[clamav-users] Mirror redirect to emeksensin.com

[Al Varnell]

It has not been brought up, but they will need the IP address to even begin to look into this.

-Al-

On Tue, Nov 10, 2015 at 11:53 AM, Derek Smith wrote:
> 
> Hello,
> 
> I am new to ClamAV and was playing with the URL's used to fetch updates, database.clamav.net and db.us.clamav.net.  I typed one of them into my browser and was redirected to emeksensin.com, which appears to be a Turkish Arts and Crafts site. Looking at the last 30 days of network traffic it appears that this began on Thursday, October 29th and has been happening once every four days or so. Freshclam works fine the rest of the time, but on these occasions will be redirected to emeksensin, requesting main.cvd or safebrowsing.cvd, and luckily only receive a 404 in return. 
> 
> I searched the clamav-users list archive for each month of 2015 and did not find any mention of this. Has anyone encountered this issue, or has it already been brought up? 
> 
> Thank you,
> smithd
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2366 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20151110/a2214ba9/attachment.bin>