1

Visiting my Drupal 7 site just now with IE 11, I get this message:

Windows Defender blocked content on this website lx7pyv.dofeqilr.com

Hosted by: mysite.com Recommended icon Go to my home page instead Windows Defender blocked this site because it might contain threats to your PC or your privacy.

What's up? I get no hits when I search for "lx7pyv.dofeqilr.com". I also have not issues in Chrome or FF. Is my site infected?

4
  • This isn't exactly Drupal related, but it sounds like there may be some malicious code on your site. I recommend posting to a websecurity related stackoverflow for the best answer. Also it's impossible to answer you definitively unless you share the URL of your site.
    – jdu
    Jul 29, 2014 at 21:16
  • Thanks for your response. I had no idea to start. This was useful.
    – Matt.Rad
    Jul 30, 2014 at 1:14
  • lx7pyv is a sub-domain and means nothing (this is common for spam) - do a whois search for the rest, it's out of the US in Hawaii (Registrant Name: Hoffmier, Jason). If your site allows users to post content, it could be a bot, or someone posted a link and Defender sees the link and determines it's possibly malicious...
    – Geoff
    Jul 30, 2014 at 2:18
  • I have done some digging, and it looks like it is the result of the Mailpoet bug on a Wordpress site I have on the same server.
    – Matt.Rad
    Jul 30, 2014 at 2:47

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.