Sign in to follow this  
hargitanandor

ad aware 10 "shop & bank safely online" feature reports indapass.hu domain as insecure

Recommended Posts

Indapass.hu is the hungarian single-sign-on system of the largest social sites in Hungary (blog.hu, indafoto.hu, indavideo.hu, indamail.hu, forum.index.hu etc).

 

Because we operate on different domains, we check our users loggedin status by redirecting every pageview through daemon.indapass.hu.

 

That subdomain was detected by Ad-Aware as malicious - and it is a false positive. The daemons subdomain is totally harmless but its needed for tens of millions of pageviews per day.

 

Here is the error message:

 

Visiting this site may harm your computer!

To keep you safe, this page was blocked by Ad-Aware 10 "Shop & Bank safely online" feature. To view this page please disable this functionality in your Ad-Aware 10 interface then try again.

 

And here is a typical URL: http://daemon.indapass.hu/http/session_request?redirect_to=http%3A%2F%2Fforum.index.hu%2FArticle%2FshowArticle%3Ft%3D9029418%26la%3D104273441&partner_id=forum

 

 

 

Please reexamine the URL and put it on the whitelist.

 

Questions are welcome, thank you in advance.

Share this post


Link to post
Share on other sites

Hi hargitanandor,

 

Thanks for letting us know. We'll check this out and report back here.

 

Regards,

 

Andy

Lavasoft Malware Lab

Share this post


Link to post
Share on other sites

hargitanandor,

 

We haven't been able to recreate this block. Can you provide exact URLs that are being blocked? It will help me investigate further. Thanks.

 

Andy

Share this post


Link to post
Share on other sites

hargitanandor,

 

We haven't been able to recreate this block. Can you provide exact URLs that are being blocked? It will help me investigate further. Thanks.

 

Andy

 

The URL linked in my original post was, that our user reported to us: http://daemon.indapass.hu/http/session_request?redirect_to=http%3A%2F%2Fforum.index.hu%2FArticle%2FshowArticle%3Ft%3D9029418%26la%3D104273441&partner_id=forum

 

Try this URL: http://forum.index.hu/Article/showArticle?t=9018292&la=127402630

 

Or this: http://indafoto.hu/simleder/image/19641159-83ae4033/gyujtemeny/3301

 

Or maybe this: http://index.indavideo.hu/video/A_lakitelki_szamtechszakkortol_a_Nasdaqig

 

Every URL is a content URL, and all of them are redirected through daemon.indapass.hu (try it in Safari, Safari displays the 302 redirects in the URL bar)

 

Our user reported that every topic on forum.index.hu is blocked.

 

Should i ask for versions by him?

Share this post


Link to post
Share on other sites

Hi hargitanandor,

 

I'm having Ad-Aware version 10.5, threat definitions 22388, with "Shop & Bank Safely Online" set to ON and I can read all you linked pages without any issues. Please, ask for more information as threat definition number.

Share this post


Link to post
Share on other sites

Hi again,

 

Like CeciliaB, I was able to visit those sites in the initial post, the sites in post # 4 and random forums in forum.index.hu without being blocked. Ad-Aware had the most recent threat definition version (22398) when I tested.

 

Could you ask your user share some of the exact URLs being blocked?

 

Thanks,

 

Andy

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this