Author Topic: URL: Phising  (Read 1556 times)

0 Members and 1 Guest are viewing this topic.

Offline congotobacco

  • Newbie
  • *
  • Posts: 1
URL: Phising
« on: March 24, 2021, 01:18:04 PM »
Sorry if i am breaking community rules, but no response on false positive flag, and we cosider warning and site blocking is wrong:
https://www.virustotal.com/gui/url/787d3ab6ba528f5a9bd5b9c1c98d7845bd8464220ecffdd0962173bc7d7794d5/detection
https://urlscan.io/result/188c9a0a-2b38-49a1-9622-b7d9d0e753b5/

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: URL: Phising
« Reply #1 on: March 24, 2021, 10:42:14 PM »
It is not avast, there is a site issue. Website cannot be scanned, see: https://sitecheck.sucuri.net/results/www.balkandownload.org

What is this script doing?
Quote
<script type="text/javascript"><!--
var host = 'wXw.' + 'balka' + 'ndownload.' + 'org';

if (window.location.hostname !== host){
window.top.location.href = 'hxtp://' + host + '/';
}
//--></script>

Outgoing link = https://www.cloudflare.com/5xx-error-landing

So you are barking at the wrong tree and should address this issue at CloudFlare's
Quote
You were visiting a Cloudflare customer’s website, and something went wrong. Don’t worry, it’s not your fault. If the problem isn’t resolved in the next few minutes, it’s most likely an issue with the web server you were trying to reach.

polonus (volunteer 3rd party cold recon website security analyst and website eror-hunter)
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33897
  • malware fighter
Re: URL: Phising
« Reply #2 on: March 25, 2021, 12:12:37 PM »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!