Hk-xbLAPjoNzCUxm6GppYWChXxi19vJz--O0&t=367ed963 | 200 OK Content-Length: 14550 Content-Type: text/javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: ketab.ir
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Wed, 20 Aug 2014 03:53:14 GMT
Server: Microsoft-IIS/7.5
Content-Length: 96670
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=dfzfi2auktnnnfvlmtixfwtu; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
...96670 bytes of data.
GET / HTTP/1.1
Host: ketab.ir
Result:
HTTP/1.1 200 OK
Cache-Control: private
Date: Wed, 20 Aug 2014 03:53:14 GMT
Server: Microsoft-IIS/7.5
Content-Length: 96670
Content-Type: text/html; charset=utf-8
Set-Cookie: ASP.NET_SessionId=dfzfi2auktnnnfvlmtixfwtu; path=/; HttpOnly
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
...96670 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: ketab.ir
Referer: http://www.google.com/search?q=ketab.ir
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: ketab.ir
Referer: http://www.google.com/search?q=ketab.ir
Result:
The result is similar to the first query. There are no suspicious redirects found.