See: https://www.virustotal.com/nl/url/c1f8ba8c3da016b6890d9c3a64f49150a46d4bed6676897cac9853bcc08a004a/analysis/#additional-info
What is out there: http://killmalware.com/agria-seeds.sk/#
Suspicious domain detected. Details: http://sucuri.net/malware/malware-entry-mwblacklisted35
Location: htxp://lpistw.4pu.com/
Nothing here: http://urlquery.net/report.php?id=1432044627566
Joomla third party cold reconnaissance scan: Joomla version outdated: Upgrade required.
Outdated Joomla Found: Joomla under 2.5.26 or 3.3.5
Joomla Modules, Components and Plugins
The following modules were detected from the HTML source of the Joomla front page.
No modules were found passively in HTML source
The following components were detected from the HTML source of the Joomla front page.
-mailto
-user
The following plugins were detected from the HTML source of the Joomla front page.
jceutilities
Adding Modules, Components and Plugins to a Joomla site expands your attack surface. These addons are a source of many security vulnerabilities, it is important to always keep them updated to the latest version available and check the developers plugin page for information about security related updates and fixes. Using the Joomscan scanner you are able to test more aggressively for plugins and modules installed within a Joomla installation.
jquery-126.js exploitable with Styx Exploit Kit. Network-trojan Snort IDS alerts?
Included scripts Check vulnerable - suspicious: Suspect - please check list for unknown includes
Suspicious Script:
htxp://agria-seeds.sk/plugins/system/jceutilities/js/jceutilities-213.js
document.createelement(‘iframe’);$(this.iframe).attr({id:‘jcepopup-iframe’,frameborder:0,onload:function(){return t._setup()}}).css({width:t -xompare with > http://jsunpack.jeek.org/?report=b3cb94fbded38574011cbaef4704764165a09df6
Vulnerable to cross-site request forgery → http://www.domxssscanner.com/scan?url=http%3A%2F%2Fagria-seeds.sk
polonus (volunteer website security analyst and website error-hunter)