Security Issue

Hello Sajith!

What kind of security issues are you getting? Did you receive any notification email or is it something you see from your dashboard or through VaultPress?

Could you post your site URL here, so I can have a look?
?
If you want it to remain private, you can also contact us via this contact form:
Contact Support

Thanks!

Even I can not visit
https://jetpack.com/support/

The site opens up for some some time. Laer the window automatically changes to red color with warning.(How to send screen shot to you?)

1. This is happening only on https://jetpack.com/support/
2, In my sites if the jet pack installed. Only after login

So I have installed the jet pack from all of my websites

[ Signature deleted ]

——————————————
Deceptive site ahead

Attackers on christmasmessage2018.xyz may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit cards).
————————————

Please Find the screen shot here

https://drive.google.com/file/d/1bo-aQ6hVgaozlkzwHMZss7QkGKyt57Zd/view?usp=sharing

[ Signature deleted ]

Thanks for the screenshots, @sajith90!

It looks like you may have a virus or a corrupted browser extension on your machine, that loads resources from a third party website, christmasmessage2018.xyz, whenever you try to load WordPress.com resources.

There isn’t much we can do for you as we cannot replicate this behaviour from our end, as it lives in your browser/machine.

You way want to run some tests on your browser (such as deactivate all the extensions and see how it goes) and/or check for potential virus within your machine.

The behaviour you’re seeing is not related with Jetpack, though.

Hope that helps! Let me know if that’s clear or if you have any doubts or questions about that.

• This reply was modified 7 years, 3 months ago by Stef (a11n).

No It is connected with jet pack. Some Script or 3rd party script you are using.

1. I have tested in two computer and in both same result.
2. It happened only if jetpack installed and activated.
3. the moment you uninstall the jet pack it disappears.
4. It happened only to the logged users. So unless you logged in it is not happening

[ Signature deleted ]

Just now also I visited this site
https://jetpack.com/support/

Same result. after 5 or 10 seconds the window is hijacked by christmasmessage2018.xyz

Please note that I am getting this issue only with this url now. I am browsing 100’s of url every day

[ Signature deleted ]

• This reply was modified 7 years, 3 months ago by sajith90.

Thanks for providing more info @sajith90. I can then confirm you that this is not related with Jetpack, as we don’t use the christmasmessage2018.xyz anywhere in our codebase. The domain was registered with Godaddy by someone from Indonesia, and is not used anywhere on WordPress.com, Jetpack, Calypso, or VIP sites.

If this issue is happening on two different computers, it could be then an issue with your router. Can you try checking that from a different network to see if it appears again?

If you’re having this issue only with this url, it’s possible that the router is set to highjack only that domain. By testing this with another network you should be able to see if this theory is correct as I think ??

• This reply was modified 7 years, 3 months ago by Stef (a11n).

Finally I found some of the problem. But the issue is with wordpress.com. Whenevever I am logged into word press I get the this issue.
Very simple way is to visit
https://kozhikodan.wordpress.com/wp-admin/

I think you should be able to visit the site after the login, since you may be the super admin

[ Signature deleted ]

Whenevever I am logged into word press I get the this issue.
Very simple way is to visit
https://kozhikodan.wordpress.com/wp-admin/

We don’t see the issue you mentioned when we visit that page, even in an incognito window. Whatever the issue is you’re experiencing, it appears to be restricted to your particular setup.

Were you able to test this on a different network, as @erania-pinnera previously suggested?

The issue is resolved now.

Remarks

You have to login to the dashboard to see this issue. just by visiting the dash board we can not see this.
I tested this in different computers from different locations. office and Home.

[ Signature deleted ]