Jump to content
Daboomie

Did this site give my Samsung a RAT?

Recommended Posts

I got a call from a strange number today so naturally I searched for it on Google. Now this is where it gets stupid.

 

There was only one site in the Google results but I clicked it anyway.

The site in question: violette.ovh

 

Did this site rat me? Thanks for your help, I don't know much about this stuff.

Share this post


Link to post
Share on other sites

Hi @Daboomie,

Just looks like a website that is a phone directory in Dutch.  Unless you agreed to install something, very low chances you infected yourself with anything.

Nathan

Share this post


Link to post
Share on other sites

 

Uploading the site to "urlscan(.)io" shows there are a few scripts running on that site.

There is a script for cookie consent, another script which tries to fingerprint the users device, another script for serving ads and I also see a script for mobile push notifications.

A few scanners on VirusTotal have flagged the "invoke.js" script as being malicious but JavaScript has a high false positive rate on VT from what I've seen.

https://www.virustotal.com/gui/url/e573aeb48acc65910bbba3d5b8df7f1c0161400077b7b88ed4e00a36d9390cc5/detection

(OVH also has a pretty bad reputation.)

A good script blocker is a necessity these days.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.