« previous next »
Pages: [1]   Go Down

Author Topic: malicious link or not?  (Read 4150 times)

0 Members and 1 Guest are viewing this topic.

Offline Duch

  • Jr. Member
  • **
  • Posts: 60
malicious link or not?
« on: February 12, 2016, 04:12:19 PM »
Hi all

Is this link malicious or not please. Avast ver 11.1.2253 dont show any warnings

hXtp://logs-confirms26.at.ua/account/recovery/index.html

thx for info
« Last Edit: February 12, 2016, 04:50:50 PM by Duch »
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: malicious link or not?
« Reply #1 on: February 12, 2016, 04:17:58 PM »
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Duch

  • Jr. Member
  • **
  • Posts: 60
Re: malicious link or not?
« Reply #2 on: February 12, 2016, 04:20:52 PM »
thx Asyn but Avast don`t  block this link  :-\
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: malicious link or not?
« Reply #3 on: February 12, 2016, 04:23:20 PM »
Quote from: Duch on February 12, 2016, 04:20:52 PM
thx Asyn but Avast don`t  block this link  :-\
You can report it here: https://support.avast.com/support/tickets/new?form=3
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48564
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: malicious link or not?
« Reply #4 on: February 12, 2016, 04:27:47 PM »
Quote from: Asyn on February 12, 2016, 04:23:20 PM
Quote from: Duch on February 12, 2016, 04:20:52 PM
thx Asyn but Avast don`t  block this link  :-\
You can report it here: https://support.avast.com/support/tickets/new?form=3

I used http://scanurl.net/ to do my check.   Submit it if it makes you feel better. :)
Logged
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXde -  Repair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: malicious link or not?
« Reply #5 on: February 12, 2016, 04:37:28 PM »
IP there certainly has issues, there are various IDS alerts, so break that link hxtp://etc./
Website has outdated CMS: Web application details:
Application: vBulletin 3.8.2 - http://www.vbulletin.com/
vBulletin version outdated: Upgrade required.

polonus
« Last Edit: February 12, 2016, 06:43:15 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Duch

  • Jr. Member
  • **
  • Posts: 60
Re: malicious link or not?
« Reply #6 on: February 12, 2016, 04:40:04 PM »
thx guys

but when i tried to sign up to support (throught fb account) i see only this


and link (posted by me) looks like a password stealer
Logged

Offline HonzaZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1038
Re: malicious link or not?
« Reply #7 on: February 12, 2016, 04:54:23 PM »
Hi, it will be blocked in the next update ;)
Logged

Offline Duch

  • Jr. Member
  • **
  • Posts: 60
Re: malicious link or not?
« Reply #8 on: February 12, 2016, 04:56:57 PM »
Thanks for the quick reply HonzaZ, that's what i wanted to read  :)
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: malicious link or not?
« Reply #9 on: February 12, 2016, 05:08:04 PM »
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: malicious link or not?
« Reply #10 on: February 12, 2016, 07:05:19 PM »
We should also consider the link and script flagged: http://www.freewebs.com/p.js
flagged here once: https://www.virustotal.com/en/url/b06688412253141addbc554e890c5371b44672dc9722fc6f31f808c9873c8cba/analysis/
but found harmless again on the file analysis: https://www.virustotal.com/en/file/8de255a801ca35c13ceaa3915570e5347e759e6016a41400df1a4e02f50725b3/analysis/1386795656/
So what it is gonna be. Re: https://urlquery.net/report.php?id=1455299770587
Warning in code: ""WARNING!  This page is attempting to forward you to another site.": http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.freewebs.com%2Fp.js

landing here:  -http://dunsregistered.dnb.com
Number of sources found: 2
Number of sinks found: 2
-> http://toolbar.netcraft.com/site_report?url=http://dunsregistered.dnb.com

polonus (volunteer website security analyst and website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: malicious link or not?
« Reply #11 on: February 12, 2016, 09:01:30 PM »
Confirmed by F-Secure lab

===============================================================
The file you sent was found to be malicious.

We will be detecting the sample you submitted in the next database update. The URL is rated as phishing.
================================================================

Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: malicious link or not?
« Reply #12 on: February 12, 2016, 09:13:34 PM »
Good it has been added to detection is is being blocked.

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »