Various malware on website, Enzu Inc. abuse...

Viruses and worms
1

Re: https://urlquery.net/report/0be0dfb7-7356-48f3-b283-8ab1ab318611
Re: https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=www.mapets.com.cn&ref_sel=GSP2&ua_sel=ff&fs=1
23 issues.
Re: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.mapets.com.
Re: https://retire.insecurity.today/#!/scan/a75d1a67282d221f74494e0010cf93ba05f4b0694e37a5b2ef05a030b6b34804
Re: error:

-www.mapets.com.cn/html5_blue/js/jquery.min.js
saved 94840 bytes abcd2ba13348f178b17141b445bc99f1917d47af
info: ActiveXDataObjectsMDAC detected Microsoft.XMLHTTP
info: [decodingLevel=0] found JavaScript
error: undefined function p.getElementsByTagName
error: undefined variable p
info: [element] URL=www.mapets.com.cn/html5_blue/js/undefined
info: [1] no JavaScript
file: abcd2ba13348f178b17141b445bc99f1917d47af: 94840 bytes
file: d5dba94a76a67a54f2b98b16227da20414542fd9: 72 bytes
Re: https://asafaweb.com/Scan?Url=www.mapets.com.cn%2Fhtml5_blue%2Fjs%2Fjquery.min.js

Asafaweb scan results:

erver: Microsoft-IIS/7.5 | X-Powered-By: ASP.NET | X-AspNet-Version: 2.0.50727 | X-AspNetMvc-Version: Unknown | Web forms app: No | ASP.NET site: Yes | ASP.NET version: Unknown | 7 requests were made by ASafaWeb:
URL Page title Response size Duration

  1. hxtp://www.mapets.com.cn/html5_blue/js/jquery.min.js None 94,840 bytes 1,306 ms
  2. hxtp://www.mapets.com.cn/html5_blue/js/trace.axd 跟踪错误 1,997 bytes 1,840 ms
  3. hxtp://www.mapets.com.cn/trace.axd 跟踪错误 1,997 bytes 576 ms
  4. hxtp://www.mapets.com.cn/html5_blue/js/< None 25 bytes 66 ms
  5. hxtp://www.mapets.com.cn/html5_blue/js/jquery.min.js (POST 1,001 params) 405 - 不允许用于访问此页的 HTTP 谓词。 65,476 bytes 2,271 ms
  6. hxtp://www.mapets.com.cn/html5_blue/js/elmah.axd None 25 bytes 567 ms
  7. hxtp://www.mapets.com.cn/html5_blue/js/elmah None 25 bytes 655 ms
    164,385 bytes 7,281 ms
    Tracing: Pass Custom errors: Fail Stack trace: Pass Request validation: Not tested HTTP to HTTPS: Pass Hash dos patch: Not tested ELMAH log: Pass Excessive headers: Warning HTTP only cookies: Pass Secure cookies: Pass Clickjacking: Warning View state MAC: Not tested

polonus (volunteer website security analyst and website error-hunter)

2

https://www.virustotal.com/#/url/660800ccadbd8f707edc08f67f72a67ca72b98860e32240c235ceac87d01622a/detection

https://www.virustotal.com/#/file/7252829aa55a2d64b61f229882d4d5a569629261b8e2278924e2f25f760dc873/detection

3

I did not expect to see anything else, thanks Pondus.

pol