Jump to content

Warned of Riskware, 2 days later no warning, website is the same?


Stargehzer

Recommended Posts

Confusing title, sorry.

A couple of days ago I went to a website (https://cluballen.com/customer/account/login) & Malwarebytes popped up a Riskware warning.

Domain: www.cajunblast.com

IP: 66.33.211.169

Port: 443

Type: Outbound

File: C:\users\...\Chrome.exe

I contacted the owner of the (Cluballen.com) website who said they'd have their guy look into it.

Now I go to the same, (https://cluballen.com/customer/account/login) site & get no warning from Malwarebytes, but if I compare the information I get when I right click the page & 'view page source', it's the same as it was when I got the popup warning. 

The line '<script type="text/javascript" src="https://www.cajunblast.com/analytics.js"></script>' still exists in the page source.

If I try to load the page Malwarebytes warned about (www.cajunblast.com) I still get a warning. 

I've attached the text from when I 'view page source' for the 2 days, the only changes I see are the hidden values (which change every time I log in, I assume related to logging in)

Could someone please advise me if I should be concerned about this riskware?

Thank You for any help.

view page source https cluballen com customer account login.txt view page source https cluballen com customer account login 2.txt

Link to post
Share on other sites

On 1/12/2022 at 2:27 PM, Zynthesist said:

Hello,

http://cajunblast.com/wp-includes/infodata.php?r=bd1odhrwczovl3zylwrhdgvuc2ljagvydw5nc2nlbnrlci5jb20vnjhcn0zbmvvvwa==

This link above was reported:

https://www.virustotal.com/gui/url/71587c3b0bcc5c99694187edefe04d2d9463af7bb90920dd51b7d0052f7a89c8?nocache=1

 

Then why doesn't Malwarebytes warn me about the page anymore? It used to, but now it doesn't, & the line '<script type="text/javascript" src="https://www.cajunblast.com/analytics.js"></script>' still exists in the page source.

I like to think that Malwarebytes is good protection, then this happens & I'm not sure. 

Link to post
Share on other sites

If whatever was causing the block on that page was fixed or removed, the page could easily still exist and not cause any issues.  You are making assumptions that may not be valid.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.