Author Topic: Not the website, but is it the hoster? Malware on AS16276 OVH SAS.  (Read 1058 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
The Word Press website has been properly been configured and installed.
Domain IP log-in page is insecure - htxps://94.23.220.38:8443/
9 red out of 10: http://toolbar.netcraft.com/site_report?url=https://94.23.220.38
Retirable jQuery code scan for -http://decorationmarocaine.com
Detected libraries:
jquery-migrate - 1.4.1 : -http://decorationmarocaine.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
jquery - 1.12.4 : (active1) -http://decorationmarocaine.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
(active) - the library was also found to be active by running code
1 vulnerable library detected -but, while Subresource Integrity (SRI) is not implemented, all scripts are loaded from a similar origin
e.g. -ns306236.ip-94-23-220.eu ->  http://toolbar.netcraft.com/site_report?url=ns306236.ip-94-23-220.eu

Malware, MX & DNS flagged: https://threatintelligenceplatform.com/report/decorationmarocaine.com/FAG2hbnCEB
some mail servers are blacklisted -
Mail Server                                                    Blacklisted in
-mail.decorationmarocaine.com                            b.barracudacentral.org

F-Grade state and recommendations: https://observatory.mozilla.org/analyze.html?host=decorationmarocaine.com

5 problems: https://mxtoolbox.com/domain/decorationmarocaine.com/

41% score on modern technology and secure connection techniques: https://en.internet.nl/domain/decorationmarocaine.com/101341/

polonus (volunteer website security analyst and website error-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!