LDL2021 Posted April 3, 2021 ID:1448886 Share Posted April 3, 2021 My wife wanted to increase her typing speed so she bought mavis beacon typing. http://esd.encore.com/download/138396/4evr33cn2k/MBTTDeluxe20.exe Used this link to down load and the warning came up saying it was blocked because of outbound possible phising. So my question is this a real threat or is it a false positive. Link to post Share on other sites More sharing options...
Porthos Posted April 3, 2021 ID:1448898 Share Posted April 3, 2021 As we wait for staff to validate, I actually bypassed the block and scanned the downloaded file. It "seems" clean https://www.virustotal.com/gui/file/49e36c9198aa4c94ec108b3eae6db254fd2a0b819499d6cb7f21e2a13f3fea52/details Link to post Share on other sites More sharing options...
Staff JPopovic Posted April 4, 2021 Staff ID:1448960 Share Posted April 4, 2021 (edited) Hello, The domain is: ewr1.vultrobjects.com It has potentially malicious file that could be downloaded: https://ewr1.vultrobjects.com/justdo/mimo Also,phishing page active: https://celebrant-otherism.ewr1.vultrobjects.com/sibilating/login.html?cdo=yOyeCcYriZCLDnOODdZguJ&pabrb=CaIt9pc5tY6a55zBuYyElQhYykAZdD&fwzley=WNldF1348EnbEI9Uef8yUiX&orcgzcizh=S6rcsU1l9BaMsC9WOpt9ERSHs9ZVfO&wrthwd=QMudXJP38xLfR1nBFLphmKA&nrpfdhpps=mWRmZ6xkMW8khSjsF&apdb=E8Vw7BYRsAOvq4V4Ob1usGaSd7&zvhuhlbz=kb7XlHVjP1DQlzI&skhd=YL2Fmv8wrCVSGNeNFKd2DNktEBPxsw&oeikaje=XesC7n7e2nfWYm12m1dX2zfnts Block will need to stay for now. The specific file that you tried to download looks clean. Thank you. Edited April 4, 2021 by JPopovic Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now