ad aware 10 "shop & bank safely online" feature reports indapass.hu domain as insecure

Customer

• June 03, 2021 16:49

Indapass.hu is the hungarian single-sign-on system of the largest social sites in Hungary (blog.hu, indafoto.hu, indavideo.hu, indamail.hu, forum.index.hu etc).

 

Because we operate on different domains, we check our users loggedin status by redirecting every pageview through daemon.indapass.hu.

 

That subdomain was detected by Ad-Aware as malicious - and it is a false positive. The daemons subdomain is totally harmless but its needed for tens of millions of pageviews per day.

 

Here is the error message:

 

Visiting this site may harm your computer!

To keep you safe, this page was blocked by Ad-Aware 10 "Shop & Bank safely online" feature. To view this page please disable this functionality in your Ad-Aware 10 interface then try again.

 

And here is a typical URL: http://daemon.indapass.hu/http/session_request?redirect_to=http%3A%2F%2Fforum.index.hu%2FArticle%2FshowArticle%3Ft%3D9029418%26la%3D104273441&partner_id=forum

 

 

 

Please reexamine the URL and put it on the whitelist.

 

Questions are welcome, thank you in advance.

0

• 

  Customer

  • June 03, 2021 16:49

  
  

  Hi hargitanandor,

   

  Thanks for letting us know. We'll check this out and report back here.

   

  Regards,

   

  Andy

  Lavasoft Malware Lab
  

  0
• 

  Customer

  • June 03, 2021 16:49

  
  

  hargitanandor,

   

  We haven't been able to recreate this block. Can you provide exact URLs that are being blocked? It will help me investigate further. Thanks.

   

  Andy

  0
• 

  Customer

  • June 03, 2021 16:49

  
  

  
  

  hargitanandor,

   

  We haven't been able to recreate this block. Can you provide exact URLs that are being blocked? It will help me investigate further. Thanks.

   

  Andy

  
  

   

  The URL linked in my original post was, that our user reported to us: http://daemon.indapass.hu/http/session_request?redirect_to=http%3A%2F%2Fforum.index.hu%2FArticle%2FshowArticle%3Ft%3D9029418%26la%3D104273441&partner_id=forum

   

  Try this URL: http://forum.index.hu/Article/showArticle?t=9018292&la=127402630

   

  Or this: http://indafoto.hu/simleder/image/19641159-83ae4033/gyujtemeny/3301

   

  Or maybe this: http://index.indavideo.hu/video/A_lakitelki_szamtechszakkortol_a_Nasdaqig

   

  Every URL is a content URL, and all of them are redirected through daemon.indapass.hu (try it in Safari, Safari displays the 302 redirects in the URL bar)

   

  Our user reported that every topic on forum.index.hu is blocked.

   

  Should i ask for versions by him?

  0
• 

  Support

  • June 03, 2021 16:49

  
  

  Hi hargitanandor,

   

  I'm having Ad-Aware version 10.5, threat definitions 22388, with "Shop & Bank Safely Online" set to ON and I can read all you linked pages without any issues. Please, ask for more information as threat definition number.

  0
• 

  Customer

  • June 03, 2021 16:49

  
  

  Hi again,

   

  Like CeciliaB, I was able to visit those sites in the initial post, the sites in post # 4 and random forums in forum.index.hu without being blocked. Ad-Aware had the most recent threat definition version (22398) when I tested.

   

  Could you ask your user share some of the exact URLs being blocked?

   

  Thanks,

   

  Andy

  0

Please sign in to leave a comment.