Author Topic: False-Positive on primewire.ag  (Read 2848 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
False-Positive on primewire.ag
« on: October 06, 2015, 07:43:36 PM »
Hi, I found a problem this morning when I tried to use www.primewire.ag to watch a movie. I could open the site, view the different movies, but when I tried to go to the movies webpage I got a popup and the page was blocked. The popup was about a script on the different pages, I had tried a dozen different movie pages. This site had no issues last night or early this morning, only now as of an hour/45 minutes ago. To view the movie web pages I had to turn off the web shield, even setting the main site as an exception was no good.

Object is http;www.primewire.ag |{gzip}

Any suggestions or ideas?

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: False-Positive on primewire.ag
« Reply #1 on: October 06, 2015, 10:30:50 PM »
Hello

now is blocking avast like HTML:Script-inf

http://labs.sucuri.net/db/malware/malware-entry-mwjs160?18

Sucuri SiteCheck infected Malware attached

I also found this last line of page

Code: [Select]
  sc​ript  data-cfasync="false" type="text/javascript" src=hxxp://www.tradeadexchange.com/a/display.php?r=420105&allowed_countries=FR,UK,IT,ES,PT,DE,NL,IE,BE,LU,NO,SE,DK,FI,US,CA"> < / sc​ript >

Blacklist

Bad reputation

https://sitecheck.sucuri.net/results/www.tradeadexchange.com
http://www.urlvoid.com/scan/tradeadexchange.com/

REDACTED

  • Guest
Re: False-Positive on primewire.ag
« Reply #2 on: October 07, 2015, 12:23:42 AM »
Thanks for the info, I will remove this site from my bookmarks.

REDACTED

  • Guest
Re: False-Positive on primewire.ag
« Reply #3 on: October 07, 2015, 06:37:24 AM »
Retried that website, and I received no popups at all. Either they cleaned their website or it was a fluke.