Author Topic: Avast flags JS:ScriptIP-inf[Trj] op website scan code....  (Read 2106 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34053
  • malware fighter
Avast flags JS:ScriptIP-inf[Trj] op website scan code....
« on: June 23, 2016, 07:15:08 PM »
Insecurity on parked website: hxtp://mcc.godaddy.com/park/Mz5mpzqlrv5jLab=  (blocked by acriptblocking).
This is a suspicious page
Result for  2016-06-23 16:37:52 UTC
Website: -http://safetem.com
Checked URL: -http://safetem.com/update/confirm.php
Website Unsafe Details
Blacklisted site.  UrlBlacklist detected
Phishing URL Details:
Possible Phishing checked url. 

Code insecurity: -http://safetem.com
Detected libraries:
jquery - 1.3.1 : -http://ak2.imgaft.com/script/jquery-1.3.1.min.js
Info: Severity: medium
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4969
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
jquery - 1.3.1 : -http://ak2.imgaft.com/script/jquery-1.3.1.min.js
Info: Severity: medium
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4969
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
jquery - 1.3.1 : -http://ak2.imgaft.com/script/jquery-1.3.1.min.js
Info: Severity: medium
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4969
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
3 vulnerable libraries detected

Scanner output: a meagre F-Status: https://securityheaders.io/?q=http%3A%2F%2Fsafetem.com%2Fupdate%2Fconfirm.php&followRedirects=on

Error and warnings: https://asafaweb.com/Scan?Url=safetem.com%2Fupdate%2Fconfirm.phpResult
The address you entered is unnecessarily exposing the following response headers which divulge its choice of web platform:

Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
X-AspNet-Version: 4.0.30319

polonus
« Last Edit: June 23, 2016, 07:17:57 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

REDACTED

  • Guest
Re: Avast flags JS:ScriptIP-inf[Trj] op website scan code....
« Reply #1 on: October 04, 2016, 11:46:07 PM »
I got the same thing Sunday 10/1/16. Was on our real estate multiple listing service which I can no longer use in any browser. I need it! I deleted and reinstalled both chrome and java to no avail.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: Avast flags JS:ScriptIP-inf[Trj] op website scan code....
« Reply #2 on: October 04, 2016, 11:54:26 PM »
Quote
I need it! I deleted and reinstalled both chrome and java to no avail.
Well doing that will not remove infection from a website

what is the URL ?

« Last Edit: October 05, 2016, 12:07:38 AM by Pondus »