Facebook buy sell swap complaining of mp4 video having virus or malware!

[smokingwheels]

Support intro

Sorry to hear you’re facing problems

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can

Nextcloud version (eg, 12.0.2):
Operating system and version (eg, Ubuntu 17.04):
Apache or nginx version (eg, Apache 2.4.25):
PHP version (eg, 7.1):

The issue you are facing:
My account will be suspended on https://www.facebook.com/groups/579892792356839/permalink/790754327937350/?notif_id=1547897059689716&notif_t=group_post_mention

Is this the first time you’ve seen this error? (Y):

Steps to replicate it:
Link a mp4 video with a comment (I think the comment on the download maybe causing it, can not re test or be banned)
Links http://wagnwashcloud.dogrusoz.net/index.php/s/t5Wkkb7R6wTgXDz

http://wagnwashcloud.dogrusoz.net/index.php/s/dXyG4d64fsrPZCs

[tflidd]

What kind of malware was detected?

If you put in the link at virustotal.com (https://www.virustotal.com/#/url/bdac00c078b9cda390ef7b7583774e79460c4f7da5ca22d702564b1794b4e5ad/detection), no anti-virus solution find an issue. Put a /download at the end of the link that it directly accesses the file.

Perhaps some other file, and they blocked the whole domain? A false positive?

[smokingwheels]

Sorry for the delay. Only just seen it in new category.

The My URL to test no msg.
http://cloud-party.undo.it/index.php/s/ysicK7BqtmDMbPQ/download

Result 2
Result 2 flagged even with download added.
Avira Phishing Dr.Web Malicious ESET Malware Fortinet Phishing Abusix Clean Acronis Clean

Dr.Web	known infection source
Forcepoint ThreatSeeker	dynamic dns
Sophos	information technology
Xcitium Verdict Cloud	media sharing

@tflidd What should I do it’s all true? Lol.

Information technology
Well I have way too many DNS requests for the average household IP in my area…
YaCy on my I7 desktop opened up swamps my NBN 25 connection and can cause upto 1.8 TB’s of traffic a month, I can’t do anything like watch tv…

[gas85]

It is already 4 and seems for DrWeb different links from your host were “infected”. Could you check what is you sharing? I mean check all links that are created by different users.

Just put my own shared links and seems ok, so I was not banned because of DynDNS / Selfhosting / File Sharing:

[gas85]

Jap, it has nothing to do with this particular File, whole domain was banned, potentially because of some other issues:

VirusTotal

[smokingwheels]

ok thanks I have another subdomain to try.
The undo .it domain in popular at the host.

@gas85 Do you know of any free DNS redirection services I may try and not to have this problem?

[smokingwheels]

The domain evils.in shows as clean.
I will give that a try…
Less popular.

[gas85]

Free Dynamic DNS - Managed DNS - Managed Email - Domain Registration - No-IP