Avast WEBforum

Other => Viruses and worms => Topic started by: Cien on January 12, 2019, 02:29:57 PM

Title: Weird redirect after clicking a link
Post by: Cien on January 12, 2019, 02:29:57 PM

I clicked a link to stopdropgaming[dot]com, but the link redirected me to iyfnzgb[dot]com and it displayed a big broken page icon (sad face and folded corner).

I looked up what the website was and have found some people saying that it is generally malicious. I did a malwarebytes threat scan and a quick scan with avast and it didnt get any detections. I have deleted my cache and cookies, but in my panic i also deleted my google download history. I dont have any weird new extensions in my browser.

I would like to know whether I am safe and if there is anything else i could or should do.

https://forum.avast.com/index.php?topic=216034.0 i found this topic of someone who had a similar situation
I hope im posting this in the right place, but sorry i should have posted this somewhere else.

Title: Re: Weird redirect after clicking a link
Post by: Pondus on January 12, 2019, 02:40:53 PM

Not blacklisted here
https://www.virustotal.com/#/url/8ea7068a1e5660ed86218823f9b4a459156946e5513262c78933475499d96cc9/detection

Not infected  https://sitecheck.sucuri.net/results/stopdropgaming.com

However my F-secure block it



redirect URL is blacklisted
https://www.virustotal.com/#/url/ca060e0539d6866b634598b82bd0d64a82f8826779ec610a38e7939344ce398f/detection

Not infected but blacklisted   https://sitecheck.sucuri.net/results/iyfnzgb.com

Title: Re: Weird redirect after clicking a link
Post by: Pondus on January 12, 2019, 02:45:44 PM

Quote

I would like to know whether I am safe and if there is anything else i could or should do.

You may run Malwarebytes Adwcleaner to remove browser crap (not same as antimalware) >>  https://www.malwarebytes.com/adwcleaner/



If you want a check, attach the two diagnostic logs from step #2 here (FRST)  >>  https://forum.avast.com/index.php?topic=194892.0

Title: Re: Weird redirect after clicking a link
Post by: Cien on January 12, 2019, 03:35:09 PM

Here it is

Title: Re: Weird redirect after clicking a link
Post by: polonus on January 12, 2019, 03:53:21 PM

Hi Cien and Pondus,

The site is now a parking site and according to these results open to abuse:
https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=c3RdcCN9XXBnfG1bbmcuXl1t~enc

Parklogic iFrame detected. -http://plp.parklogic.com lowest in rank and poorly socialized bad site.
See DNS info -> https://www.accessify.com/s/stopdropgaming.com

polonus (volunteer website security analyst and website error-hunter)

Title: Re: Weird redirect after clicking a link
Post by: Sass Drake on January 12, 2019, 08:02:45 PM

Your PC is clean. :)