The nameserver for the website is open to DROWn exploit: https://test.drownattack.com/?site=dns1.midphase.com
Then the website there has jQuery issues: -http://www.itsallaboutfamily.com
Detected libraries:
jquery-migrate - 1.2.1 : -http://www.itsallaboutfamily.com/j3/media/jui/js/jquery-migrate.min.js *
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
jquery - 1.11.3 : (active1) -http://www.itsallaboutfamily.com/j3/media/jui/js/jquery.min.js
Info: Severity: medium
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
(active) - the library was also found to be active by running code
2 vulnerable libraries detected
- already mentioned the undefined function that has to be specified in the javascript earlier in a report on this retirable library.
Insecure IDs tracking detected: 75% of the trackers on this site could be protecting you from NSA snooping. Tell itsallaboutfamily.com to fix it.
All trackers
At least 4 third parties know you are on this webpage.
-Google
-www.paypalobjects.com
-shaaaaaaaaaaaaa.com
-www.itsallaboutfamily.com -www.itsallaboutfamily.com
Insecure Communication even worse: Home padlock icon
www.itsallaboutfamily.com
Alerts (1)
Insecure login (1)
Password will be transmited in clear to -http://www.itsallaboutfamily.com/j3/index.php?option=com_comprofiler&view=login&Itemid=600&lang=en
On the template hoster: http://toolbar.netcraft.com/site_report?url=http://slan-550-92.anhosting.com
Meagre F-Status: https://securityheaders.io/?q=http%3A%2F%2Fwww.itsallaboutfamily.com%2Fj3%2Findex.php%3Flang%3Den
Website reported here: https://otx.alienvault.com/indicator/domain/itsallaboutfamily.com/
polonus (volunteer website security analyst and website error-hunter)