whoa, that appears to be a compromised azure app on that ... • Aaron Parecki

32°F

BrianKrebs https://infosec.exchange/@briankrebs • Feb 16
Seeing as we're paving over federal websites left and right, maybe we can finally address the issue of open redirects on .gov websites? This isn't a new issue and it's not going away. But probably we shouldn't see dozens of pages of porn results all getting indexed by search engines by abusing redirects on the Centers for Disease Control (CDC) website, for example:
https://www.google.com/search?q=site:cdc.gov&client=ubuntu-sn&hs=V5N&sca_esv=4986d38ff6c52357&channel=fs&source=lnt&tbs=qdr:d&sa=X&ved=2ahUKEwjU0c2NnciLAxV6STABHey_JpoQpwV6BAgDEAg&biw=1658&bih=863&dpr=1

whoa, that appears to be a compromised azure app on that subdomain. If you fetch one of the URLs with curl, it straight up returns xxx HTML, it's not even redirecting first.

Portland, Oregon • 41°F

Sun, Feb 16, 2025 7:21am -08:00

1 like
- BrianKrebs
Have you written a response to this? Let me know the URL:

Posted in /replies using monocle.p3k.io