Author Topic: Hide.me (nl.hideproxy.me) proxy marked as URL:MAL  (Read 17077 times)

0 Members and 1 Guest are viewing this topic.

Offline TheOwner

  • Poster
  • *
  • Posts: 406
Hide.me (nl.hideproxy.me) proxy marked as URL:MAL
« on: May 30, 2018, 10:47:11 PM »
Hi,
i dont believe this site is malware, i use it a lot.
nl.hideproxy.me - URL mal
False positive or there is some reason to block it? If I select German or USA here, no detection, only if I select Netherlands.
Thank you.
« Last Edit: May 30, 2018, 10:54:24 PM by TheOwner »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33902
  • malware fighter
Re: Hide.me (nl.hideproxy.me) proxy marked as URL:MAL
« Reply #1 on: May 31, 2018, 12:17:33 AM »
Beste TheOwner,

Your point of view is supported by just one party to flag:
Date scanned   Detections   URL
2018-05-30   1/68   -https://nl.hideproxy.me/go.php?u=JUt1Vthr63xwllPRYD/V06WOeoVc24jBfh01pIquZfGnxlv0GPHE2peefrPBpA==&b=5
2018-05-24   1/68   -https://nl.hideproxy.me/index.php
CLEAN MX flags for PHISHING.

Site from Leaseweb in the Netherlands seems down at the moment.  (Leaseweb had wat probleempjes in het verleden ;) ).
Last IP address scanned by Hetzner Finland, producing following results:
PORT   STATE SERVICE VERSION
80/tcp open  http    nginx
|_http-server-header: nginx
|_http-title: Did not follow redirect to hxtps://nl.hideproxy.me/
 -> https://toolbar.netcraft.com/site_report?url=https%3A%2F%2Fnl.hideproxy.me%2F

Website seems AVG compliant
(meaning - de website is privacyvriendelijk ingesteld volgens degeldende AVG eisen).

Just wait for an avast team member to give a final verdict on the website,
we are just volunteers with relevant knowledge, but cannot come to unblock.

Groetjes uit de buurt van Rotterdam,

polonus (volunteer website security analyst and website error-hunter)

Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bauerj

  • Avast team
  • Jr. Member
  • *
  • Posts: 54
Re: Hide.me (nl.hideproxy.me) proxy marked as URL:MAL
« Reply #2 on: May 31, 2018, 12:28:27 PM »
Hi,
there was a malicious executable downloaded from that site, but there is no reason to block it all. I removed it from our blacklist. It should be OK in the next streaming update. Thank You for pointing out.
Jirka