Author Topic: This PHISH being detected?  (Read 1029 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33938
  • malware fighter
This PHISH being detected?
« on: January 10, 2018, 11:20:37 PM »
Re: http://urlquery.net/report/9d935a4f-d7bd-4be9-bce4-f8641ea1481d
Phishing and malware detected...Some considerations to ponder over  :P

DOM XSS scan: Results from scanning URL: hxtp://www.newtvworld.com/livetv/india/ZeeTv.html
Number of sources found: 1 e.g.  location.href
Number of sinks found: 9 src= & href

Errors in code here:
Quote
  -content.jwplatform.com/libraries/oncyToRO.js
         info: [decodingLevel=0] found JavaScript
     error: undefined function Object.defineProperty
     error: undefined variable clearTimeout
     error: undefined function document.addEventListener
     info: [element] URL=-content.jwplatform.com/libraries/undefined
This closure does not work establishing from the error in code...

DOM XSS scan creating vuln. code given for: Results from scanning URL: htxp://kiehlmann.co.uk/Building_The_Mastermind_Group_-_Necessary_Genuine_Estate_Networking/
Number of sources found: 54
Number of sinks found: 24
Consider: There is currently no text in this page. You can search for this page title in other pages, search the related logs, or edit this page. -> https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=kiehlmann.co.uk%2FBuilding_The_Mastermind_Group_-_Necessary_Genuine_Estate_Networking%2F&ref_sel=GSP2&ua_sel=ff&fs=1

Also to be taken into the bargain here, the many domains on one and the same IP, some 189:
https://the.domain.name/data/ip/185.119.173.90

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: January 10, 2018, 11:22:43 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!