93 security issues on suspicious * top.domain

Viruses and worms
1

See: https://urlquery.net/report/3fdda3b4-f997-4100-b63b-b3f1d4a0c3e2
See: https://sonarwhal.com/scanner/b26dd705-028b-40da-9613-92a4a359744c
2 vulnerable jQuery libraries detected:
https://retire.insecurity.today/#!/scan/2520dc1c4762645f134b316a7292d2183e802193d6e04bc568f44d8b2a24f6fd
Snyk detects here: no-vulnerable-javascript-libraries: 2 errors
DOCUMENTATION
CLOSE DETAILS
ERROR
Bootstrap@3.3.7 has 1 known vulnerabilities (1 medium). See https://snyk.io/vuln/npm:bootstrap for more information.
-https://www.corenatv.top/
ERROR
jQuery@1.11.1 has 1 known vulnerabilities (1 medium). See https://snyk.io/vuln/npm:jquery for more information.
-https://www.corenatv.top/

Re: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=www.corenatv.top&ref_sel=GSP2&ua_sel=ff&fs=1

polonus (volunteer website security analyst and website error-hunter)

2

Here it seems the site is not insecure: https://sitecheck.sucuri.net/results/www.corenatv.top#

Cert: Server configuration Let’s Encrypt Authority X3 and Tested Certificate for corenatv. top in chain.
Host name:
-vmi157786.contaboserver.net
Server type:
nginx
IP address:
193.164.131.172
Port number:
443

F-grade status and recommended change: https://observatory.mozilla.org/analyze/www.corenatv.top

56 sources and 73 sinks found through: http://www.domxssscanner.com/scan?url=https%3A%2F%2Fwww.corenatv.top

Protocols enabled:
TLS1.2
TLS1.1
TLS1.0
Protocols not enabled:
SSLv3
SSLv2
Secure Renegotiation:
Enabled
Downgrade attack prevention:
Enabled
Next Protocol Negotiation:
Enabled
Session resumption (caching):
Enabled
Session resumption (tickets):
Enabled
Strict Transport Security (HSTS):
Not Enabled
SSL/TLS compression:
Not Enabled
Heartbeat (extension):
Enabled
RC4:
Not Enabled
OCSP stapling:
Not Enabled

Vulnerabilities checked:
Heartbleed
Poodle (TLS)
Poodle (SSLv3)
FREAK
BEAST
CRIME

code error in

wXw.corenatv.top/assets/js/lightbox.min.js
status: (referer=XXX)saved 9372 bytes f6c3bcf2b59da9a9d162b92feb954bca4cdb4348
info: [img] wXw.corenatv.top/assets/js/data:image/gif;base64,R0lGODlhAQABAIAAAP/wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==
info: [decodingLevel=0] found JavaScript
error: undefined function a
file: f6c3bcf2b59da9a9d162b92feb954bca4cdb4348: 9372 bytes
Does not recognize the specified string as the name of a function on the path or as a variable. “Undefined function a”.

polonus (volunteer website security analyst and website error-hunter)