Title: Security Issue Last modified: January 16, 2018 --- # Security Issue * Resolved [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/) * Whenever I install Jetpack I am getting lot of security issues. * Deceptive site ahead * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ Viewing 10 replies - 1 through 10 (of 10 total) * Plugin Contributor [Stef (a11n)](https://wordpress.org/support/users/erania-pinnera/) * (@erania-pinnera) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9759880) * Hello Sajith! * What kind of security issues are you getting? Did you receive any notification email or is it something you see from your dashboard or through VaultPress? * Could you post your site URL here, so I can have a look?   If you want it to remain private, you can also contact us via this contact form: [Contact Support](https://href.li/?https://jetpack.com/contact-support/?rel=support) * Thanks! * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9761153) * Even I can not visit [https://jetpack.com/support/](https://jetpack.com/support/) * The site opens up for some some time. Laer the window automatically changes to red color with warning.(How to send screen shot to you?) * 1. This is happening only on [https://jetpack.com/support/](https://jetpack.com/support/) 2, In my sites if the jet pack installed. Only after login * So I have installed the jet pack from all of my websites * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ * —————————————— Deceptive site ahead * Attackers on christmasmessage2018.xyz may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone numbers, or credit cards). ———————————— * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9761168) * Please Find the screen shot here * [https://drive.google.com/file/d/1bo-aQ6hVgaozlkzwHMZss7QkGKyt57Zd/view?usp=sharing](https://drive.google.com/file/d/1bo-aQ6hVgaozlkzwHMZss7QkGKyt57Zd/view?usp=sharing) * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ * Plugin Contributor [Stef (a11n)](https://wordpress.org/support/users/erania-pinnera/) * (@erania-pinnera) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9763544) * Thanks for the screenshots, [@sajith90](https://wordpress.org/support/users/sajith90/)! * It looks like you may have a virus or a corrupted browser extension on your machine, that loads resources from a third party website, christmasmessage2018.xyz, whenever you try to load WordPress.com resources. * There isn’t much we can do for you as we cannot replicate this behaviour from our end, as it lives in your browser/machine. * You way want to run some tests on your browser (such as deactivate all the extensions and see how it goes) and/or check for potential virus within your machine. * The behaviour you’re seeing is not related with Jetpack, though. * Hope that helps! Let me know if that’s clear or if you have any doubts or questions about that. - This reply was modified 8 years, 6 months ago by [Stef (a11n)](https://wordpress.org/support/users/erania-pinnera/). * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9764335) * No It is connected with jet pack. Some Script or 3rd party script you are using. * 1. I have tested in two computer and in both same result. 2. It happened only if jetpack installed and activated. 3. the moment you uninstall the jet pack it disappears. 4. It happened only to the logged users. So unless you logged in it is not happening * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9764432) * Just now also I visited this site [https://jetpack.com/support/](https://jetpack.com/support/) * Same result. after 5 or 10 seconds the window is hijacked by christmasmessage2018. xyz * Please note that I am getting this issue only with this url now. I am browsing 100’s of url every day * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ - This reply was modified 8 years, 6 months ago by [sajith90](https://wordpress.org/support/users/sajith90/). * Plugin Contributor [Stef (a11n)](https://wordpress.org/support/users/erania-pinnera/) * (@erania-pinnera) * [8 years, 6 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9770725) * Thanks for providing more info [@sajith90](https://wordpress.org/support/users/sajith90/). I can then confirm you that this is not related with Jetpack, as we don’t use the `christmasmessage2018.xyz` anywhere in our codebase. The domain was registered with Godaddy by someone from Indonesia, and is not used anywhere on WordPress. com, Jetpack, Calypso, or VIP sites. * If this issue is happening on two different computers, it could be then an issue with your router. Can you try checking that from a different network to see if it appears again? * If you’re having this issue only with this url, it’s possible that the router is set to highjack only that domain. By testing this with another network you should be able to see if this theory is correct as I think 🙂 - This reply was modified 8 years, 6 months ago by [Stef (a11n)](https://wordpress.org/support/users/erania-pinnera/). * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 5 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9821463) * Finally I found some of the problem. But the issue is with wordpress.com. Whenevever I am logged into word press I get the this issue. Very simple way is to visit [https://kozhikodan.wordpress.com/wp-admin/](https://kozhikodan.wordpress.com/wp-admin/) * I think you should be able to visit the site after the login, since you may be the super admin * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ * [pmciano](https://wordpress.org/support/users/pmciano/) * (@pmciano) * [8 years, 5 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9824088) * > Whenevever I am logged into word press I get the this issue. > Very simple way > is to visit [https://kozhikodan.wordpress.com/wp-admin/](https://kozhikodan.wordpress.com/wp-admin/) * We don’t see the issue you mentioned when we visit that page, even in an incognito window. Whatever the issue is you’re experiencing, it appears to be restricted to your particular setup. * Were you able to test this on a different network, as [@erania-pinnera](https://wordpress.org/support/users/erania-pinnera/) previously suggested? * Thread Starter [sajith90](https://wordpress.org/support/users/sajith90/) * (@sajith90) * [8 years, 5 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9831622) * The issue is resolved now. * Remarks * You have to login to the dashboard to see this issue. just by visiting the dash board we can not see this. I tested this in different computers from different locations. office and Home. * _[ [Signature deleted](https://wordpress.org/support/guidelines/#avoid-signatures)]_ Viewing 10 replies - 1 through 10 (of 10 total) The topic ‘Security Issue’ is closed to new replies. * ![](https://ps.w.org/jetpack/assets/icon.svg?rev=2819237) * [Jetpack - WP Security, Backup, Speed, & Growth](https://wordpress.org/plugins/jetpack/) * [Frequently Asked Questions](https://wordpress.org/plugins/jetpack/#faq) * [Support Threads](https://wordpress.org/support/plugin/jetpack/) * [Active Topics](https://wordpress.org/support/plugin/jetpack/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/jetpack/unresolved/) * [Reviews](https://wordpress.org/support/plugin/jetpack/reviews/) ## Tags * [security issue](https://wordpress.org/support/topic-tag/security-issue/) * 10 replies * 3 participants * Last reply from: [sajith90](https://wordpress.org/support/users/sajith90/) * Last activity: [8 years, 5 months ago](https://wordpress.org/support/topic/security-issue-82/#post-9831622) * Status: resolved