Domain > webgozar.ir

More information on this domain is in AlienVault OTX

Files that talk to webgozar.ir

MD5	A/V
39bae4e8997422dc7c50eaabd5675a1f	[W32.HfsIframe.7158] [HEUR:Trojan.Script.Iframer] [Heuristic.LooksLike.HTML.Suspicious-URL.B]
79a5631f5eb1c376fedcce3927708299	[Mal/JSShell-B]
38790c5c19a7ad1051d3efd9fe83b985
6467644218137fbd3f41e58630d837ef	[W32.Clod5cc.Trojan.9b4f] [Artemis!646764421813] [Trojan.Win32.Plapon.sxiob] [UnclassifiedMalware] [TR/Spy.131072.291] [Trojan/Plapon.qp]
11e8e8822e06e7e4ee9b1d7ec023b0df	[Mal/JSShell-B]
fb381daff2bba5c4a8f357faa02563b8
49b7a2b5940d323f896088653f6a8025	[W32.HfsIframe.0d7f] [VBS/StartPage-NZ] [VBS/StartPage.DA] [Startpage.IPXH] [TrojWare.VBS.StartPage.tr] [VBS/StartPage.NEM] [Virus.JS.Downloader] [VBS/StartPage.BBEK!tr] [Exploit]
645d60825b362448151387d060593635	[W32.Clod9e1.Trojan.1d9a] [Trojan.Win32.DownLoader10.cqvkbc] [WS.Reputation.1] [HKTL_CLICKER] [Trojan.Win32.S.Clicker.649728] [UnclassifiedMalware] [Trojan.DownLoader10.26566] [SPR/Surfairy.A] [Trj/CI.A] [Trojan.SuspectCRC] [Malware_fam.NB] [Hacktool.Win32.RiskTool.77] [Win32/DH{DyAiJQ}]
2e2e1342cfe3d414c753ce7e7e072f01
11b00d5472e4405fea018568b0c33bde	[HEUR:Trojan.Script.Iframer] [JS/iFrame.EL.102] [Heuristic.LooksLike.HTML.Suspicious-URL.B]
8776576C9B5D476A7E44A93CA22D7865
41f2af1ae8fc644986b9a79091359d12	[Trojan/AutoRun.VB.bbw] [VBTroj.OFHA] [Trojan.VB!IzDSRmYxh4o] [Mal/VB-MW] [TrojWare.Win32.VB.QZY] [Possible_Otorun8] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Trojan/Win32.VB] [Win32.HeurC.KVM006.a.(kcloud)] [Worm:Win32/VB.JN] [W32/Trojan.ENRO-4903] [TScope.Trojan.VB] [Win32/AutoRun.VB.BBW] [Worm.Win32.Usbalex] [W32/Worm.BBW!tr] [Zbot.AXF]
dda71be24b3167428c13e32b26ef8456	[Backdoor.VB.r3] [RDN/Autorun.worm!dn] [Trojan.Dropper.PE] [Backdoor.VB.Win32.17046] [Trojan/AutoRun.VB.bjo] [Worm.AutoRun!9dJGDxSOKic] [W32/S-cb66fa92!Eldorado] [Win32/Tnega.bZPaTbC] [TROJ_AUTORUN.TFE115] [Worm.Taz] [Trojan.Win32.VB.cuks] [Trojan.Win32.VB.dkjewo] [Backdoor.Win32.A.VB.397312.I[h]] [Mal/VB-MW] [TrojWare.Win32.Autorun.WPA] [TROJ_AUTORUN.TFE115] [BehavesLike.Win32.Downloader.fm] [W32/S-cb66fa92!Eldorado] [Trojan[Backdoor]/Win32.VB] [Worm:Win32/Mothyfil.A] [Worm.Otorun] [Trojan/Win32.Autorun] [Trojan.VB] [Trojan.Win32.VB.cuks] [Trojan-Banker.Win32.Bancos] [W32/VB.BJSY!tr]

Whois

Property	Value
NameServer	ns2.webgozar.net
Changed	2013-11-23 00:00:00
Expires	2015-08-13 00:00:00

DNS Resolutions

Date	IP Address
2014-03-08	66.148.112.188 (ClassC)
2014-09-07	66.148.112.189 (ClassC)
2015-01-29	66.148.112.152 (ClassC)
2024-03-23	46.105.190.248 (ClassC)
2025-01-16	209.160.40.232 (ClassC)

Port 80

HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Microsoft-IIS/7.5X-Powered-By: ASP.NETDate: Mon, 13 Nov 2023 00:10:33 GMTContent-Length: 1233

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1/>title>403 - Forbidden: Access is denied./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>Server Error/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>403 - Forbidden: Access is denied./h2>  h3>You do not have permission to view this directory or page using the credentials that you supplied./h3> /fieldset>/div>/div>/body>/html>

Subdomains

Date	Domain	IP
engine.webgozar.ir	2014-06-02	66.148.112.188
www.webgozar.ir	2014-07-18	66.148.112.189

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]