Trend Micro labels Mozilla download site (http://mozilla.cdn.leaseweb.com/firefox/releases/3.6.13/win32/en-US/Firefox Setup 3.6.13.exe) as malicious and blocks it - is it?
Using IE, I did a Bing search on "get firefox". Top result lists "http://www.mozilla.com/firefox/", which looks legit, so I click on it. That link forwards to "http://www.mozilla.com/en-US/firefox/". Click on the "Firefox 3.6 Free Download" box, which again all looks legit, and then Trend Micro spawns to warning windows: 1) (IE helper window) The URL that you are attempting to access is a potential security risk. Trend Micro OfficeScan has blocked this URL in keeping with network security policy.
URL: http://mozilla.cdn.leaseweb.com/firefox/releases/3.6.13/win32/en-US/Firefox%20Setup%203.6.13.exe
Risk Level: Risk level cannot be displayed because active scripting is disabled. High Medium Low
Details: For more information about this URL or to report it to Trend Micro for reclassification,visit http://reclassify.wrs.trendmicro.com.
2) (Trend Micro pop-up window) Trend Micro Web Reputation Query - Online System Type a website in the field below to:
• Check its reputation ranking/score • Submit feedback about a certain website
Complete website*: http://mozilla.cdn.leaseweb.com/firefox/releases/3.6.13/win32/en-US/Firefox Setup 3.6.13.exe
Only HTTP and HTTPS are supported. (e.g., http://www.trendmicro.com)
Web reputation result: This URL is currently listed as malicious.
All Replies (1)
This - http://mozilla.cdn.leaseweb.com/ - is a legitimate Mozilla download mirror web site.
http://www.mozilla.org/community/mirrors.html
As far as the Trend Micro Web Reputation Query - Online System:
http://reclassify.wrs.trendmicro.com/wrsonlinequery.aspx
http://mozilla.cdn.leaseweb.com/
Web reputation result: This URL is not currently listed as malicious.