Unblock Request - hxxp://www.robertpaul.com

[iMTRob]

URL: hxxp://www.robertpaul.com

IP: 23.253.73.122

The website is being blocked with a message about it being blocked due to a trojan. It is not attempting to download any files automatically, and they are an established real estate firm with no downloads presented on the main site. VirusTotal shows no problems with the site URL or IP.

Thank you,

Rob

[BjelakovicL]

Hi,

Domain's blocked due to hosting multiple malicious scripts:

http://www.robertpaul.com/blog/wp-includes/js/jquery/jquery.min.js
https://www.virustotal.com/gui/file/099ebf47f5ffb18fe9a1985a45d9b6e5137c978cebd2151747880e9c1ae08c32

http://www.robertpaul.com/blog/wp-includes/js/wp-emoji-release.min.js
https://www.virustotal.com/gui/file/c6951ad06035eabc84df44d50016d5c9463fa5cf5e13cb596bd8ff69fe5c2eb0

http://www.robertpaul.com/blog/wp-content/plugins/page-links-to/dist/new-tab.js
https://www.virustotal.com/gui/file/73f49435cb15b7f9ac266629dce79999ac2d1df6a7bdea1a98c9a0eed89f4585

 

[iMTRob]

Thanks for the update.

I downloaded the version from their site and the original libraries and ran a diff, and confirmed there is unwanted additional code in those files. I will reach out to the web developer to remove those files or replace them with the original versions, as well as update WP and plugins.

Thank you,

Rob