Jump to content

NTXCruiser8

Members
  • Posts

    1
  • Joined

Posts posted by NTXCruiser8

  1. Howdy, TIL Synology makes routers. That IP has over 10,000 domains on it according to urlscan, abuseipdb shows 100% confidence of abuse, and further - that IP is getting scrutinized right now because of an article that came out today. Motherboard/Vice put out a story how a well funded startup was offering people $500 to share their workplace login credentials through a thing called Workplace Unite. Really crazy story but looking at some of the domains related to the phishing thing I can see they were hosted on that IP. So many sites are on that IP... apparently a company called Vercel has that /24 block and hosts it on Amazon AWS.

    So anyway, there's a chance something on the site you're pulling up (is it this one?) is hosted on that IP but not related to that story. The reason it's triggering over the last couple of days is because the IP has been flagged as dirty by whatever provider Synology pays for their threat intel feeds. It's only listed on one vendor in VirusTotal.

×
×
  • Create New...

If you are already a Cruise Critic member, please log in with your existing account information or your email address and password.