Avast WEBforum

Other => Viruses and worms => Topic started by: diger_diga on November 24, 2019, 06:37:36 PM

Title: Is this website safe?
Post by: diger_diga on November 24, 2019, 06:37:36 PM
Hello,
I posted this in german somewhere else on this forum, but didn't get any reply. So when I type in "langszeitspeicher batterie" using google, the 2. Link "Energiewende im Wärmebereich - Conservation Biz" seems to be malicious. AVAST has recognized this, but warned it could be possible that other viruses may still be unrecognized. Is that all there is?
According to www.virustotal.com not all scanners find the pishing/virus/malware, but it is also unclear what exactly is found. Why is this link forwarded to pb7sh.5155352.com?
Thanks
Title: Re: Is this website safe?
Post by: polonus on November 24, 2019, 10:43:03 PM
That link is forwarded there, because this address is for vulnerability test services, named DOSarrest (a scam?)
from registrar at uniregistrar.com at Po Box 30485, Seven Mile Beach, KY1-1202, Cayman Islands,
one of the biggest frauds in the Domain world. Many scam & phishing sites operate from there.

See: https://www.shodan.io/host/199.184.144.27
See: https://toolbar.netcraft.com/site_report?url=pb7sh.5155352.com

And not exactly above board -> https://www.virustotal.com/gui/ip-address/199.184.144.27/relations
PHISHING going on there: https://www.virustotal.com/gui/url/e820caee9b0ce49265d885c2e4e9bc8850bfb1120b3c571036528958d92f7c4b/detection

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
Title: Re: Is this website safe?
Post by: Asyn on November 25, 2019, 06:43:58 AM
Hello, I posted this in german somewhere else on this forum, but didn't get any reply.
Wrong, TerraX did reply in your thread: https://forum.avast.com/index.php?topic=230634.0