Is soft98.ir safe?
http://soft98.ir/
Coveragestrong4 of 6 applicable core capabilities
Persian software download portal soft98.ir carries a malware-serving tag and serves its page over unencrypted HTTP without redirecting to HTTPS
soft98.ir is a Persian-language software download portal that presents itself as a content and download hub. Independent research found an iQ Abuse Scan tag on the site for serving malware, while a saved antivirus observation recorded one engine marking the URL as suspicious; the browser threat feed currently raises no threat, and a valid TLS certificate exists but the scanned address was served over plain HTTP with no redirect to HTTPS, so the connection itself was not encrypted. The site's captured page showed a reCAPTCHA challenge and no direct contact email. The combination of a malware-serving tag on a download site, an unencrypted connection to the page, and no discoverable contact channel puts this site in the moderate-risk band.
Be the first to review soft98.ir
Lost money to soft98.ir? Warn others
Did you use soft98.ir?
Follow soft98.ir
Get a notification in your MalwareTips bell when new reviews arrive (one digest a day at most), when the verdict changes after a rescan, and when MalwareTips or the verified site owner replies. Unfollow any time.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
soft98.ir is a Persian-language software download portal that presents itself as a content and download hub. Independent research found an iQ Abuse Scan tag on the site for serving malware, while a saved antivirus observation recorded one engine marking the URL as suspicious; the browser threat feed currently raises no threat, and a valid TLS certificate exists but the scanned address was served over plain HTTP with no redirect to HTTPS, so the connection itself was not encrypted. The site's captured page showed a reCAPTCHA challenge and no direct contact email. The combination of a malware-serving tag on a download site, an unencrypted connection to the page, and no discoverable contact channel puts this site in the moderate-risk band.
Independent warnings on a software download site
Independent research recorded that iQ Abuse Scan has tagged this website for serving malware, a claim surfaced through an independent site-rating service. That is a specific adverse third-party report about a site whose main activity is hosting software for users to download, which is exactly the context in which a malware-serving tag matters most.
A saved antivirus observation separately recorded that one engine marked the URL as suspicious, attributed to Gridinsoft. That observation is labelled as coming from a saved scan rather than a fresh submission, so the detection is real but its timing should be confirmed before treating it as current.
Balancing these, the browser threat feed returned no threat warning at the time of review. The overall picture is therefore conflicting rather than uniformly hostile: one abuse-oriented tag, one stale engine suspicion, and a clean Google verdict.
Unencrypted page delivery and no visible contact channel
Although a valid TLS certificate exists for the host, the scanned address was served over plain HTTP with no redirect to HTTPS, meaning the page content travelled unencrypted. On a site that distributes downloads this weakens any assurance a visitor can have that what they receive matches what the operator intended to serve.
The captured page contained no direct contact email. For a download portal that a visitor must trust with executable files, the absence of an accessible contact route makes it harder to raise a complaint or verify who runs the site.
The page also showed a reCAPTCHA challenge asking the user to select images of buses, which is a visual confirmation of the anti-automation gate but adds no safety signal either way.
Why the score is 55
One public warning on a public review site: "iQ Abuse Scan has tagged this website for serving malware". Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from October 23, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
The page displays a reCAPTCHA challenge requiring the user to select images of buses.
What the captured page showed
1 observation- 01
The page displays a reCAPTCHA challenge requiring the user to select images of buses.
03 · Investigation Story
Investigation story
What the site claims
بررسی امنیتی
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Malware & Deceptive Downloads
Service and business model
Downloader
Observed behavior
Evidence behind this classification
- 01One public warning on a public review site: "iQ Abuse Scan has tagged this website for serving malware"
- 021 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 03The browser threat feed returned no threat warning for the site at the time of review.
Web research findings
Independent findings for soft98.ir, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Scamadviseropen
"iQ Abuse Scan has tagged this website for serving malware"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainsoft98.ir
- Redirects tosoft98.ir
- Hosted byAsiatech Data Transmission company
- Referencesrecaptcha.net
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencepartial
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · No direct contact email was found on the captured page.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a public review site: "iQ Abuse Scan has tagged this website for serving malware"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 23, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Limited | No saved finding | this scan · Oct 25, 2026 |
| Independent research | 1 independent finding was saved | Completed | Adverse | this scan · Oct 25, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 23, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is soft98.ir a scam or is it safe?
Is soft98.ir safe to use?
Has soft98.ir been flagged by antivirus engines?
Is soft98.ir on any phishing or malware blacklists?
Does soft98.ir have a valid SSL certificate?
Where is soft98.ir hosted?
Is soft98.ir a well-known website?
How often is the soft98.ir report updated?
08 · Final Verdict
Final verdict
Persian software download portal soft98.ir carries a malware-serving tag and serves its page over unencrypted HTTP without redirecting to HTTPS
The written conclusion remains part of the saved report.
soft98.ir is a Persian-language software download portal that presents itself as a content and download hub. Independent research found an iQ Abuse Scan tag on the site for serving malware, while a saved antivirus observation recorded one engine marking the URL as suspicious; the browser threat feed currently raises no threat, and a valid TLS certificate exists but the scanned address was served over plain HTTP with no redirect to HTTPS, so the connection itself was not encrypted. The site's captured page showed a reCAPTCHA challenge and no direct contact email. The combination of a malware-serving tag on a download site, an unencrypted connection to the page, and no discoverable contact channel puts this site in the moderate-risk band.
09 · Community
Community
Are you the owner of soft98.ir?Verify and reply