Threat eliminated

[sekgrranin]

Hello.
I’m going to Facebook sometimes, one of my friends sent me a link that I pasted in my post, I attach the image of the detection of Avast. Do you know what it is? I have been using Avast Free with the maximum settings for more than 10 years, I am really happy with this security software. I am also very happy with AOL which is more serious than Whot about the reputation of websites.
hXXps://urlgo.fr/kj6W

[Pondus]

Do you know what it is?

https://www.virustotal.com/gui/url/02b5397b4f12dc7f2dc1cd4dbe87a1a90d89de22e75aea7a6115faceaa735a40/detection

[DavidR]

@ sekgrranin
Please ‘modify’ your post change the URL from https to hXXps (or just post the domain name element), to break the link and avoid accidental exposure to suspect sites, thanks.

urlgo.fr/kj6W

Most don’t like having to visit an unknown 3rd party unknown site to view images, they can be attached directly to the topic (see attached image), keeping all information together.

[sekgrranin]

@Pondus post:2

Do you know what it is?

https://www.virustotal.com/gui/url/02b5397b4f12dc7f2dc1cd4dbe87a1a90d89de22e75aea7a6115faceaa735a40/detection

Hello.Thank you.So,here,I don’t understand,I had put it under virustotal and no alert.I know virustotal well

[sekgrranin]

@DavidR post:3

@ sekgrranin
Please ‘modify’ your post change the URL from https to hXXps (or just post the domain name element), to break the link and avoid accidental exposure to suspect sites, thanks.

urlgo.fr/kj6W

Most don’t like having to visit an unknown 3rd party unknown site to view images, they can be attached directly to the topic (see attached image), keeping all information together.

Hi, I’m sorry, I don’t know how to find out the domain name? Thanks

[sekgrranin]

I still don’t understand why the switch to virustotal didn’t work? Yet it is installed in my toolbar…

[DavidR]

@sekgrranin post:5

@DavidR post:3

@ sekgrranin
Please ‘modify’ your post change the URL from https to hXXps (or just post the domain name element), to break the link and avoid accidental exposure to suspect sites, thanks.

urlgo.fr/kj6W

Most don’t like having to visit an unknown 3rd party unknown site to view images, they can be attached directly to the topic (see attached image), keeping all information together.

Hi, I’m sorry, I don’t know how to find out the domain name? Thanks

The domain name is the text element of the URL after the hxxps part of the URL, as I posted “urlgo.fr/kj6W”

You can also see it in the image that you have now attached, also see my extract image.

[sekgrranin]

Thank youDavidR, congratulations for your advice and for the forum
To confirm, it is urlgo the domain name here. I am really confused, I realize now that it is a site shortening the URL
:-\

[Pondus]

@sekgrranin post:4

@Pondus post:2

Do you know what it is?

https://www.virustotal.com/gui/url/02b5397b4f12dc7f2dc1cd4dbe87a1a90d89de22e75aea7a6115faceaa735a40/detection

Hello.Thank you.So,here,I don’t understand,I had put it under virustotal and no alert.I know virustotal well

When using virustotal, always check the scan date at top right corner, if old (a cached result from a previous scan) then click the rescan button (above the scan date) for a fresh result

See attached screenshot

And in case you dont know, virustotal dont scan websites it is checking the URLs against a number of blacklists

[DavidR]

@sekgrranin post:8

Thank youDavidR, congratulations for your advice and for the forum
To confirm, it is urlgo the domain name here. I am really confused, I realize now that it is a site shortening the URL
:-\

You’re welcome.

EDIT: I have done some further investigation on the IP address that VirusTotal gives for that domain and that shows numerous other domains that are on that IP Address, https://www.virustotal.com/gui/ip-address/104.21.11.224/relations (see attached image) one or more of those if malicious could effectively impact the other domains reputation, etc.

[sekgrranin]

@DavidR post:10

@sekgrranin post:8

Thank youDavidR, congratulations for your advice and for the forum
To confirm, it is urlgo the domain name here. I am really confused, I realize now that it is a site shortening the URL
:-\

You’re welcome.

EDIT: I have done some further investigation on the IP address that VirusTotal gives for that domain and that shows numerous other domains that are on that IP Address, https://www.virustotal.com/gui/ip-address/104.21.11.224/relations (see attached image) one or more of those if malicious could effectively impact the other domains reputation, etc.

Hello and thank you DavidR

[sekgrranin]

@Pondus post:9

@sekgrranin post:4

@Pondus post:2

Do you know what it is?

https://www.virustotal.com/gui/url/02b5397b4f12dc7f2dc1cd4dbe87a1a90d89de22e75aea7a6115faceaa735a40/detection

Hello.Thank you.So,here,I don’t understand,I had put it under virustotal and no alert.I know virustotal well

When using virustotal, always check the scan date at top right corner, if old (a cached result from a previous scan) then click the rescan button (above the scan date) for a fresh result

See attached screenshot

And in case you dont know, virustotal dont scan websites it is checking the URLs against a number of blacklists

Hello and thank you Pondus.you are registered on VirusTotal.i have been using it for more than 8 years but never registered.i do not see what you are indicating.thank you

[sekgrranin]

Here is a capture:

[Pondus]

i do not see what you are indicating.

You have to scan something before you see time/date

top right corner after a scan, see attached screenshot

[sekgrranin]

@Pondus post:14

i do not see what you are indicating.

You have to scan something before you see time/date

top right corner after a scan, see attached screenshot

Or, you are right; here is my new capture, however, at the top right I don’t see how to reset.
It simply asks me to reanalyze?

[sekgrranin]

Hello, I wonder if over 48 hours this phishing detected by Avast would not have already been reported to VirusTotal to put it in its signatures?

[Pondus]

It simply asks me to reanalyze?

That is the one 👍