Issue with IMDb/cloudfront.net, URL:Mal warning

General
1

Hi,
since few weeks, I have an issue visiting IMDb pages with Avast.
A message about a threat eliminated is displayed, URL:Mal, about cloundfront links (Amazon related link, owner of IMDb).

Avast_IMDb
Avast_IMDb593×536 60.5 KB

I’m using the latest versions of Firefox and Avast, but the connexion is aborted each time I go a IMDb page. Basically, I can’t rate movies anymore or see my previous ratings.
If I turn down Avast protection, I can visit IMDb as usual, with no warning message.
Also, oddly, using a VPN for browser, Windscribe, I can visit IMDb as usual, with no warning message too.
What can i do to solve this issue?

2

Do a check for the URLs on VirusTotal and report a false positive to Avast if they appear clean.

I’ve had the same warnings for a few weeks now on at least two cloudfront servers on imdb. With the same popups from Avast. I just close them and continue. Avast has no way to suppress these warnings and just abort the connection. I’m also on a VPN by the way, but not the one from Avast.

3

I tested 2 Cloudfront links (the one in the screenshot and another one), no threats were detected.
I guess I just have to wait for the proper VPS update.

4

Still getting these, for weeks now:

imdb1
imdb1600×543 25.8 KB

imdb2
imdb2600×543 26.4 KB

5

Have you tried clearing your browser cache as something is trying to connect to that URL - or a site that you are visiting has a 3rd party link to that cloudfront(dot)net link.

Do you recall what site you were viewing, just before the alert ?

6

Cleared cache just now. Closed browser. Opened browser. Went to imdb. Again got the two alerts above.

The first alert is when viewing a movie cast. Really any movie or show will do, this time it happened to be: Venom: The Last Dance (2024) - Reference View - IMDb

Then, I click an artist to see their filmography, and I get the second alert.

It’s the first page visit to imdb, and then the second page visit. It doesn’t matter what exact page. These two servers are marked as MAL, and have been for a month or so. And it seems every imdb page links to them somehow.

Edit: I changed my VPN endpoint. I then visited imdb from a new IP. I again got these two alerts for these exact servers. This only happens when visiting imdb. And it only happens once for a given VPN IP. Or at least once a day. So if I visit an imdb page again there will be no alert. But tomorrow, when/if I visit with a new IP, the alerts are back again.

7

I just tried the link and I was able to connect to it without an alert - clicked one of the video links below and that had a hiccup (membership of some such), but the video loaded and played.

b10007
b10007650×471 173 KB

Also using Firefox, uBlock Origin Lite and uMatrix, as in my signature.

8

After switching IP’s again, I get the alert when clicking my own link above.

I checked the exact url and it’s an Amazon IP that has been clear for at least 6 months.

https://www.abuseipdb.com/check/18.238.80.31

Yet Avast blocks it as MAL when I’m on my VPN and visit imdb.

They seem to be false positives.

9

That is a reasonable assumption that the VPN could be playing a part in this (exactly what I’m unsure) as I don’t use a VPN.

How you would report this to Avast as a possible FP when the VPN would be changing as you say.