Re: https://www.magereport.com/scan/?s=https://www.jekoshop.com/
High Risk webshop site
Blacklisted & outdated: https://sitecheck.sucuri.net/results/www.jekoshop.com
Hosting IP with many vulnerabilities: https://www.shodan.io/host/85.25.211.175
Recommendations found through linting:
https://webhint.io/scanner/10459823-fc0e-42a5-b28b-59fd868c01a7
polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Nothing from here: https://www.virustotal.com/gui/domain/www.mestizomarket.com/relations
Mage report qualifies it as a high risk site: https://www.magereport.com/scan/?s=https://www.mestizomarket.com/
Hints found through linting to come to improvement of the webshop site security:
https://webhint.io/scanner/5c3bbc87-e31a-4a42-aa4c-baade698ac76
See this scan found through api:
https://urlscan.io/result/17dc323f-9f27-4a56-b76b-f2133bdfe5d7/
Consider also: https://webcookies.org/cookies/www.mestizomarket.com/30448648?146876
polonus
Anyone can now check for Magecart abuse: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/anyone-can-check-for-magecart-with-just-the-browser/
Resources:
Detect/Fix
https://www.trustwave.com/en-us/services/security-testing/security-testing-services/ (Web application scanning)
https://github.com/gwillem/magento-malware-scanner
https://github.com/gwillem/magevulndb
https://github.com/steverobbins/magescan
https://www.magereport.com/
Harden
https://modsecurity.org/commercial-rules.html
https://magentary.com/
credits for above info given go to Trustwave’s Spiders Lab Blog
polonus