WiredPakistan - Fraud Warning @ Admin

@admins

Something you might want to "fix" when browing http://wiredpakistan.omin Opera.

Sadly, but luckily for you, not many people use Opera so take your time.

this used to be a problem on chrome as well.. a lot..told admins about this...

now i am on Firefox from a long time , no warnings as such/.

My Kaspersky antivirus also sometimes reports that visiting wiredpakistan.com may not be safe. This has happened with sign in page and when opening a wiredpakistan link from Google search results.

False positive. See here:

https://www.virustotal.com/en/url/eef688d1740bb458a3291a0bcb8b0a113fea50753538bc9e9b687f300b046aec/analysis/1428474248/

As such, use a decent browser without addon ad/search toolbars, etc.

I have accessed the website with both; Chrome and Firefox, and it works flawlessly on both.

When accessing wiredpk through a google search result, on the first click it opens http://url4short.info/d48fde76

Also the problem reported earlier about clicking links in email notifications of replies has not gone yet. Clicking links in emails goes to wiredpakistan.com and them immediately changes to url4short.info something.

I think it is worth taking a look at http://help.yandex.com/webmaster/security/faq.xml#howand going steps for getting the issue resolved, even if it is false positive.

[quote=“hashmi1, post:5, topic:22029”]

When accessing wiredpk through a google search result, on the first click it opens http://url4short.info/d48fde76

[/quote][quote=“SupMA5TER, post:6, topic:22029”]

Also the problem reported earlier about clicking links in email notifications of replies has not gone yet. Clicking links in emails goes to wiredpakistan.com and them immediately changes to url4short.info something.

[/quote]

Try again and tell if it is still happening.

IIRC, the patch for that is already in effect. I have tweaked some things just now on server side and can’t recreate the issue at my end.

[quote=“attock, post:7, topic:22029”]

I think it is worth taking a look at http://help.yandex.com/webmaster/security/faq.xml#howand going steps for getting the issue resolved, even if it is false positive.

[/quote]

Ditch Opera and use a more mainstream browser. :)

Yandex link states following so it should resolve itself automatically in due time:

[quote=", post:, topic:"]

How often are sites checked?

The time between checks varies so we cannot say for sure when a site will be scanned. Therefore, there may be a delay before information about an infected site is updated.

Any site on which Yandex detects malware will be rechecked. However, the period between checks will increase if the site is still infected after each one. The quicker the malware is removed from the site, the quicker Yandex will find out and remove the warning tag displayed next to the site in the search results.

[/quote]

If the issue doesn’t resolve itself in couple weeks, PM me and I can look into it further at that time.

there are lot of problemo's with wiredpakistan admin does not know about, i think its because admin just started this community as a hobby.

this is not a criticism.

[quote=“MrKamran, post:10, topic:22029”]

there are lot of problemo's with wiredpakistan admin does not know about, i think its because admin just started this community as a hobby.

this is not a criticism.

[/quote]

have you contacted with KO (the real admin)

[quote=“hashmi1, post:5, topic:22029”]

When accessing wiredpk through a google search result, on the first click it opens http://url4short.info/d48fde76

[/quote][quote=“SupMA5TER, post:6, topic:22029”]

Also the problem reported earlier about clicking links in email notifications of replies has not gone yet. Clicking links in emails goes to wiredpakistan.com and them immediately changes to url4short.info something.

[/quote]

Is the issue still occurring at your end?

[quote=“MrKamran, post:10, topic:22029”]

there are lot of problemo's with wiredpakistan admin does not know about, i think its because admin just started this community as a hobby.

this is not a criticism.

[/quote]

That is infect a very good thing. We (the Pakistani awam) have the tendency to start dictating otherwise.

I believe admins are doing great job here.

Since this evening, the emails I've received have so far landed clean on wiredpakistan.com :)

But only after a day or two, I will be certain that the issue is gone for good.

[quote=“SupMA5TER, post:14, topic:22029”]

Since this evening, the emails I’ve received have so far landed clean on wiredpakistan.com :)

But only after a day or two, I will be certain that the issue is gone for good.

[/quote]

Clear you forum related cookies just to be sure. Update the thread with the status once your testing is complete. :)

[quote=“Asad, post:12, topic:22029”]

Is the issue still occurring at your end?

[/quote]

No, its fixed. Thanks.

The problem still exists.

To replicate;

In any HTTP debugger, create a new session to;

http://www.wiredpakistan.com/index.php?ipbv=750d36000c0f47ae7854663e40487c62&g=js

Important parameters are;

Referer: http://www.wiredpakistan.com/

and

Cookie: session_id=

The result will be;

document.location='http://url4short.info/d48fde76'

This clever thing only throws above JS in special cases (like above) to hide itself normally and perhaps from admins as well.

The URL appears as a referenced Javascript file only in similar special cases.

This things is perhaps the reason all wiredpakistan.com emails are flagged as SPAM by gmail for me, even with repeated "not spam" clickings.

A little search brought this up;

http://peter.upfold.org.uk/blog/2013/01/15/cleaning-up-the-ip-board-url4short-mess/

[quote=“SupMA5TER, post:18, topic:22029”]

This things is perhaps the reason all wiredpakistan.com emails are flagged as SPAM by gmail for me, even with repeated “not spam” clickings.

A little search brought this up;

http://peter.upfold.org.uk/blog/2013/01/15/cleaning-up-the-ip-board-url4short-mess/

[/quote]

That is an old article and the identified variables are not applicable to this installation.

I just checked and redirection was still occurring. I have made some further tweaks and the redirection doesn’t appear to be happening for now. Clear your cookies before testing as a precaution. I will keep it under observation.

when i am clicking wp from google search it redirecting me to some weird web pages like link shorten ads etc