Advice Request Unicef link is dangerous according to Kaspersky

[JB007]

Hello,
I received a mail from UNICEF and I'm very surprised because it contains a dangerous link according to Kaspersky:

Kaspersky Threat Intelligence Portal

Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and URLs for threats, malware, viruses

opentip.kaspersky.com

and VT:

VirusTotal

VirusTotal

www.virustotal.com

 

[harlan4096]

Already sent to K. analysts, waiting verdict...

 

[upnorth]

@JB007 , was this mail received in your normal inbox or the spambox? Unicef spam is extremely common.

I highly doubt it's even a official Unicef subdomain after a quick search on whois. That's a bit too suspicious information and should be a huge Red Flag/warning.

Whois boutique-solidaire.com

Whois Lookup for boutique-solidaire.com

www.whois.com

Unicefs official domain :

Whois unicef.org

Whois Lookup for unicef.org

www.whois.com

 

[Ink]

We're you surprised because:
1. You got an email from Unicef?
or
2. Kaspersky notified you of a potential unsafe link?

Also, which email provider / client do you use?

Most common providers let you report Phishing emails, or you can forward Scams to a specialised email address of said company.

 

[JB007]

@JB007 , was this mail received in your normal inbox or the spambox? Unicef spam is extremely common.

I highly doubt it's even a official Unicef subdomain after a quick search on whois. That's a bit too suspicious information and should be a huge Red Flag/warning.

Whois boutique-solidaire.com

Whois Lookup for boutique-solidaire.com

www.whois.com

Unicefs official domain :

Whois unicef.org

Whois Lookup for unicef.org

www.whois.com

I received it on my normal inbox (oulook and also thunderbird on another laptop).

 

[JB007]

We're you surprised because:
1. You got an email from Unicef?
or
2. Kaspersky notified you of a potential unsafe link?

Also, which email provider / client do you use?

Most common providers let you report Phishing emails, or you can forward Scams to a specialised email address of said company.

1/ no because I purcgased some things at UNICEF boutique in the past
2/yes because of 1/ and also because of VT (only Kaspersky detects this link as dangerous).

 

[TairikuOkami]

https link links to the http webpage, that itself might have triggered the phishing alert.

 

[JB007]

Also SUCURI: "Site Issue/Medium Security Risk"

Sucuri Security

SiteCheck is a website security scanner that checks any site, link, or URL for malware, viruses, blacklist status, seo spam, or malicious code. Check your website safety for free with Sucuri Security.

sitecheck.sucuri.net

 

[Freud2004]

Yes Kis block the address

 

[plat]

Respect to Kaspersky Link opened with Opera latest version, no 3rd party antivirus. "Bad request" probably corresponds to the timeout issue reported in JB007's Sucuri link (at least that's what googling says).

Spoiler: br

For funsies, I tried the link in "Is it down right now" and this is what I got. Another site checker said this was not a valid domain. Hmmm. interesting.

Spoiler: site issue

 

[harlan4096]

Hello,

Dear User,

Thank you for sending a request to Kaspersky!
We checked the link you have sent us.
It has been confirmed as a false positive. The link will be excluded from our anti-phishing databases.

Best regards, Web Content Analyst