Author Topic: Quite some things wrong with this blacklisted website!  (Read 961 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Quite some things wrong with this blacklisted website!
« on: September 29, 2016, 11:40:06 PM »
See: http://killmalware.com/cash-box.pl/#
Not safe: https://www.google.com/transparencyreport/safebrowsing/diagnostic/index.html#url=cash-box.pl
Insecure: https://observatory.mozilla.org/analyze.html?host=www.cash-box.pl

script-src [missing]
script-src directive is missing.
expand_more

errorobject-src [missing]
Missing object-src allows the injection of plugins which can execute JavaScript. Can you set it to 'none'?
expand_more


In: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.cash-box.pl%2F

And 1 issue here: Scripts 1 issues
Tag   Result
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/prototype/1.6.0.3/prototype.js"></script>    Missing SRI hash

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!