Is this virus or not? (Computer related)

[villageidiotY2K]

Hi peeps, I use Norton lifelock, and seems it always pick this intrusion thingy.

Is this a virus??? I've googled it but could find a match.

Any of you tech geeks know whats going on???

Are the trying to access my collection of goodies???

 

[CharlieH]

MOVED TO "IT"

[ThaidDown]

IP address 52.86.219.129 is allocated to Amazon.com.

Do you have an Amazon account?

[FritsSikkink]

It is blocked, so no problem

[villageidiotY2K]

No I Dun buy from Amazon only shopee. 

I deleted my cookies and I Dun get this <deleted> anymore. Maybe some p0rn site implanted da bomb

[KeeTua]

You're behind a router so your router should be dropping inbound requests if you haven't changed its default settings. Since this is reaching your computer it appears something, an app or program or website you have open, is phoning home and your router will forward the returning packets to the program on your computer and Norton doesn't trust it.

 

As for it being Amazon related I think the originating site is using Amazon web services nothing to do with the online shopping Amazon.

[Susco]

7 minutes ago, KeeTua said:

an app or program or website you have open, is phoning home and your router will forward the returning packets to the program on your computer and Norton doesn't trust it.

 

As for it being Amazon related I think the originating site is using Amazon web services

 

I wonder which website that is, that is using Amazon web services 

[KeeTua]

1 hour ago, Susco said:

 

I wonder which website that is, that is using Amazon web services 

Not sure if that's a trick question but this is the site and it's probably using Amazon Web Services (AWS):

https://dlgun.uistration.work

 

Here's some text from the homepage of that site. If the OP allowed push notifications that could explain what's going on.

 

"Allow push notifications"
"Get The Most Recent Movie Updates!"
"Receive breaking updates and stay up to date on current movie events"

[KhunBENQ]

Entered 52.86.219.129 in the address field of the browser.

What I see then is an obscure/anonymous site about

"Get the latest sports updates from around the world."

"Get the most recent Movie Updates"

 

Does look like a pirate copy site or so?

May try to send push notifications?

 

EDIT: KeeTua was a few seconds faster

Edited February 20, 2021 by KhunBENQ

[Susco]

1 hour ago, KeeTua said:

Not sure if that's a trick question but this is the site and it's probably using Amazon Web Services (AWS):

 

Not a trick question, but I assume that Cloudfront and AWS have connections, since they are from the same company, and TVF uses cloudfront

[Dagfinnur Traustason]

No it is not a virus! I has to do with that you accepted a service that are connected to that site. Probably out of mistake. After that your security software from Norton reacts on it.

[placnx]

On 2/20/2021 at 12:45 PM, ThaidDown said:

IP address 52.86.219.129 is allocated to Amazon.com.

Do you have an Amazon account?

When I just checked APNIC, it said that it was US Postal Service.

[villageidiotY2K]

Well it's a scary <deleted>.... Those free pron sites... 

Suppose if my credit card detail gets hacked and they purchase like 1000 dildos, will the bank refund me? 

 

How about for unauthorized usage for debit cards? Scamming my atm card details n <deleted>

[Nout]

On 2/20/2021 at 4:53 PM, KeeTua said:

You're behind a router so your router should be dropping inbound requests if you haven't changed its default settings. Since this is reaching your computer it appears something, an app or program or website you have open, is phoning home and your router will forward the returning packets to the program on your computer and Norton doesn't trust it.

 

As for it being Amazon related I think the originating site is using Amazon web services nothing to do with the online shopping Amazon.

Would I be right in thinking Norton is over rated...and in general an anti malware program, free such as malwarebytes, is useful to run?

[KeeTua]

11 hours ago, villageidiotY2K said:

Well it's a scary <deleted>.... Those free pron sites... 

Suppose if my credit card detail gets hacked and they purchase like 1000 dildos, will the bank refund me? 

 

How about for unauthorized usage for debit cards? Scamming my atm card details n <deleted>

Why not just stick with the one famous porn site that's been in the news lately. I've heard it has more than enough free content to keep a guy occupied.

 

If you don't receive your 1000 dildos the bank will probably assist you.

[KeeTua]

11 hours ago, Nout said:

Would I be right in thinking Norton is over rated...and in general an anti malware program, free such as malwarebytes, is useful to run?

If you're the cautious type and have a reasonable level of computer expertise you can get by without the paid third party security programs but if you're a pedal to the metal kind of guy who will click first and ask questions later and could care less about the inner workings of computers then paid products like this from Norton could be beneficial.

 

I haven't used any third party anti-virus, anti-malware program, free or paid, in at least 15 years. I have a good handle on my email, rarely install any additional programs and my one big open door to the Internet, the browser, is Firefox with the addon uBlock Origin running in advanced mode set globally to disable all scripting, third party sites and java script by default. uBlock Origin is available for most of the main browsers but I've only used it in Firefox.