I reloaded my website, it redirected me to some ifastnet subdomain, and it attempted to install a virus, or something else that is dangerous, wtf? This is supposed to be secure?
Greenreader is telling the truth. I just checked and that page does not attempt to download anything when I try to visit it. This is either a false positive on account of your virus scanner or on the fact that malware sites that occasionally (and unfortunately) get hosted on the platform sometimes redirect to that same page. So when users report it as a problem, that URL ends up getting flagged. It’s the same reason some security filters, ISPs or DNS resolvers flag the free subdomains as being malware. It’s really just a false positive.
It wasn’t flagging the free subdomain, it was flagging the website it redirected me to (for no reason) it should not be redirecting. Every time it redirected me, my virus scanner knows that it is trying to download something.
I didn’t say it was. I was making a comparison to try and help you understand the situation.
In the past, I’ve come across malware that after infecting your PC forcefully redirects you to download links for more malware. It’s also not unheard of for advertising scripts to have malicious ads that do the same thing on occasion.
What’s the URL of your website? If I knew that I could take a look as to why it’s redirecting to the iFastNet link at all.
If you actually read and understood the article you linked instead of just finding something that fits your narrative, you’ll find that a drive-by download actually involves a download. And all modern browsers alert you to a file being downloaded. Therefore, you would need to consent to that download, and execute the file (Except in some rare cases where exploits are in play, but generally manual execution is required).
And if you actually read the warning your OS displayed, you’ll find a very important word “or” in there. The warning is not saying the website is trying to download malware, it’s saying that it’s a possibility. The warning is there to scare you, and obviously it worked.
But what myself and others have said is accurate, the website is not malicious, it is just being flagged as anti-virus software incorrectly flags it as a known associate to malware. Anyone with knowledge of web security and the free hosting platform should be able to figure that out, and if you don’t know web security that is perfectly fine, but then don’t make false accusations.
And since you don’t seem to want our help, I’m closing this topic. Admin can still reply if he so wishes.
Have you considered the possibility that your antivirus may not be 100% correct 100% of the time?
Because in my experience, antivirus can be mistaken. Quite often, in fact.
Very often, what happens is that someone uploads a bad site to our hosting, then antivirus companies check the bad site, and due to the cookie check system, it redirects to the “you need to enable cookies” page.
The systems at the antivirus company then determine “this bad site is redirecting to this other website, that means the bad site must have moved and this new URL is bad too”, and proceed to block that new URL.
Does it mean the new site is actually bad? No, of course not. Our “suspended domain” page has been flagged as malicious many times. Was it malicious? No, of course not, but we suspended the bad site, and antivirus scanners inadvertently punished us for it.
This is what’s called a “false positive”, where a virus scanner says a particular URL is bad, while it actually isn’t.
Many antivirus companies have many very talented people and very sophisticated systems to determine harmful content. But you have to understand that antivirus companies have to make decisions about literally every URL and every file in existence. So you need to realize they use a lot of automated decision making, because couldn’t possibly do diligent in-depth, manual investigation into everything they encounter. And where there is automated decision making, there are errors being made.
doesn’t change the fact it tried to download something and the antivirus detected it? It wouldn’t have said that if it didnt try to download something.
I know that page, and it shouldn’t try to download anything. Did you actually see the download starting? Or is that just what your virus scanner warned you about that it could have happened if they didn’t stop it?
Because by that same logic, I can say I stopped your computer from catching on fire yesterday. And you know I’m right, because your computer didn’t catch on fire. Of course, you could then argue that your computer wouldn’t have caught on fire anyway and that I didn’t actually do anything. But you’ll never know for sure, because I did say I protected your computer. And like your virus scanner, I’m always right and never make claims that are not true.
My point is, once again, just because your virus scanner says it’s harmful and they protected you from harm doesn’t mean the website is actually harmful. They make mistakes, and I already explained how they could have mislabeled the page as being malicious when it actually isn’t.