Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=upload.tehran98.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://upload.tehran98.com/
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Result: The website is marked by Yandex as suspicious. - visiting this web site may harm your computer.
Details are available here.
Scanned pages/files
Request | Server response | Status |
http://upload.tehran98.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 03 Oct 2014 05:46:18 GMT Location: http://upload.tehran98.com/upme/index.php Server: nginx admin Content-Length: 384 Content-Type: text/html; charset=iso-8859-1 X-Cache: HIT from Backend | clean |
http://upload.tehran98.com/upme/index.php | 200 OK Content-Length: 14049 Content-Type: text/html | clean |
http://upload.tehran98.com/upme/styles/tehran98/jquery.js | 200 OK Content-Length: 92629 Content-Type: application/x-javascript | clean |
http://tehran98.com/wp-content/themes/Tehran98/popup.js | HTTP/1.1 301 Moved Permanently Cache-Control: no-cache, must-revalidate, max-age=0 Connection: close Date: Fri, 03 Oct 2014 05:46:19 GMT Pragma: no-cache Location: http://www.tehran98.com/wp-content/themes/Tehran98/popup.js Server: nginx admin Content-Length: 0 Content-Type: text/html; charset=UTF-8 Expires: Wed, 11 Jan 1984 05:00:00 GMT X-Pingback: http://www.tehran98.com/xmlrpc.php X-Powered-By: PHP/5.3.27 | clean |
http://www.tehran98.com/wp-content/themes/tehran98/popup.js | 404 Not Found Content-Length: 3682 Content-Type: text/html | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/jquery-1.7.2.min.js | 200 OK Content-Length: 94842 Content-Type: application/x-javascript | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/custom-scripts.js | 200 OK Content-Length: 4160 Content-Type: application/x-javascript | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/jquery.tipsy.js | 200 OK Content-Length: 7389 Content-Type: application/x-javascript | clean |
http://tehran98.com/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 03 Oct 2014 05:46:20 GMT Location: http://www.tehran98.com/ Server: nginx admin Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Cache: HIT from Backend X-Pingback: http://www.tehran98.com/xmlrpc.php X-Powered-By: PHP/5.3.27 | clean |
http://www.tehran98.com/ | 200 OK Content-Length: 218407 Content-Type: text/html | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/jquery.min.js | 200 OK Content-Length: 93434 Content-Type: application/x-javascript | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/jquery.bxslider.min.js | 200 OK Content-Length: 19123 Content-Type: application/x-javascript | clean |
http://www.tehran98.com/wp-content/themes/V2.1/js/jquery.skitter.min.js | 200 OK Content-Length: 36568 Content-Type: application/x-javascript | clean |
http://xslt.alexa.com/site_stats/js/t/a?url=www.tehran98.com | 200 OK Content-Length: 3153 Content-Type: application/x-javascript | clean |
http://www.webgozar.ir/c.aspx?Code=3158288&t=counter | 200 OK Content-Length: 973 Content-Type: text/html | suspicious |
Hidden iFrame found. size: 0x0 src: http://engine.webgozar.ir/counter/xstat.aspx?t=stat5&code=3158288&rnd= <iframe scrolling=no width=0 height=0 border=0 frameborder=0 allowtransparency="true" src="http://engine.webgozar.ir/counter/xstat.aspx?t=stat5&code=3158288&rnd=' + math.round(math.random()*50000) + '&s=' + screensize + '&c=' + colors + '&ref=' + escape(document.referrer) + '&title=' + escape(document.title) + '" > | ||
http://www.webgozar.ir/test404page.js | 404 Not Found Content-Length: 1245 Content-Type: text/html | clean |
http://tehran98.com/fa/%D8%A7%D8%B1%D8%AA%D8%A8%D8%A7%D8%B7-%D8%A8%D8%A7-%D9%85%D8%A7/ | HTTP/1.1 301 Moved Permanently Connection: close Date: Fri, 03 Oct 2014 05:46:25 GMT Location: http://www.tehran98.com/fa/%D8%A7%D8%B1%D8%AA%D8%A8%D8%A7%D8%B7-%D8%A8%D8%A7-%D9%85%D8%A7/ Server: nginx admin Content-Length: 0 Content-Type: text/html; charset=UTF-8 X-Cache: HIT from Backend X-Pingback: http://www.tehran98.com/fa/xmlrpc.php X-Powered-By: PHP/5.3.27 | clean |
http://www.tehran98.com/fa/%d8%a7%d8%b1%d8%aa%d8%a8%d8%a7%d8%b7-%d8%a8%d8%a7-%d9%85%d8%a7/ | 200 OK Content-Length: 32183 Content-Type: text/html | clean |
http://www.tehran98.com/fa/wp-content/themes/tehran98v2/js/jquery.min.js | 200 OK Content-Length: 93636 Content-Type: application/x-javascript | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: upload.tehran98.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 03 Oct 2014 05:46:18 GMT
Location: http://upload.tehran98.com/upme/index.php
Server: nginx admin
Content-Length: 384
Content-Type: text/html; charset=iso-8859-1
X-Cache: HIT from Backend
...384 bytes of data.
GET / HTTP/1.1
Host: upload.tehran98.com
Result:
HTTP/1.1 301 Moved Permanently
Connection: close
Date: Fri, 03 Oct 2014 05:46:18 GMT
Location: http://upload.tehran98.com/upme/index.php
Server: nginx admin
Content-Length: 384
Content-Type: text/html; charset=iso-8859-1
X-Cache: HIT from Backend
...384 bytes of data.
Second query (visit from search engine):
GET / HTTP/1.1
Host: upload.tehran98.com
Referer: http://www.google.com/search?q=upload.tehran98.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: upload.tehran98.com
Referer: http://www.google.com/search?q=upload.tehran98.com
Result:
The result is similar to the first query. There are no suspicious redirects found.