Avast WEBforum

Other => Viruses and worms => Topic started by: viking_minn on June 27, 2021, 11:04:54 PM

Title: URL:Blacklist on visiting wiki site
Post by: viking_minn on June 27, 2021, 11:04:54 PM
Hey, a little while ago I was looking something up on the Destiny 2 wiki when Avast blocked the website. It said that it had aborted the connection with aloha-news.net because it was infected with URL:Blacklist. I wasn't visiting this website so I'm assuming I was redirected there for some reason. Afterwards, in the heat of the moment, I decided to press the back button and go back to the website and it brought me to the destiny wiki. Could me hitting the back button have brought me back to the suspicious website? I cleared all of my cookies and ran a full virus scan afterwards, which said that everything was fine.

The website does appear to be malicious: https://www.virustotal.com/gui/url/7182b03efde39bf8355a8c9e3ab40e9918a799863b51ead503e212c6b56fcbae/detectionhttps://www.virustotal.com/gui/url/7182b03efde39bf8355a8c9e3ab40e9918a799863b51ead503e212c6b56fcbae/detection
Title: Re: URL:Blacklist on visiting wiki site
Post by: DavidR on June 28, 2021, 01:11:56 AM
First your URL is broken, appears to be copied twice with no break.
https://www.virustotal.com/gui/url/7182b03efde39bf8355a8c9e3ab40e9918a799863b51ead503e212c6b56fcbae/detection

Whilst this lists 6 hits, one thing I would say that virustotal doesn't actually scan the site but checks listings.

Site Black Listed here and Critical Security Risk - https://sitecheck.sucuri.net/results/aloha-news.net - and Unable to scan your site. 404 Not Found (which seems strange).
Another check unable to scan the site - https://awesometechstack.com/analysis/website/aloha-news.net/
Some security points here - https://webhint.io/scanner/201d2c69-ac97-4f5c-8fe3-a1e9f2b44492

So if you weren't intentionally visiting the site, there is some external third party link to that site in the site/page you were visiting and Avast prevented it.  Given the above I would say it was a correct action since you weren't trying to connect to it.
Title: Re: URL:Blacklist on visiting wiki site
Post by: viking_minn on June 28, 2021, 03:20:16 AM
Could anything bad have happened because I accidentally pressed the back button and went back after Avast blocked it?
Title: Re: URL:Blacklist on visiting wiki site
Post by: polonus on June 28, 2021, 06:16:34 AM
Hard to say, but you'd better not run any risks to venture out there.

Symptoms: Seeing advertisements not originating from the sites you are browsing. Intrusive pop-up ads. Decreased Internet browsing speed. Distribution Methods: Deceptive pop-up ads, potentially unwanted applications (adware) Damage
So adware BHO and Amazon AWS abuse.

polonus
Title: Re: URL:Blacklist on visiting wiki site
Post by: viking_minn on June 28, 2021, 04:41:43 PM
I don't think I have seen any of those so far, so as long as those don't seem to be happening, I should be fine, right? Especially since I already ran a full scan on my computer.