I disabled the detection that was causing detection of the obfuscated code (JS:Downlaoder-DEL).
Witam szczurekPROS,
They probably thought better safe than sorry, you were right about the obfuscation as now HonzaZ has confirmed, that this is a FP, the obfuscation is “benign”.
Still I would leave that shared hosting address as you run particular risks from naughty neighbours there not behaving and there could always come a moment you’d suffer a general IP block. The shared IP address being blacklisted should/could be a “mene tekel ufpharsin” for you to change hoster(sign on the wall מנא, מנא, תקל, ופרסין).
Wszystkiego dobrego,
polonus
Thanks.
If i will change code i will need again write to you for disable the detection?
Hi szurekPROS,
You’d better. Same problems we see often with unsigned code. Code is often handled as it comes produced and not always comes fully bug-tested or pen-tested and then when it alerts a (false or real) detection pattern, you again would run into another FP detection.
You have learned some lessons now. Often in life it goes about what and who you know, you know.
polonus