Weird site blocked

[Masamunnex 0]

I was searching for something on google and I clicked a YouTube video that was suggested to me and I got a notification that eset nod32 blocked a site called us.cssvsync.com something like that and I didn’t even entered that website

[Marcos 5,072]

Do you have a game by Vesta Soft LLC installed? What application accessed the url and is listed in the Filtered website log?

[Masamunnex 0]

21 minutes ago, Marcos said:

Do you have a game by Vesta Soft LLC installed? What application accessed the url and is listed in the Filtered website log?

I don’t even know what game is that and the application is Microsoft edge cp exe

[itman 1,659]

Refer to this recent thread in regards to the same issue with that URL: https://forum.eset.com/topic/19450-reddit-site-block/ .

In this case, OP determined the blocking was related to AdBlock activity.

[Masamunnex 0]

29 minutes ago, itman said:

Refer to this recent thread in regards to the same issue with that URL: https://forum.eset.com/topic/19450-reddit-site-block/ .

In this case, OP determined the blocking was related to AdBlock activity.

I don’t use Adblock tho

[itman 1,659]

11 minutes ago, Masamunnex said:

I don’t use Adblock tho

Assumed is the web site you are viewing the utube video on is trying to redirect you to us.cssvsync.com.

Try playing a utube video from another web site and see if the same Eset alert is displayed. If no alert is displayed, the problem is the web site where you attempted to play the first utube video.

[TomFace 539]

What was the explanation in the warning popup? Was it a certificate error warning? I have gotten those in the past when trying to play certain YouTube videos.

Edited May 4, 2019 by TomFace

[Masamunnex 0]

16 minutes ago, itman said:

Assumed is the web site you are viewing the utube video on is trying to redirect you to us.cssvsync.com.

Try playing a utube video from another web site and see if the same Eset alert is displayed. If no alert is displayed, the problem is the web site where you attempted to play the first utube video.

The YouTube video that was suggested was on google 

[Masamunnex 0]

9 minutes ago, TomFace said:

What was the explanation in the warning popup? Was it a certificate error warning? I have gotten those in the past when trying to play certain YouTube videos.

I didn’t see it just was that the website was blocked from a blacklist

[Masamunnex 0]

I was afraid that it did something because the eset said it was blocked, I did a full pc scan and it didn’t find anything it’s a new pc around a month old

[TomFace 539]

ESET was just doing its job...so blocked is a good thing.

https://support.eset.com/kb3096/

Regards,

Tom

[Masamunnex 0]

8 minutes ago, TomFace said:

ESET was just doing its job...so blocked is a good thing.

https://support.eset.com/kb3096/

Regards,

Tom

So my pc is safe right ?

[itman 1,659]

As best as I can determine, us.cssvsync.com is not a publicly routed domain name. In other words, it does not resolve DNS-wise to anything I have tried. So there is no way to verify what Eset is detecting.

[itman 1,659]

Tackled this another way.

Eset Filtered Web Site log equates us.cssvsync.com to IP address, 88.214.193.110. Using that IP address for a Robtex lookup yields:

A server located in the U.K.

Next entered the same IP address into IPVoid which yielded:

All this indicates that any DNS server routing to us.cssvsync.com FQDN is most likely nefarious.

[Masamunnex 0]

5 minutes ago, itman said:

Tackled this another way.

Eset Filtered Web Site log equates us.cssvsync.com to IP address, 88.214.193.110. Using that IP address for a Robtex lookup yields:

A server located in the U.K.

Next entered the same IP address into IPVoid which yielded:

All this indicates that any DNS server routing to us.cssvsync.com FQDN is most likely nefarious.

What’s nefarious 

[itman 1,659]

5 minutes ago, Masamunnex said:

What’s nefarious 

 

Quote

nefarious

adjective

ne·far·i·ous | \ ni-ˈfer-ē-əs \

Definition of nefarious

: flagrantly wicked or impious : evil

https://www.merriam-webster.com/dictionary/nefarious

Edited May 4, 2019 by itman

[itman 1,659]

I just played a couple of uTube videos using IE11that were accessed via Google search lookup. No alerts from Eset whatsoever.

It appears the problem is related to neither of these sources directly. But rather, by whatever web site being accessed by users to then access uTube that is causing the Eset alert.  

[Masamunnex 0]

15 minutes ago, itman said:

I just played a couple of uTube videos using IE11that were accessed via Google search lookup. No alerts from Eset whatsoever.

It appears the problem is related to neither of these sources directly. But rather, by whatever web site being accessed by users to then access uTube that is causing the Eset alert.  

So my pc is safe right? 

[itman 1,659]

40 minutes ago, Masamunnex said:

So my pc is safe right? 

If your PC is not receiving frequent Eset alerts on this regard, I would say so. On the other hand if the alert appears randomly without the browser open for example, I would say further examination would be required.

[Masamunnex 0]

18 minutes ago, itman said:

If your PC is not receiving frequent Eset alerts on this regard, I would say so. On the other hand if the alert appears randomly without the browser open for example, I would say further examination would be required.

I didnt receive that alert since it happens and I don’t receive that alert anymore at all

[Masamunnex 0]

1 hour ago, itman said:

If your PC is not receiving frequent Eset alerts on this regard, I would say so. On the other hand if the alert appears randomly without the browser open for example, I would say further examination would be required.

I remembered that I got the first msg when I checked my internet speed and not when watched a YouTube video I just entered speed test website and when I started the test it gave me again that msg same website blocked same ip when I exited the browser and entered the speed test site again, it gave me again that msg about the blocked site 

Edited May 4, 2019 by Masamunnex

[itman 1,659]

43 minutes ago, Masamunnex said:

I remembered that I got the first msg when I checked my internet speed and not when watched a YouTube video I just entered speed test website and when I started the test it gave me again that msg same website blocked same ip when I exited the browser and entered the speed test site again, it gave me again that msg about the blocked site 

Please enter the URL for the speed test web site.

[Masamunnex 0]

7 minutes ago, itman said:

Please enter the URL for the speed test web site.

It’s the first website that you find when you search speed test speedtest.net the one powered by ookla

Edited May 4, 2019 by Masamunnex

[TomFace 539]

5 minutes ago, Masamunnex said:

It’s the first website that you find when you search speed test speedtest.net the one powered by ookla

If this is the one you used, I just tried it with and without my VPN (both with IE11) and had no issues at all.

https://www.speedtest.net/ 

[itman 1,659]

13 minutes ago, Masamunnex said:

It’s the first website that you find when you search speed test speedtest.net the one powered by ookla

I have no problems with https://www.speedtest.net/ using IE11. But I am also in the U.S. and you are in Israel. Obviously, routing to the web site via Internet backbone is different for you.

Try using a few different browsers and see if the Eset alert issue persists. If it does in all browsers, the next step is to contact your ISP provider and have them do a line test on your Internet connection. 

Edited May 4, 2019 by itman