Avast popup reports that access to aorta.clickagy.com has been blocked. How do I determine what is calling for access to that site? I’ve done complete scans using Avast and Malwarebytes but nothing unusual is reported.
Could it be one of the websites I’m visiting that is trying to open clickagy or should I be searching for an infection on my computer?
How do I determine what is calling for access to that site?The popup from avast will tell you
Process = who is calling
URL seems to be taken down >> http://downforeveryoneorjustme.com/aorta.clickagy.com
Yep, site is down: http://urlquery.net/report/4103d4f9-ded4-413c-8f3b-16206d6b545f
Site is also being blocked by uBlock Origin.
polonus
My question remains. What is initiating the call for clickagy?
The Avast pop-up offers no information beyond the block notification.
The reason could have been this malware detection: 2018-01-29 2 -aorta.clickagy.com/pixel.gif?ch=139 Malware
If this is still the case could best be answered by an avast team member, as we are just volunteers here with relevant knowledge, but only avast team members can come and unblock.
Fortinet’s still has it, as has urlquery.net: https://www.virustotal.com/#/url/13988f9318abf2bf26809f4b65177f15f3eca7254f985267cd4f10fb5b3aa534/detection
See dates and detections: https://www.virustotal.com/#/domain/aorta.clickagy.com
see also files being referred at VT results.
polonus (volunteer website security analyst and website error-hunter)