Does anyone knows this site?

Hello @Corvus

Confirmed on my end as well, Bitdefender Antivirus Plus. It was also flagged by 10 other sites on VirusTotal.

My opinion, is let them work it out as they said they would, and do not add it into Exceptions (whitelist). You were wise to be suspicious and ask.

Otherwise, you could also report it the Bitdefender labs, as a possible (but for now, probably not) false positive.

https://www.bitdefender.com/consumer/support/answer/29358/

@Flexx who is also very good at these sort of things, may have some additional insights as well.

Kind regards.

@Corvus I also made an inquiry about this and despite the fact that on virustotal it appears as being flagged for phishing by several vendors, in urlinfo we don't see any detection on the URL and according to Honeygain, the URL is legit. However, detection will stay for now, until the URL can be thoroughly analized, because at the moment it appears down, its identity is hidden and less than a year has passed since its registration, so it raises some concerns and I think that more checks are needed to be able to pronounce on its safety.

Thanks!

Yes, website certificates can be hacked or faked, although it is a rare and difficult process.

Certificate Authorities are trusted entities that issue digital certificates. If a CA's systems are compromised, an attacker could issue fraudulent certificates. This happened in the DigiNotar incident in 2011.

In some cases, attackers can intercept communication between a user and a website (MitM), presenting a fake certificate to the user while maintaining a legitimate connection with the website. This can be mitigated by features like Certificate Pinning. Also, older cryptographic algorithms, such as MD5, have known vulnerabilities that could be exploited to create fraudulent certificates.

An antivirus software can check the validity of certificates by comparing them against a list of trusted Certificate Authorities and verifying their chain of trust. If a certificate is not issued by a trusted CA or if the chain of trust is broken, the antivirus can flag it. Heuristic techniques can be used to analyze certificates and their properties. If a certificate looks suspicious (e.g., unusually short validity period, unexpected issuer, etc.), the software can flag it for further inspection. Since modern security solutions rely on cloud-based threat intelligence, they can quickly detect and block connections to websites known to have used compromised or fraudulent certificates.

Also, when monitoring the behavior of websites and applications, if a site behaves unusually or tries to establish connections that are inconsistent with its usual pattern, the security software might trigger an alert.

The general rule of thumb is, if a website’s certificate is invalid or untrusted, it’s best to avoid entering sensitive information.

Excellent links, buddy. Thanks, I appreciate it 👍️👍️