Author Topic: Various malware on website, Enzu Inc. abuse...  (Read 1225 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Various malware on website, Enzu Inc. abuse...
« on: May 16, 2018, 03:38:32 PM »
Re: https://urlquery.net/report/0be0dfb7-7356-48f3-b283-8ab1ab318611
Re: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=www.mapets.com.cn&ref_sel=GSP2&ua_sel=ff&fs=1
23 issues.
Re: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.mapets.com.
Re: https://retire.insecurity.today/#!/scan/a75d1a67282d221f74494e0010cf93ba05f4b0694e37a5b2ef05a030b6b34804
Re: error:
Quote
-www.mapets.com.cn/html5_blue/js/jquery.min.js
     saved 94840 bytes abcd2ba13348f178b17141b445bc99f1917d47af
     info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
     info: [decodingLevel=0] found JavaScript
     error: undefined function p.getElementsByTagName
     error: undefined variable p
     info: [element] URL=www.mapets.com.cn/html5_blue/js/undefined
     info: [1] no JavaScript
     file: abcd2ba13348f178b17141b445bc99f1917d47af: 94840 bytes
     file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes
  Re: https://asafaweb.com/Scan?Url=www.mapets.com.cn%2Fhtml5_blue%2Fjs%2Fjquery.min.js

Asafaweb scan results:
Quote
erver: Microsoft-IIS/7.5 | X-Powered-By: ASP.NET | X-AspNet-Version: 2.0.50727 | X-AspNetMvc-Version: Unknown | Web forms app: No | ASP.NET site: Yes | ASP.NET version: Unknown | 7 requests were made by ASafaWeb:
URL   Page title   Response size   Duration
1.   hxtp://www.mapets.com.cn/html5_blue/js/jquery.min.js   None   94,840 bytes   1,306 ms
2.   hxtp://www.mapets.com.cn/html5_blue/js/trace.axd   è·Ÿè¸ªé”™è¯¯   1,997 bytes   1,840 ms
3.   hxtp://www.mapets.com.cn/trace.axd   è·Ÿè¸ªé”™è¯¯   1,997 bytes   576 ms
4.   hxtp://www.mapets.com.cn/html5_blue/js/<   None   25 bytes   66 ms
5.   hxtp://www.mapets.com.cn/html5_blue/js/jquery.min.js (POST 1,001 params)   405 - 不允许用于访问此页的 HTTP 谓词。   65,476 bytes   2,271 ms
6.   hxtp://www.mapets.com.cn/html5_blue/js/elmah.axd   None   25 bytes   567 ms
7.   hxtp://www.mapets.com.cn/html5_blue/js/elmah   None   25 bytes   655 ms
164,385 bytes   7,281 ms
Tracing: Pass   Custom errors: Fail   Stack trace: Pass   Request validation: Not tested   HTTP to HTTPS: Pass  Hash dos patch: Not tested   ELMAH log: Pass   Excessive headers: Warning   HTTP only cookies: Pass  Secure cookies: Pass   Clickjacking: Warning   View state MAC: Not tested

polonus (volunteer website security analyst and website error-hunter)
« Last Edit: May 16, 2018, 03:40:31 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: Various malware on website, Enzu Inc. abuse...
« Reply #2 on: May 16, 2018, 04:33:16 PM »
I did not expect to see anything else, thanks Pondus.

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!