Author Topic: Adblock URL:Techscam  (Read 3216 times)

0 Members and 1 Guest are viewing this topic.

Offline xove

  • Newbie
  • *
  • Posts: 1
Adblock URL:Techscam
« on: December 04, 2021, 09:55:08 PM »
Hi,

I got a "Threat Blocked" message from Avast related to ping.getadblock.com/stats because it was infected with URL:TechScam.

Know of any problems with adblock and Avast, or is it a false positive.

Thanks

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33899
  • malware fighter
Re: Adblock URL:Techscam
« Reply #1 on: December 05, 2021, 11:58:01 AM »
The alert is probably because of PHISHing going on on that particular IP -

https://sitereport.netcraft.com/?url=https%3A%2F%2Fping.getadblock.com%2Fstats%2F
&
https://www.virustotal.com/gui/ip-address/104.131.33.197

Nothing here: https://themarkup.org/blacklight?url=ping.getadblock.com
But see sandbox request (a 301) here: https://quttera.com/detailed_report/ping.getadblock.com

Because this a not be used loopback interface: https://intelx.io/?s=ping.getadblock.com
This is being ad-blocked in the end, going to: htxp://free-counter.co.uk/

So we have to wait for a final verdict from avast team as to what this detection stands for or whether it is a FP.

polonus
« Last Edit: December 05, 2021, 12:11:12 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!