I just got 3 threat secured messages in a row in a matter of seconds that all say “Avast aborted connection on chrome.cloudflare-dns.com because it was infected with URL:Phishing” The URL for the threat was “http://chrome.cloudflare-dns.com/dns-query” and the process was listed as “C:\Program Files(x86)\Google\Chrome\Application\chrome.exe” The alert ID for the first one was “ef005ef34ff8/2024-02-06T11:33:06.381Z” Anyone know what that was all about? A false positive, or some random link on Youtube triggering it?
A false positive, or some random link on Youtube triggering it?Possible blacklisted ad`s
That is what I would figure as well. I use an adblocker on that site so I don’t see any ads at all, but I guess they still exist in the background process and that could have triggered the threat reaction.
The IP of that link has been reported because of abuse three times: https://www.abuseipdb.com/check/162.159.61.3
Peculiar as this CloudFlare IP address comes whitelisted by abuseipdb dot com.
Moreover the site address kicks up a 400 error. So it cannot be reached, as it is a CloudFlare Reverse Proxy.
polonus