Other > Viruses and worms

GoDaddy abuse domain, avast detects this malscript within 47 minutes

(1/1)

polonus:
See: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=I3tzYmxdcXV7XXN1blt2e31zfGx7cy5eXW0%3D~enc
Flagged and VT results (avast's detects Script:SNH-gen [Trj]);
https://www.virustotal.com/fr/file/82d8ea7296ebb0ab9e0837ad5f4720a3a93873bbdf6c6f1fdfac51a161abd2f9/analysis/1550174285/
according to: https://urlhaus.abuse.ch/url/124692/

Retirable libraries 2: https://retire.insecurity.today/#!/scan/86eb46305dae0ca602afd23d5a8e15167d141f22a480cf6410e53f87afd4fdbd
DOm-XSS with results from scanning URL: -http://desbloqueosuniversales.com/js/script.js
Number of sources found: 389
Number of sinks found: 118
&
http://desbloqueosuniversales.com/js/script.js
Number of sources found: 22
Number of sinks found: 8 
above results via main scan of htxps://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js?
_=1550177074420

Also consider blacklisting: https://sitecheck.sucuri.net/results/desbloqueosuniversales.com

polonus (volunteer website security analyst and website error-hunter)

Navigation

[0] Message Index