gmariani405 Posted May 12, 2021 ID:1456400 Share Posted May 12, 2021 (edited) URL: hxxp://www.rexswain.com/httpview.html I use this utility a lot to check suspicious URLs without visiting the site directly. Now it's coming up as a trojan, which seems odd since the site has been reliable for a long time. Maybe the site was compromised but figured you guys could check if it is a false positive. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/12/21 Protection Event Time: 9:21 AM Log File: e8fa620e-b324-11eb-8209-08626682a4b1.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1273 Update Package Version: 1.0.40342 License: Premium -System Information- OS: Windows 10 (Build 19042.985) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: rexswain.com IP Address: 205.134.250.164 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe (end) Edited May 12, 2021 by TeMerc Disabled live link Link to post Share on other sites More sharing options...
Staff TeMerc Posted May 12, 2021 Staff ID:1456408 Share Posted May 12, 2021 36 minutes ago, gmariani405 said: URL: hxxp://www.rexswain.com/httpview.html I use this utility a lot to check suspicious URLs without visiting the site directly. Now it's coming up as a trojan, which seems odd since the site has been reliable for a long time. Maybe the site was compromised but figured you guys could check if it is a false positive. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/12/21 Protection Event Time: 9:21 AM Log File: e8fa620e-b324-11eb-8209-08626682a4b1.json -Software Information- Version: 4.3.0.98 Components Version: 1.0.1273 Update Package Version: 1.0.40342 License: Premium -System Information- OS: Windows 10 (Build 19042.985) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: rexswain.com IP Address: 205.134.250.164 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe (end) Hi- We'll review the site again and reply once we've had our results, thanks for being patient Link to post Share on other sites More sharing options...
gmariani405 Posted August 31, 2021 Author ID:1477643 Share Posted August 31, 2021 It's been about 3 months, did you guys review the site again yet? It's still blocked. Link to post Share on other sites More sharing options...
thisisu Posted September 1, 2021 ID:1477781 Share Posted September 1, 2021 12 hours ago, gmariani405 said: It's been about 3 months, did you guys review the site again yet? It's still blocked. Hi. I'm sorry for the delay. It looks like it was flagged due to this file on the domain. But it's a test file and technically shouldn't have been flagged by us: https://www.virustotal.com/gui/url/74fa20fd1308aef1eca5efa53d189a0aee109829f20f7e445abbb194a925a663/detection I've unblocked the domain for you. You should notice the results within the next couple of hours after a database update. Thanks for being patient. Regards Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now