Author Topic: Convshop dot com malware detected?  (Read 1097 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Convshop dot com malware detected?
« on: August 15, 2019, 09:49:39 PM »
See: https://urlhaus.abuse.ch/url/224937/
Re: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=W258I21bbi5eXW52c2hdcC5eXW0%3D~enc
Quote
URLs that redirect found in: -http://inadmin.convshop.com/

1: -http://wpa.qq.com/pa?p=2:8983659:41 -> -https://wpa.qq.com/pa?p=2:8983659:41

Note: The URLs listed above that were found in the page you are checking are redirecting to other URLs. In many cases the redirects are legitmate so it can be tricky to determine whether or not the redirects are causing a problem. Take a look at the URL that is being redirected to -- Does it look suspicious?? Is the domain being redirected to shown on the malware warning (if you are getting one)?

9 detect: https://www.virustotal.com/gui/url/e6fc706b6de08ed22bc97cab94dd438493e8f745784fd1caba1b5d806c670105/detection

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline VladK

  • Avast team
  • Newbie
  • *
  • Posts: 3
Re: Convshop dot com malware detected?
« Reply #1 on: August 16, 2019, 12:38:52 PM »
Blocked now, thank you.