search

chill117 / proxy-verifier

NodeJS module to check proxies: if functional, anonymity level, tunneling, supported protocols.
MIT License
76 stars 16 forks source link

default ip leads to malware/bitcoin mining software #33

Closed static660 closed 3 years ago

static660 commented 3 years ago

We blocked this dangerous page for your protection: http://bitproxies.eu/api/v2/check Accessed by: node.exe Threat name: Application.CoinMiner.AY

Explain this to me.

chill117 commented 3 years ago

Your connection was probably MITM'd. The "http://" protocol means the HTTP traffic is transmitted in plaintext. The latest version of this module uses https://ifconfig.me as the default proxy check service. So this attack vector should be mitigated.