104.18.13.120 - blocked as trojan

[mudjoe2]

IP address: 104.18.13.120

Malwarebytes block log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 3/4/23
Protection Event Time: 4:51 PM
Log File: ac5f5ac8-bad6-11ed-a67b-2cf05d734226.json

-Software Information-
Version: 4.5.22.236
Components Version: 1.0.1915
Update Package Version: 1.0.66328
License: Premium

-System Information-
OS: Windows 10 (Build 19045.2486)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\Google\Chrome\Application\chrome.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: v.gd
IP Address: 104.18.13.120
Port: 443
Type: Outbound
File: C:\Program Files\Google\Chrome\Application\chrome.exe



(end)

Hostname: hxxps://v.gd

---

Context: I had used the hxxps://v.gd url shortener on my Mac (without malwarebytes) and really liked it since it provides preview pages by default, so you can view the whole redirect URL before following it. I tried reaching hxxps://v.gd on my Windows 10 machine (running malwarebytes premium w/ Real-Time Web Protection turned ON. When I did, Chrome said there was an SSL issue with connecting, and malwarebytes immediately threw up a taskbar notification saying the site was blocked due to risk of trojans. I tried reading around the forum for this IP and did not see it reported, although I have seen other URL shorteners blocked in the past, so I am guessing this is a similar case. Interestingly, the sister site by the same creators, hxxps://is.gd , does NOT seem to be blocked by malwarebytes.

[JPopovic]

Hello,

The block will be removed.

Thank you!