Author Topic: Wrong certificate and weak and untrusted...  (Read 1303 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Wrong certificate and weak and untrusted...
« on: April 19, 2016, 09:45:55 PM »
Where we stumbled upon it: http://killmalware.com/lobiatrading.com/#
See: http://toolbar.netcraft.com/site_report?url=http://178.250.168.173
Certificate Mismatch with: http://toolbar.netcraft.com/site_report?url=https://order.doresys.net

Certificate is not installed correctly
whois.psi-usa.info
You have 1 error
Wrong certificate installed.
The domain name does not match the certificate common name or SAN.
Warnings
BEAST
The BEAST attack is not mitigated on this server.

RSA remove cross certificates
The certificate chain contains a cross root (primary intermediate) certificate that should be removed. Use Symantec CryptoReport to remove cross root certificates.
Certificate information
This server uses a Domain Validated (DV) certificate. No information about the site owner has been validated. Data is protected, but exchanging personal or financial information is not recommended.
Common name:
 order.doresys.net
SAN:
 order.doresys.net
Valid from:
 2016-Mar-23 00:00:00 GMT
Valid to:
 2017-Jun-22 23:59:59 GMT
Certificate status:
 Valid
Revocation check method:
 OCSP
Organization:
 
Organizational unit:
 
City/locality:
 
State/province:
 
Country:
 
Certificate Transparency:
 Enabled
Serial number:
 17aeb2aeceadec5f72f4a09f7d8c40b9
Algorithm type:
 SHA256withRSA
Key size:
 4096

-> https://www.ssllabs.com/ssltest/analyze.html?d=whois.psi-usa.info Signature algorithm   SHA1withRSA   WEAK
contradictory here it says nice: And here it says nice: https://shaaaaaaaaaaaaa.com/check/whois.psi-usa.info

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!