0.nextyourcontent.com malware in AC68U ?

[mike37]

Sorry if this has been addressed. After updating ac68u to 384.12, and installing Diversion and Skynet, I scan the LAN and find RT-AC68R-A9D8 at 192.168.1.2 with a hostname of 0.nextyourcontent.com - described as malware on multiple webpages.

This address was reserved for Diversion use.

Questions? Have others found this? is this perhaps a flaw in my scanner (FING on Iphone)?

TIA

 

[ColinTaylor]

Yes, it's a false positive. It's because of the way the ad-blocker works.

https://www.snbforums.com/threads/diversion-the-router-ad-blocker.48538/page-58#post-441965

 

[thelonelycoder]

Just ran a test. What if I would add diversion-adblocking-ip.address permanently as the first entry in the blocking list in Diversion?
.address is not a TLD nor is it registered.
In the iOS Fing app, this would register like so:

 

[Butterfly Bones]

What if I would add diversion-adblocking-ip.address permanently as the first entry in the blocking list in Diversion?

Good idea. Might save these kinds of questions repeating.

 

[mike37]

Thank You, Colin Taylor and others!!