Author Topic: Why this potential malicious website not flagged at VT?  (Read 1546 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Why this potential malicious website not flagged at VT?
« on: March 29, 2021, 07:19:04 PM »
See: https://urlscan.io/result/4d3ae1bf-be0d-4c95-b156-502aaa08e965/
Re: https://www.virustotal.com/gui/url/c0f6dfedaf00d9b0c0612a8cbe962c1e62d7194a06e88ca6c9c56524b86f6100/details
and https://www.virustotal.com/gui/ip-address/199.188.200.157/relations
Neither flagged here: https://sitecheck.sucuri.net/results/https/www.halibankingsecurity.com/Login.php
DOM-XSS issues: Results from scanning URL: htxps://www.halibankingsecurity.com/files/js/jquery.js
Number of sources found: 94
Number of sinks found: 81

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)
« Last Edit: March 29, 2021, 07:26:58 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Why this potential malicious website not flagged at VT?
« Reply #1 on: March 29, 2021, 08:40:01 PM »
Quote
Why this potential malicious website not flagged at VT?
VT link you posted above say it is   ???


« Last Edit: March 29, 2021, 08:42:36 PM by Pondus »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why this potential malicious website not flagged at VT?
« Reply #2 on: March 30, 2021, 11:45:32 AM »
Hi Pondus,

This was since I posted, the results of 17 to flag it as malicious is 6 hours old.

Good as a result,

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: Why this potential malicious website not flagged at VT?
« Reply #3 on: March 30, 2021, 12:47:37 PM »
Quote
This was since I posted,...................
It was also detected when you posted (6 detections) you would have seen if you had used the refresh button .... always check the scan date   ;)






Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Why this potential malicious website not flagged at VT?
« Reply #4 on: March 30, 2021, 01:13:27 PM »
.... always check the scan date   ;)
+1 8)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: Why this potential malicious website not flagged at VT?
« Reply #5 on: March 30, 2021, 04:13:34 PM »
Strange, as where I found it forms part of VT. Whatever, the threat is now being flagged multiple times.

pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!