Potential risks with websites developed using Site 123?

[MBUser2]

BrowserGuard blocked a reference to static.s123-cdn-static-d.com and identified it as malware.  The site I was visiting was https://www.olyham.org.

I found a VirusTotal reference here - https://www.virustotal.com/gui/domain/static.s123-cdn-static-d.com/details

where user Byglander reported a "False positive on asset domain used by Site123"

JPopovic (Malwarebytes staff) replied -

The domain is legitimately blocked due to malicious PDF files. An example:

 https://static.s123-cdn-static-d.com/uploads/4661447/normal_61b0edbd38451.pdf 

I understand Site123 is a website building and hosting site.  Are all websites built using this site potentially harmful due to their malicious PDF files? 

When I used VirusTotal to check www.olyham.org, it showed "No security vendors flagged this URL as malicious".   Are the links to s123-cdn-static-d.com in www.olyham.org what triggered the BrowserGuard block?

Interestingly, VirusTotal showed s123-cdn-static-d.com as "clean" but three vendors complained when I used static.s123-cdn-static-d.com for the search.  Also, only only a domain search showed the full information in "Details" -- a standard URL search did not. 

 

[BjelakovicL]

Hi,

Yes, the links to static.s123-cdn-static-d.com are probably what triggered the Browser Guard block.

The malicious PDF's are still live, so this is still a valid detection. And no, not all sites built using Site123 are potentially harmful.