Insecure https site!

Viruses and worms
1

See: This is a suspicious page
Result for 2015-03-09 20:54:30 UTC
Website: htxps://ads.returnpath.net
Checked URL: htxps://ads.returnpath.net/admin/index.php
Website Unsafe Details
Invalid SSL Certificate. UNTRUSTED BY MICROSOFT
Vulnerable: http://www.domxssscanner.com/scan?url=https%3A%2F%2Fads.returnpath.net%2Fadmin%2Findex.php
Poodle threat: This site supports the SSL version 3 protocol.
SSL verification issue (Possibly mis-matched URL or bad intermediate cert.). Details:
ERROR: cannot verify ads.returnpath.net’s certificate, issued by ‘/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3’: Issued certificate has expired.
SSL certficate is using SHA-1 algorithm that expires after 2015. You should re-issue your SSL certificate as SHA-2 to avoid padlock warning in Chrome.
Server supports SSLv3, may be vulnerable to POODLE attack. It is suggested to disable the SSLv3 protocol.
http://whois.domaintools.com/returnpath.net

Update from earlier posting: https://forum.avast.com/index.php?topic=163412.0

polonus

2

Flagged here: http://mxtoolbox.com/domain/ads.returnpath.net/?source=findmonitors
5 Problems
Category Host Result
blacklist returnpath dot net Blacklisted by Squid Malicious
dns returnpath dot net Name Servers are on the Same Subnet
dns returnpath dot net SOA Expire Value out of recommended range
smtp corp.returnpath.net.inbound10.mxlogic dot net May be an open relay.
smtp corp.returnpath.net.inbound10.mxlogicmx dot net May be an open relay.