What? -htxp://irpopup.ir/show.php?user=3944&poptime=2
Going where? http://urlquery.net/report.php?id=1430761290153
See: http://fetch.scritch.org/%2Bfetch/?url=http%3A%2F%2Firpopup.ir%2Fshow.php%3Fuser%3D3944%26poptime%3D2&useragent=Fetch+useragent&accept_encoding=
htzp://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
See: http://urlquery.net/report.php?id=1430761290153
Included script scan:
htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
Detected libraries:
jquery - 1.8.0 : htxp://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
Info: Severity: medium
IP badness history: https://www.virustotal.com/nl/ip-address/91.98.103.59/information/
polonus
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
1 vulnerable library detected