Author Topic: Malicious site undetected?  (Read 2171 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Malicious site undetected?
« Reply #1 on: November 29, 2013, 05:23:43 PM »
This site is not being blocked either: http://maldb.com/usse-sarl.com/
and http://evuln.com/tools/malware-scanner/usse-sarl.com/
completely missed: https://www.virustotal.com/nl/url/48ad7d3a2da0df384917d3aee46e54cc395f693b3083b5859e1c2b1eb6f10be5/analysis/1385741516/
see: http://jsunpack.jeek.org/?report=f5899924431796deb7ea36939b73cf2cfcabd950
Joomla update required: http://sitecheck.sucuri.net/results/usse-sarl.com
Joomla Version 1.5.18 - 1.5.26 for: htxp://usse-sarl.com/media/system/js/caption.js
Joomla Version 1.5.18 to 1.5.26 for: htxp://usse-sarl.com/language/en-GB/en-GB.ini
Joomla version outdated: Upgrade required.
Not been detected here: http://zulu.zscaler.com/submission/show/73824bbd262bd2ab877344ac739f4792-1385741707
nor here: http://urlquery.net/report.php?id=8061114

The chain of redirects found:
to: htxp://yahoo.com
Redirect to this URL found in 3823 sites
to: htxp://www.bolltec.com/media/jce/mediaplayer/license.php
Redirect to this URL found in 1672 sites
to: httx://www.haphuongfoundation.net/vietnam/language/pdf_fonts/www/all2.php
Redirect to this URL found in 4880 sites
Also see: http://evuln.com/tools/malware-scanner/usse-sarl.com/

Consider also: http://sameid.net/ip/217.160.236.94/

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37545
  • Not a avast user
Re: Malicious site undetected?
« Reply #2 on: November 29, 2013, 05:41:47 PM »
Your first post ..... site is dead   ;)    http://www.downforeveryoneorjustme.com/http://sportstvasia.com/

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Malicious site undetected?
« Reply #3 on: November 30, 2013, 12:19:15 AM »
Hi Pondus,

That was a rather complicated way to arrive at that conclusion of the site status as "down for everyone and me".
At least at the time this was still up and active the threat was being flagged.
How many suspicious scanned website results did we encounter here on the forums, Pondus?
We can almost sniff them out, so to say,
Again thanks for your continuing assistance,

polonus
« Last Edit: November 30, 2013, 12:43:24 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!