Q&A Kaspersky blocks gitcdn.link ; Is it a false positive ?

JB007

Level 23
Verified
May 19, 2016
1,277
Hello,
I just discovered that Kaspersky blocked "gitcdn.link".
Here Bitdefender détecte sans cesse un Malware I discovered an explanation, "gitcdn.link" is related to github.com and µBlockOrigin.
If this is a false positive what can I do ?
"
Explications du créateur :
Schme16

Yo! I'm the creator of GitCDN - So I can definitivly clear up what it is!
GitCDN is a free service that lets people use their GitHub repositories directly in their apps/websites and have their content browser, and geo, cached.
You'd be finding references to GitCDN in your cookies/logs all the time (it gets used a fair bit). But my guess is that if you're here, it's because you use uBlock. uBlock references some lists by using GitCDN.
I promise I'm not nefarious, but if you ever see content being served from a GitCDN address that is spam, phishing, or illegal, send a notice to me here:
https://github.com/schme16/gitcdn.xyz/issues/new with a link to the item that needs to go!
Cheers!

https://www.reddit.com/r/uBlockOrigin/comments/ivwx4v "

1.PNG
 

SecureKongo

Level 21
Verified
Malware Tester
Feb 25, 2017
1,047
Looks like a false positive to me. Just submit it here even tho it tells me that the site is clean at the moment. :unsure:

Edit: website isn't blocked due to an infection but because of an invalid certificate. Same happens when I try accessing it with Edge:

Unbenannt.PNG
 
Last edited:

rain2reign

Level 5
Jun 21, 2020
222
I am not sure if there was something blocking gitcdn from uBlock's side. But right now the only instance of Gitcdn.* that i could find was in uBlock Filters (built-in default) in the following line which refers to a European CDN service from the company Bunny.Net:
*$script,3p,denyallow=fastly.net|fastlylb.net|jquery.com|hwcdn.net|hcaptcha.com|recaptcha.net|cloudflare.com|cloudflare.net|google.com|googleapis.com|gstatic.com|sharethis.com|stackpathcdn.com|blogger.com|googleusercontent.com|rawgit.com|rawgitcdn.b-cdn.net|githack.com,domain=isaiminiweb.online
It seems to have two links one is GitCDN.link and the other being Gitcdn.xyz. The .link url being the only one having certificate issue. The .xyz seems to be the main marketed url from the developer.

The certificate issue seems to have been reported, and the corresponding issue ticket closed, over a week ago. it seemed the developer had some troubles with Cloudflare and rerouted the traffic of then to the .link url as a temporary fix.

edit: it seems that uBlock is also using the gitcdn service as one of its cdn-urls for some of their own built-in filters/features.
Search for gitcdn.xyz: https://raw.githubusercontent.com/gorhill/uBlock/master/assets/assets.json
 

JB007

Level 23
Verified
May 19, 2016
1,277
I am not sure if there was something blocking gitcdn from uBlock's side. But right now the only instance of Gitcdn.* that i could find was in uBlock Filters (built-in default) in the following line which refers to a European CDN service from the company Bunny.Net:

It seems to have two links one is GitCDN.link and the other being Gitcdn.xyz. The .link url being the only one having certificate issue. The .xyz seems to be the main marketed url from the developer.

The certificate issue seems to have been reported, and the corresponding issue ticket closed, over a week ago. it seemed the developer had some troubles with Cloudflare and rerouted the traffic of then to the .link url as a temporary fix.

edit: it seems that uBlock is also using the gitcdn service as one of its cdn-urls for some of their own built-in filters/features.
Search for gitcdn.xyz: https://raw.githubusercontent.com/gorhill/uBlock/master/assets/assets.json
Thanks @rain2reign
And only Kaspersky blocks this site ?
 
Last edited:

blackice

Level 33
Verified
Apr 1, 2019
2,205
Top