hxxps://unmined[.]net

[pikachugodemperor]

Hey Malware Bytes! MBAM premium user here!

I am getting a "website blocked due to trojan" warning when trying to access this domain.

Is the site actually infected? Is the software it distributes actually harmful? The site is throwing an SSL error currently, but the software it distributes itself is listed here under the (unofficial) list of Minecraft mapping software:

hxxps://minecraft[.]fandom[.]com/wiki/Programs_and_editors/Mapping

If you upload the actual .exe file for the Windows installation to VirusTotal the only vendor that flags it is Cyradar and I've never heard of them before.

I'd like to install the software but obviously not if it's harmful. If you folks could run a test to see if that domain/.exe file is actually malware then I would appreciate it very much, thank you!

[JPopovic]

Hello,

Would you be able to provide a log or a screenshot showing the block?

Edited July 12, 2021 by JPopovic

[Porthos]

@JPopovic

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 7/12/21
Protection Event Time: 2:53 AM
Log File: 3b6229a0-e2e6-11eb-967a-4439c43a4aa3.json

-Software Information-
Version: 4.4.3.125
Components Version: 1.0.1380
Update Package Version: 1.0.42991
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1083)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data-
Category: Trojan
Domain: unmined.net
IP Address: 95.140.42.194
Port: 80
Type: Outbound
File: C:\Program Files\Mozilla Firefox\firefox.exe

 

(end)

[JPopovic]

Hello,

This is IP block, we haven't noticed any recent threats, so the block will be removed.

Thank you!