Hacker News new | ask | show | jobs
by MagicPropmaker 2572 days ago
And it's not true that MalwareBytes is "scareware". I'm sure the person saying that is simply some 12-year-old who wants to show the Windows user that he runs Linux and is a "l33t h4x0r" or something and knows better than my (commercial) security software.

MalwareBytes is actually reporting that something on that page is trying to make an outbound connection to port 50685 on ip address 45.33.49.119. I don't know what to make of this, but it smells fishy. It's very odd that this program will make a claim if there isn't something going on. I'm not going to risk visiting that page.
2 comments
apearson 2572 days ago
45.33.49.119 is the same IP this website is hosted on.

I'm not sure on port 50685 but when I load the page there are no connections on port 50685.

link
merb 2572 days ago
well basically > 49k ports are private/dynamic. which means that if you open a website at 80/443 it will open a port on your computer above 49k, so nothing malicious.
link
pushpop 2572 days ago
I don’t run nor have ever run MalwareBytes so I couldn’t comment on what’s being reported there but the site itself is one of the few of few I’d trust normally. So either the site has been hacked or MalwareBytes is reporting a false positive.

Are you connecting over HTTP or HTTPS? If the latter, have you checked who issued the SSL certificate?

link