See flagged: http://urlquery.net/report.php?id=1487018637931
where Fortinet alerts -js.users.51.la/17862113.js as malware…
Quttera flags the same: -js.users.51.la/17862113.js
Severity: Potentially Suspicious
Reason: Detected procedure that is commonly used in suspicious activity.
Details: Too low entropy detected in string [[‘<a href=“-http://www.51.la/?17862113” target=“_blank” title="51.La %26#x7F51;%26#x7AD9;%26#x6D41;%26#x91CF;%26#’]] of length 277 which may point to obfuscation or shellcode.
Also produces an error: “: Invalid IPv6 URL”.
Vulnerability info:
Aktual PHP: 5.7, 5.6, 5.5 (5.4 EOL, 5.3 and 5.2 unsafe)
Missed here: https://sitecheck.sucuri.net/results/ag8.site
polonus