http://dashboard.mearki.com malicious redirection

[tantony]

When I try to go to dashboard.mearki.co/m, it takes me to dashboard.mearki.co/m/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqcyI6MX0.fADWc9hUOlh58R9UzufQBROmie3I7c7vE835oE6YmU4&uuid=59e3dfd2-41cf-11e9-a407-e65cedabf5ba, and I'm getting alerts from Symantec Endpoint Protection.

A high-risk intrusion was detected on Tony Antony Laptop within group Share Group on 3/8/2019 1:24:03 PM.

IPS Alert Name
Web Attack: Malicious Redirection 21

Status
Blocked

Attack Signature
N/A

Targeted Application
N/A

Attacking IP
162.210.196.172

Targeted IP
172.16.2.235

Targeted Port Number
61382

[jdsilva]

Maybe try the correct URL?

http://dashboard.meraki.com

[tantony]

Yes, that's the correct URL, but my browser auto completes it to the link on my post.  

[jdsilva]

---

@tantony wrote:

Yes, that's the correct URL, but my browser auto completes it to the link on my post.  

---

Just because your browser is auto-completing it doesn't mean it is right. Mearki.com is not correct. 

[jdsilva · Accepted solution]

https://en.wikipedia.org/wiki/Typosquatting

[tantony]

Thanks, so there's nothing to stop it?  My Symantec scan found no viruses.

[BrechtSchamp]

You probably mistyped it once and now your browser thinks you want to go there every time. Try clearing your browser history.

[PhilipDAth]

@tantony just to make it clear what @jdsilva  is saying ...

You are typing dashboard.mearki.com and you should be typing dashboard.meraki.com.

There is nothing that can be done to prevent you typing in the wrong URL.

@CarolineS or @MeredithW can you please edit the original post and remove the links so they can not be clicked on.  You can leave the actual text.  A high profile "property" linking to a malware site will cause that malware site to be promoted in Google and gain greater credibility.  Additionally we don't want other users actually clicking on the link to the malware.

Additionally can you please forward this to your legal department.  The owners of mearki.com are clearly sub-squatters and are using the Meraki trademark to advance their position - and clearly they don't have consent to use that trademark.

[MeredithW]

Done, thanks Philip!

[tantony]

Thanks. I caught that mistake after a few minutes. I should stop drinking tea before logging into Meraki to slow down my typing :). I also enabled SMS authentication. 

[BlakeRichardson]

@tantony  What are you mixing with your tea?  We all have made that mistake, thats what makes us human.