A http version should not exist next to a https or should redirect there.
File name: /assets/js/typed.min.js is the code that Sucuri’s is flagging and has been abused since 2005 henceon,
Potentially malicious JavaScript contexts
And it is also flagged by SNYK and here: https://retire.insecurity.today/#!/scan/35110fca543262031700b8d0feee7070dc119cd675e9e6760ac1c4751ae536f3
DOM-XSS related issues like sources and sinks for URL: htxp://openload.pw/assets/js/jquery.min.js
Number of sources found: 43 ; number of sinks found: 19
Inherent when vulnerable javascript is being used on PHP-driven CMS,
sometimes such potential insecurity could lead to malcode like crypto-PHP-malware.
Info credits for these github contributions go to “netcode” → shieldfy seems left since 2014,
which is quite long in the digital time-frame as we know it,
Maybe some remover here may put this contribution to a good purpose