Jump to content

Masamunnex

Members
 View Profile  See their activity

  • Posts

    51

  • Joined

  • Last visited

 Content Type 

Posts posted by Masamunnex

    Eset blocked twitch ?

    in Malware Finding and Cleaning

    Posted

    Since yesterday ESET  started blocking this address "https://cognito-identity.us-east-1.amazonaws.com" and it happened when i was on twitch, i checked all the times it blocked it and with browsing history it matches up with me being on twitch watching a live stream, i wanted to know if this website really is malicious and why its being on twitch, i tried to look it up and everything comes out as its an amazon legit website.

    thanks in advance.

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    2 minutes ago, TomFace said:

    Assuming everything comes back clean, I would still watch (for a while) for any weird behavior that is not normal to your machine. Just to be sure.

    What kind of behavior, and if eset blocked that website why do I need to check for weird behavior ? I didn’t access that website since eset blocked it 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    9 minutes ago, TomFace said:

    I'd suggest doing an ESET In-depth scan (custom scan, select all items, scan as administrator). See what you get. Then, if you wish to do so, find a 2nd opinion on-demand scanner (there are several to choose from) to double check. Only use 1 real/full time A/V program and only perform 1 scan at a time. As itman said:

    Regards,

    Tom

    Did a full scan like you said had 0 detections, I can be calm now right ?

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    4 minutes ago, itman said:

    Eset blocked access to the domain shown. That is all that can be said with 100% certainty.

    Based on everything you posted in this thread about the incident, it is my opinion you were not infected by the attempted access attempt to https://www.speedtest.net/ . That is all I can personally state with 100% certainty.

    Ok thank you very much, I also did a full scan on my pc and it said 0 threats found and 0 detections 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    4 minutes ago, itman said:

    I use their TPLs instead. As such, it would just silently block any ads on the web site and I would have no way of knowing it occurred.

    Also AdBlock is a different product than AdBlock Plus. I assume the OP in the other forum posting was using AdBlock and not ABP.

    I don’t care if I cannot access speedtest.net I just care that nothing hurt my pc, since I don’t really know these kind of stuff, I want to know if eset blocked that website did anything could hurt my pc even that eset blocked it ?

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    2 minutes ago, itman said:

    I have no problems with https://www.speedtest.net/ using IE11. But I am also in the U.S. and you are in Israel. Obviously, routing to the web site via Internet backbone routing is different for you.

    Try using a few different browsers and see if the Eset alert issue persists. If it does in all browsers, the next step is to contact your ISP provider and have them to a line test on your Internet connection. 

    I’m kinda scared to enter the website again, eset kept blocking that website , can it do any harm to my pc even when eset blocked it ? It happens only with the speed test website, I tested around 7 different websites and nothing popped up 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted · Edited by Masamunnex

    1 hour ago, itman said:

    If your PC is not receiving frequent Eset alerts on this regard, I would say so. On the other hand if the alert appears randomly without the browser open for example, I would say further examination would be required.

    I remembered that I got the first msg when I checked my internet speed and not when watched a YouTube video I just entered speed test website and when I started the test it gave me again that msg same website blocked same ip when I exited the browser and entered the speed test site again, it gave me again that msg about the blocked site 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    18 minutes ago, itman said:

    If your PC is not receiving frequent Eset alerts on this regard, I would say so. On the other hand if the alert appears randomly without the browser open for example, I would say further examination would be required.

    I didnt receive that alert since it happens and I don’t receive that alert anymore at all

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    15 minutes ago, itman said:

    I just played a couple of uTube videos using IE11that were accessed via Google search lookup. No alerts from Eset whatsoever.

    It appears the problem is related to neither of these sources directly. But rather, by whatever web site being accessed by users to then access uTube that is causing the Eset alert.  

    So my pc is safe right? 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    5 minutes ago, itman said:

    Tackled this another way.

    Eset Filtered Web Site log equates us.cssvsync.com to IP address, 88.214.193.110. Using that IP address for a Robtex lookup yields:

    171112865_Eset_Block.thumb.png.d988f81c93807e67c5de251f9e66f89f.png

    A server located in the U.K.

    Next entered the same IP address into IPVoid which yielded:

    Eset_Block_2.thumb.png.3dce598209f5aad44c2a42dce9d633a3.png

    All this indicates that any DNS server routing to us.cssvsync.com FQDN is most likely nefarious.

    What’s nefarious 

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    9 minutes ago, TomFace said:

    What was the explanation in the warning popup? Was it a certificate error warning? I have gotten those in the past when trying to play certain YouTube videos.

    I didn’t see it just was that the website was blocked from a blacklist

    Weird site blocked

    in Malware Finding and Cleaning

    Posted

    16 minutes ago, itman said:

    Assumed is the web site you are viewing the utube video on is trying to redirect you to us.cssvsync.com.

    Try playing a utube video from another web site and see if the same Eset alert is displayed. If no alert is displayed, the problem is the web site where you attempted to play the first utube video.

    The YouTube video that was suggested was on google 

×
×
  • Create New...