What is dynabase.org? I keep hanging waiting for it.
That still doesn’t say what it is; Google isn’t being very helpful either. According to whois, it’s registered by one Robert Banks of TNT who apparently owns some 6,000+ other domains and has an email address of
[email protected]. It was created last week. The domain has no website associated with it. Its DNS servers appear to be in China (although this may be some kind of proxy service; Whois Privacy Protection Service) and were created last month. This is not looking good...
Thanks for reporting this guys. We have identified a successful attack against a vulnerability in some 3rd party unit testing files that were left accessible to the production server. The rogue code has been cleaned and the attack vector closed. We are analyzing the logs and file system to identify any other files that may have been compromised, but please let us know if you notice any other suspicious content when browsing the forums or the MODx web site.
-
- 390 Posts
Still seeing a call to dynabase.org (or attempted call) for every page load on the forum. More noticeable on the slower pages - new replies and show unread.
Writer > E-consultant > MODx developer || Salesforce || modx 2.x || PHP 5.2.13 || MySQL client 5.0.86
-
- 312 Posts
DEVELOPMENT ENV:- Ubuntu 12.04 | MODx Revolution 2.2.8 | LAMP 2i Apache 2.2.22 | Php 5.3.10 | Mysql 5.5.31 MySQL client version: 5.5.31
Rico
Genius is one percent inspiration and ninety-nine percent perspiration.
Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!
www.virtudraft.com
Security, security, security! |
Indonesian MODx Forum |
MODx Revo's cheatsheets |
MODx Evo's cheatsheets
Author of
Easy 2 Gallery 1.4.x,
PHPTidy,
spieFeed,
FileDownload R,
Upload To Users CMP,
Inherit Template TV,
LexRating,
ExerPlan,
Lingua,
virtuNewsletter,
Grid Class Key,
SmartTag,
prevNext
Maintainter/contributor of
Babel
Because it's hard to follow all topics on the forum, PING ME ON TWITTER
@_goldsky if you need my help.
Could be your browser still has the javascript cached?
I am going thru the forums trying to find where you are still seeing the link. If you have an example page / url you can send me, that would help a bunch
Thanks!
Kevin Marvin :: MODX, LLC
They all do. Every time I load a page, it goes for several URLs, including dynabase.org. I know most of them are things like google analytics and page trackers. The dynabase thing was new; in fact I noticed it first yesterday when it took a few seconds for my ISP’s badly configured DNS proxy to look it up. None of the page sources have it mentioned explicitly, so it’s buried in a javascript somewhere.