Jump to content

209.182.202.40 - factoringglossary.org


MATFL
Go to solution Solved by gonzo,

Recommended Posts

  • Staff
8 minutes ago, MATFL said:

Hello -

The site https://factoringglossary.org is being flagged by browser guard as having malware.  The following scan shows it is clean: https://sitecheck.sucuri.net/results/https/factoringglossary.org

Kind regards,

/MT

 

Screenshot.jpg

Hello-This block rule was already disabled in our DB, I'll move this over to BG forums

Link to post
  • Solution

The site has been whitelisted. Please allow 15-30 minutes for changes to take effect. Sorry for the inconvenience.

As far as your question goes, these are the VirusTotal results which were likely a factor:

https://www.virustotal.com/gui/url/cbe4ca6b8ecbeadd647095d7fd1b9d295abc954bbf61c24ebc09c74afd7029e7/detection

 

 

Link to post

Thanks for the quick reply. Do you know if those issues are currently present wat the site? We had an issue months ago but did a thorough cleanup and the site should be clean, as far as we can tell.

Unfortunately, I looked at the report you dent and was unable to find detailed information about what was listed.

TIA, /MT

Link to post

I always make sure that I am looking at current test results because they do change over time, whether it be for good or for bad.  See if the file listed below rings a bell.  It shows up as a phishing detection.  There is one other one, though I am not adept enough at VirusTotal to tell you anything conclusive (I don't want to give you bad or misleading info).

https://factoringglossary.org/wp-content/plugins/rbemeuc/amcustcare/fooddeys/NetCustcare/MARKET/>

Link to post

Thanks for this information. I just did a system wide name search for the names in directories in your example and the program (filezilla) did not return any matches.  I have also done a manual search (just to be sure) and found nothing . I have attached an image of the plugins directory so you can see it. This is odd.

Did you do the threat scan with an internal system to your company or did you use a service I can access? That may help me find the issue.

I suspect that the 3 listed services in the link you sent originally may be using outdated scans. This is why all the other ones list the site as clean. What do you think?

(in https://www.virustotal.com/gui/url/cbe4ca6b8ecbeadd647095d7fd1b9d295abc954bbf61c24ebc09c74afd7029e7/detection) . 

Best,

/MT

 

 

malwarebytes.jpg

Link to post

That came from VirusTotal.com, but was using a paid subscription. That allowed me to look at relations. It showed a lot of older detections, but I looked only at ones that were recent.  In this case, the detection was from today.  That site can get muddy when it comes to content based there, other sites on the same IP address, links to other sites that have detections, and other sites (with detections) that link to your site.  That is why I only mentioned the one.  You need a Masters Degree in VirusTotal to do it right.

Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.