Skip to content
View in the app

A better way to browse. Learn more.

Kaspersky Support Forum

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Website false positive?

Find https://nswpedia.com/nintendo-switch-roms got positive on Kaspersky as HEUR:Trojan.Script.MalCrack.gen .

However, https://www.virustotal.com/gui/url/65758c5365c663134ad1f7fa0af657096a4a8924f3d6ff5e5cce7f1a3c3c6abf only two showed positive while this report on Kaspersky showed as good website, https://opentip.kaspersky.com/https%3A%2F%2Fnswpedia.com%2Fnintendo-switch-roms/?tab=web . Is it a false positive?

Edited by Berny

Solved by Berny

Featured Replies

@sailor Welcome

Your URL has been submitted to Kaspersky Virus Lab , the verdict will be provided when available.

@sailor

↓ Suspicious link included under directory  https://nswpedia.com/ 🤔↓ (waiting for verdict from K Virus Lab)

dgaf.jpg.5643e48ea27d8d39cf5e37508d7ae035.jpg

 

  • Solution
Quote

" Hello,

This detection is correct.
Thank you for your inquiry to Kaspersky.

Best regards, Xxxxxxxxx Xxxxxxxxx, Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 "

 

@sailor

29 minutes ago, sailor said:

So this link is really something infected, right.

↓ Here are the  Kaspersky detection details ↓

Quote

Today, 27/02/2026 16:22:42
Event                         : Download denied
User                          :  xxxxxxxxxxxxxxx
User type                 : Initiator
Application name    : firefox.exe
Application path      : C:\Users\xxxxxxxxxxxxxxx
Component              : Safe Browsing
Result description   : Blocked
Type                         : Adware
Name                        : https : //dgaf2ncy4dtan.cloudfront.net/?nfagd
Threat level              : Medium
Object type              : Web page
Object name            : ?nfagd
Object path             : https : //dgaf2ncy4dtan.cloudfront.net
Reason                    : Cloud Protection

↓ Also , uBlock Origin doesn't like it as well ↓

Spoiler

dgaf_ublock.thumb.jpg.114f41f5235bb41da23bec2e16b4b5e6.jpg

 

1 hour ago, sailor said:

Then you may want to update

nswp.jpg.f1d58a3c140a62fbc2282d77eb5f3baa.jpg

This is what i submitted to Kaspersky Virus Lab :

Hello, → https://[nswpedia.com/nintendo-switch-roms]

↓ Here are the  Kaspersky detection details ↓

Spoiler

Event                    : Malicious object detected
User                      : xxxxxxxxxx
User type              : Initiator
Application name : firefox.exe
Application path   : C:\Users\xxxxxxxxxx
Component           : Safe Browsing
Result description : Detected
Type                      : Trojan
Name: HEUR         :Trojan.Script.MalCrack.gen
Precision               : Exactly
Threat level           : High
Object type           : File
Object name          : nintendo-switch-roms
Object path            : https : //nswpedia.com
MD5 of an object  : 0D7CFBA000C77E64032421741059A064
Reason                  : Expert analysis

 

Also VirusTotal results are sometimes random.

Please sign in to comment

You will be able to leave a comment after signing in

Sign In Now

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.