failse positive web page?

[bestav]

Hello,

I have visiting www.epudor.com web page. Kaspersky plus app says heur trojan. Please check are really hamiful site. I think failse positive.

 

[harlan4096]

Welcome to Kaspersky Community.

 

I can't access to that site, I get a warning from my browser that does not exist or down...

 

[Berny]

Same here ... 🤔

[bestav]

Hello,

I swtich off av and epudor.com webpage work normal. I tell their customer service their domain blocklist. Epudor make alternative apps  elcomosoft pdf tools. Epudor is china company.

Epudor.com is online but kaspersky blocked it. Waiting kaspersky staff information is security hole or not.

[Berny]

"Unable to resolve target system name ..."

[irisyan]

your domain is wrong. try www.epubor.com

 

[Berny]

@irisyan Welcome.

33 minutes ago, irisyan said:

www.epubor.com

Please ask for [Reanalyze] on KOTP → https://opentip.kaspersky.com/

Spoiler

Event: Download denied
User: DESKTOP-XXXXXXXX
User type: Initiator
Application name: firefox.exe
Application path: C:\Program Files\Mozilla Firefox
Component: Safe Browsing
Result description: Blocked
Type: Trojan
Name: HEUR:Trojan-PSW.Script.Generic
Precision: Heuristic Analysis
Threat level: High
Object type: File
Object name: how-to-listen-to-audiobooks-in-car.html
Object path: https://www.epubor.com
MD5 of an object: 7F18475A1DDFE2E7F83EC92B656F1F81
Reason: Expert analysis
Databases release date: Today, 10/10/2023 8:37:00

 

[bestav]

I switch  off av and you can look picture actual webpage correct domain name. Kaspersky block this domain.

Ro

[Berny]

@bestav

7 minutes ago, bestav said:

Kaspersky block this domain.

Please submit the URL on → https://opentip.kaspersky.com/ and ask for [Reanalyze]

[Berny]

@bestav From Kaspersky Virus Lab :

Quote

"Hello,

This is not a false alarm. This site is infected.
Here is the malicious code:
<script>
var scriptTag =  ...........
appendChild(scriptTag);
</script>
If you are a webmaster, please remove the above code from the page. Also we strongly recommend that you change passwords to all services that can be used to modify website contents because they may have been stolen.

Best regards, xxxxxxxx xxxxxxxxx, Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names"